Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/7adc5a60-4651-3030-acd8-f244b3bbe0da.roa
File:                     7adc5a60-4651-3030-acd8-f244b3bbe0da.roa (raw, json)
Hash identifier:          XMa9lc9TnpMZRFztwlgUpZk8C+r/zPr0CUwhjVM3G4E=
Subject key identifier:   BB:78:50:BA:F9:D6:54:E1:8B:14:F9:FC:6A:5F:53:6F:0E:25:EA:25
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F4328584A8410F7D101E2830880573440
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/7adc5a60-4651-3030-acd8-f244b3bbe0da.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f7:d1:01:e2:83:08:80:57:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d0875a47-0f11-4d07-8c23-996be5ebdc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:96:bc:34:35:17:c3:78:0e:6c:d2:2f:ed:
                    30:d0:80:c1:f4:bc:bb:f0:7c:07:b1:fb:cd:d0:7d:
                    a5:a0:d3:83:65:6d:44:af:a7:04:e9:1c:88:71:39:
                    ce:88:9f:6d:98:9b:00:96:94:44:02:aa:c0:92:9a:
                    b7:02:73:63:73:32:2f:aa:bd:7b:87:9a:b4:90:cd:
                    3f:c1:52:75:3f:9b:50:bc:b3:7f:4c:52:5c:c3:3d:
                    93:c2:e5:a9:4f:7c:70:34:19:50:54:0f:68:b7:0c:
                    e6:c3:f4:57:c3:0f:41:9d:c7:80:f6:49:e1:80:00:
                    40:7d:52:5b:f7:b9:89:78:36:4d:cf:ef:8c:a1:7b:
                    75:a0:68:6b:7d:3b:47:f6:89:e3:79:4d:25:71:ca:
                    6c:85:0a:7a:f7:48:1b:df:71:2d:af:1d:23:dd:68:
                    1b:c2:09:d3:2b:c7:39:46:03:d1:d0:4b:58:ca:6a:
                    d8:9e:1c:a8:10:36:30:6d:dd:5d:a5:7f:7e:76:9e:
                    87:b2:d8:d4:b1:c7:50:27:59:dc:a7:21:9f:f4:f6:
                    eb:63:b8:9b:5f:af:b1:b0:63:55:d4:3d:87:75:07:
                    fe:f0:26:2a:73:fa:b1:43:a5:8d:20:47:53:68:53:
                    8d:4e:28:69:6b:1f:3c:0e:50:ce:4b:97:dc:87:fc:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:78:50:BA:F9:D6:54:E1:8B:14:F9:FC:6A:5F:53:6F:0E:25:EA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/7adc5a60-4651-3030-acd8-f244b3bbe0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:2b:bc:80:eb:8c:79:6c:bc:75:2b:53:fd:d4:f2:71:fc:
         91:f6:35:54:11:e0:69:85:48:50:de:5c:55:e4:b9:fb:9b:a1:
         dd:e6:e5:26:e0:f8:e1:f2:ff:20:e3:f8:b4:2b:23:87:52:35:
         34:e6:70:8f:95:59:cf:e3:7a:09:cb:4a:90:94:a2:b3:6c:47:
         86:cc:7d:9f:ab:8c:78:b3:51:74:0e:1b:fa:2a:d1:fb:25:71:
         2e:c9:f5:9d:3d:7b:8d:fe:d8:cd:a5:0a:ff:88:d5:18:d3:f8:
         32:51:f9:67:a3:1f:71:da:ef:b3:12:f0:49:db:37:78:e1:32:
         4c:2b:dd:c7:87:20:d9:89:db:ff:f1:ad:c9:ee:8a:85:5e:55:
         08:fb:5e:37:b0:21:99:6d:d8:36:43:62:16:9e:2a:3a:a5:41:
         5d:52:49:38:85:48:8f:51:1c:39:50:3c:33:0b:80:7f:76:ac:
         d4:b4:93:4b:a0:5d:6f:6c:c0:f2:7b:e0:af:d6:fb:91:0f:01:
         56:91:83:67:42:36:3c:2d:51:69:c4:6f:9e:0a:10:e1:c5:8b:
         c5:99:b3:8a:d9:25:65:07:8f:38:73:03:40:f2:0f:42:b6:3b:
         04:60:f7:95:9e:8b:8e:ae:a0:7b:51:6c:60:e0:55:2a:01:36:
         8e:b8:39:a7
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqEEPfRAeKDCIBXNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE2YjlhZmItOWU0Ni00YWIwLTgwMjktN2Y0ZDExNjhi
YjM3MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDA4NzVhNDctMGYxMS00ZDA3LThjMjMtOTk2YmU1ZWJkYzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4imWvDQ1F8N4DmzSL+0w0IDB9Ly78HwHsfvN
0H2loNODZW1Er6cE6RyIcTnOiJ9tmJsAlpREAqrAkpq3AnNjczIvqr17h5q0kM0/
wVJ1P5tQvLN/TFJcwz2TwuWpT3xwNBlQVA9otwzmw/RXww9BnceA9knhgABAfVJb
97mJeDZNz++MoXt1oGhrfTtH9onjeU0lccpshQp690gb33Etrx0j3WgbwgnTK8c5
RgPR0EtYymrYnhyoEDYwbd1dpX9+dp6HstjUscdQJ1ncpyGf9PbrY7ibX6+xsGNV
1D2HdQf+8CYqc/qxQ6WNIEdTaFONTihpax88DlDOS5fch/wyywIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFLt4ULr51lThixT5/GpfU28OJeolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTZi
OWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRkMTE2OGJiMzcvN2FkYzVhNjAtNDY1MS0z
MDMwLWFjZDgtZjI0NGIzYmJlMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTE2YjlhZmItOWU0Ni00YWIwLTgw
MjktN2Y0ZDExNjhiYjM3LzkxNmI5YWZiLTllNDYtNGFiMC04MDI5LTdmNGQxMTY4
YmIzNy5jcmwwHwYDVR0jBBgwFoAUo2/sfo22meVwUQcAlWiGLWoQLcowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MTZiOWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRk
MTE2OGJiMzcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCrfmgMA4E
AgACMAgDBgQmAvsVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzziu8gOuMeWy8dStT/dTycfyR9jVUEeBp
hUhQ3lxV5Ln7m6Hd5uUm4Pjh8v8g4/i0KyOHUjU05nCPlVnP43oJy0qQlKKzbEeG
zH2fq4x4s1F0Dhv6KtH7JXEuyfWdPXuN/tjNpQr/iNUY0/gyUflnox9x2u+zEvBJ
2zd44TJMK93HhyDZidv/8a3J7oqFXlUI+143sCGZbdg2Q2IWnio6pUFdUkk4hUiP
URw5UDwzC4B/dqzUtJNLoF1vbMDye+Cv1vuRDwFWkYNnQjY8LVFpxG+eChDhxYvF
mbOK2SVlB484cwNA8g9CtjsEYPeVnouOrqB7UWxg4FUqATaOuDmn
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:05 2025 by rpki-client