Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc848910-3858-3eb0-b090-bfa08464c308.roa
File:                     cc848910-3858-3eb0-b090-bfa08464c308.roa (raw, json)
Hash identifier:          3ZzIb/LOzUj/ey4yijGQsB9jlsGa7XWg6xk+VVZ9ZYw=
Subject key identifier:   CD:9F:4C:A9:D5:23:BE:7B:5B:88:81:4E:79:7B:A9:51:2D:2B:51:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D346A22183F5B4378AF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc848910-3858-3eb0-b090-bfa08464c308.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     23700
IP address blocks:        96.7.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:34:6a:22:18:3f:5b:43:78:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=1a81b36a-cac5-4208-906e-07e4e96baefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:0e:1b:65:fb:f7:ba:e0:e5:80:e2:e0:4f:
                    e0:ea:26:3d:09:35:1d:b1:03:9e:cf:94:67:71:a3:
                    98:63:40:5c:ec:8c:08:ee:35:46:d3:a2:2d:69:f1:
                    98:96:43:8c:e9:75:a5:3e:ff:de:4c:99:98:32:4f:
                    d2:d4:0b:91:dc:a5:72:f1:ee:87:a7:4e:ca:9f:95:
                    6e:a6:6c:96:72:3e:89:2e:ea:d6:29:d2:30:c9:1c:
                    51:ec:8f:d9:ab:8e:0c:54:a7:c1:57:60:9b:de:47:
                    69:98:8f:9e:b0:0d:21:57:53:4c:ba:13:4d:ab:20:
                    d3:61:53:27:32:df:e2:f3:a8:27:10:80:23:ab:0a:
                    98:8e:ab:a7:8a:dc:7e:05:8f:d9:7c:ce:88:3b:4b:
                    32:5a:83:43:ef:87:a2:47:19:07:53:aa:55:bc:f7:
                    cc:97:9f:98:e6:ef:b0:83:d4:4c:6a:39:47:c9:f5:
                    fb:ec:f8:06:d3:b4:68:c8:64:8f:0b:d8:67:7f:ed:
                    5f:47:87:17:52:59:c1:00:23:58:7b:06:3b:5c:a6:
                    88:49:73:ce:c7:ba:57:d9:25:25:8e:93:56:7d:62:
                    73:46:75:d4:a3:fb:6d:79:ea:6a:08:fb:63:38:48:
                    dc:e6:c7:05:b2:55:5e:f9:3b:80:0c:bd:11:f9:93:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:4C:A9:D5:23:BE:7B:5B:88:81:4E:79:7B:A9:51:2D:2B:51:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc848910-3858-3eb0-b090-bfa08464c308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:da:0d:05:1d:79:66:de:4f:11:55:b2:21:5a:1b:c9:f5:4b:
         c0:13:1a:7d:22:3f:0a:9b:65:ff:46:02:bb:ea:b8:0b:c1:48:
         77:68:da:c6:f7:d5:51:76:63:09:61:37:87:fa:26:35:e7:0c:
         cf:0b:3d:0d:fe:d1:d8:ca:b1:0f:d2:4a:ef:62:4f:a7:36:11:
         37:e4:18:89:1a:bf:db:42:c7:a0:7d:cc:c7:f0:88:9f:a7:d0:
         1f:dd:fc:76:7c:33:7d:6a:85:b7:df:89:f9:ea:63:85:89:5a:
         6a:66:08:4b:aa:15:e4:08:48:cb:97:e9:09:01:e7:37:e3:ff:
         7d:2f:4f:9b:d7:e0:bd:09:22:c4:b0:c4:94:5f:22:42:9c:c9:
         ea:58:5f:b6:14:86:5f:e9:17:9f:64:53:8d:80:a3:f0:49:c6:
         16:f4:d4:d0:f0:72:81:7f:68:0c:fd:2a:ce:d7:10:d1:75:3d:
         52:83:62:40:1e:cd:20:18:38:14:61:3e:50:8e:29:84:aa:3c:
         4a:60:a0:2e:44:12:43:1b:32:3f:5a:13:91:c2:94:5c:4d:b1:
         07:e5:21:d5:d2:06:d4:7f:e5:76:bd:c3:03:cd:a8:2e:af:83:
         18:a0:c0:45:1f:52:3e:f2:c2:65:f4:81:90:43:e2:e8:47:c0:
         e0:2d:0c:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTRqIhg/W0N4r4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MWE4MWIzNmEtY2FjNS00MjA4LTkwNmUtMDdlNGU5NmJhZWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipAOG2X797rg5YDi4E/g6iY9CTUdsQOez5Rn
caOYY0Bc7IwI7jVG06ItafGYlkOM6XWlPv/eTJmYMk/S1AuR3KVy8e6Hp07Kn5Vu
pmyWcj6JLurWKdIwyRxR7I/Zq44MVKfBV2Cb3kdpmI+esA0hV1NMuhNNqyDTYVMn
Mt/i86gnEIAjqwqYjqunitx+BY/ZfM6IO0syWoND74eiRxkHU6pVvPfMl5+Y5u+w
g9RMajlHyfX77PgG07RoyGSPC9hnf+1fR4cXUlnBACNYewY7XKaISXPOx7pX2SUl
jpNWfWJzRnXUo/tteepqCPtjOEjc5scFslVe+TuADL0R+ZOGWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2fTKnVI757W4iBTnl7qVEtK1EDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M4NDg5MTAtMzg1OC0z
ZWIwLWIwOTAtYmZhMDg0NjRjMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAc8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALaDQUdeWbeTxFVsiFaG8n1S8ATGn0iPwqbZf9GArvquAvBSHdo2sb3
1VF2YwlhN4f6JjXnDM8LPQ3+0djKsQ/SSu9iT6c2ETfkGIkav9tCx6B9zMfwiJ+n
0B/d/HZ8M31qhbffifnqY4WJWmpmCEuqFeQISMuX6QkB5zfj/30vT5vX4L0JIsSw
xJRfIkKcyepYX7YUhl/pF59kU42Ao/BJxhb01NDwcoF/aAz9Ks7XENF1PVKDYkAe
zSAYOBRhPlCOKYSqPEpgoC5EEkMbMj9aE5HClFxNsQflIdXSBtR/5Xa9wwPNqC6v
gxigwEUfUj7ywmX0gZBD4uhHwOAtDMM=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:19:36 2025 by rpki-client