Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15765c76-6498-3158-9680-d0349bfa1474.roa
File:                     15765c76-6498-3158-9680-d0349bfa1474.roa (raw, json)
Hash identifier:          53WR1c8w/0+B6W2QQ9MWNAXphIjAX532DGB7CTQnbgY=
Subject key identifier:   4C:EA:9D:6D:B7:2E:2F:6F:F6:75:B0:E1:15:E0:26:F2:ED:79:3D:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D2EF0CDCE7993641A5D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15765c76-6498-3158-9680-d0349bfa1474.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16625
IP address blocks:        96.7.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:2e:f0:cd:ce:79:93:64:1a:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=d6999545-e44d-4fad-b38b-68efd56ddec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:8e:ed:80:b9:aa:25:73:0b:13:c3:02:d6:
                    b2:2e:65:02:1f:fa:8b:c3:de:b7:e4:34:da:07:f1:
                    14:8e:cd:00:d7:04:2c:60:2a:df:cd:54:27:7b:d7:
                    02:6f:c3:89:af:76:3d:de:38:79:f5:d8:d0:08:5a:
                    89:74:71:1e:a2:df:39:e2:ce:9c:09:e4:35:eb:9e:
                    bf:bb:72:18:be:61:b9:8b:ec:41:3a:f1:c2:32:9a:
                    db:2e:fd:fe:15:16:d6:ca:12:2e:6b:66:d9:c7:b7:
                    8f:73:05:4a:8a:1e:9a:6b:93:1b:8c:ce:50:19:56:
                    d4:4e:6d:e7:ba:de:21:87:b0:d2:1c:a3:1e:42:23:
                    b0:d1:c0:cb:7c:46:4a:3f:0f:f4:19:fb:28:0f:1e:
                    6a:b0:08:b5:0c:5f:25:f9:5a:c0:0e:58:85:c7:8a:
                    7b:d5:0f:be:7e:87:ca:80:5c:c4:62:61:1c:54:cc:
                    d1:2f:1e:96:d7:aa:1a:40:e0:98:b3:2c:78:8a:8b:
                    1f:05:f2:69:37:fa:69:f8:20:17:39:4c:d8:f1:b7:
                    df:09:e8:0a:90:6a:6b:b1:9b:55:6f:b0:19:a8:bd:
                    a5:e9:a5:36:1b:7d:4f:bc:4f:5c:c8:33:93:c2:c6:
                    a9:5b:f3:1e:f0:c6:41:50:c5:7d:f6:a1:34:a8:8d:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:9D:6D:B7:2E:2F:6F:F6:75:B0:E1:15:E0:26:F2:ED:79:3D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15765c76-6498-3158-9680-d0349bfa1474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:28:9f:ad:b4:6f:12:b7:75:40:9c:70:eb:40:f7:91:0d:
         55:85:e0:c5:d3:5a:fa:b9:fc:3c:8d:2a:31:8c:6e:b6:5e:79:
         a5:01:d5:c1:92:33:b9:6c:a3:97:4b:a0:c3:db:4d:77:f4:84:
         d0:96:06:48:de:16:2c:9d:1e:66:d2:3b:fa:3e:c3:d8:5d:e0:
         ba:5b:e0:da:1f:d3:3b:a5:b3:a5:39:88:a1:0b:5a:1c:60:f9:
         62:4d:f2:0a:37:24:c0:74:fe:fb:8a:d5:ec:31:b1:5a:41:53:
         d2:e0:60:de:56:e9:14:86:44:7b:1c:ec:43:32:59:03:fa:47:
         79:2b:3a:2b:31:f7:48:4f:a1:db:5e:10:00:73:73:56:b2:cb:
         c1:b0:62:43:80:32:ba:dd:1a:b3:16:8c:37:fb:5a:8e:ba:4d:
         20:c6:2a:99:0b:24:91:11:8d:db:17:ff:00:c5:7e:4e:70:9a:
         74:23:a9:65:59:5e:a6:32:5f:55:5e:b4:44:9c:92:a4:70:6e:
         cf:af:c3:65:b1:63:33:5e:65:ac:1a:e0:50:a9:65:69:1b:30:
         88:1c:89:af:3f:53:ee:72:99:00:72:25:77:34:52:a1:57:d2:
         97:88:30:ca:7a:4f:ce:53:6a:83:34:df:79:d5:0e:d3:9a:8e:
         f5:dd:88:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS7wzc55k2QaXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZDY5OTk1NDUtZTQ0ZC00ZmFkLWIzOGItNjhlZmQ1NmRkZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBKO7YC5qiVzCxPDAtayLmUCH/qLw9635DTa
B/EUjs0A1wQsYCrfzVQne9cCb8OJr3Y93jh59djQCFqJdHEeot854s6cCeQ1656/
u3IYvmG5i+xBOvHCMprbLv3+FRbWyhIua2bZx7ePcwVKih6aa5MbjM5QGVbUTm3n
ut4hh7DSHKMeQiOw0cDLfEZKPw/0GfsoDx5qsAi1DF8l+VrADliFx4p71Q++fofK
gFzEYmEcVMzRLx6W16oaQOCYsyx4iosfBfJpN/pp+CAXOUzY8bffCegKkGprsZtV
b7AZqL2l6aU2G31PvE9cyDOTwsapW/Me8MZBUMV99qE0qI3NAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzqnW23Li9v9nWw4RXgJvLteT1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU3NjVjNzYtNjQ5OC0z
MTU4LTk2ODAtZDAzNDliZmExNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYAfAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDtKJ+ttG8St3VAnHDrQPeRDVWF4MXTWvq5/DyNKjGMbrZeeaUB1cGS
M7lso5dLoMPbTXf0hNCWBkjeFiydHmbSO/o+w9hd4Lpb4Nof0zuls6U5iKELWhxg
+WJN8go3JMB0/vuK1ewxsVpBU9LgYN5W6RSGRHsc7EMyWQP6R3krOisx90hPodte
EABzc1ayy8GwYkOAMrrdGrMWjDf7Wo66TSDGKpkLJJERjdsX/wDFfk5wmnQjqWVZ
XqYyX1VetESckqRwbs+vw2WxYzNeZawa4FCpZWkbMIgcia8/U+5ymQByJXc0UqFX
0peIMMp6T85TaoM033nVDtOajvXdiHY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:43:30 2025 by rpki-client