Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa
File:                     c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa (raw, json)
Hash identifier:          NUTSG8+26o2Hh0XHBodi+3kd9APT7VGHgAxxPN3skj4=
Subject key identifier:   4F:7E:D0:25:6D:C0:D5:94:B2:DE:87:54:35:BC:04:46:0A:AF:3F:88
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7BD3328E9235EA4C7C500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54288
IP address blocks:        64.62.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:bd:33:28:e9:23:5e:a4:c7:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=27e13f20-e81d-42e8-a75d-1f5cad744942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:fb:cc:06:6b:47:e4:ad:ca:01:f1:c4:30:
                    36:e6:db:21:99:1a:5a:42:36:22:63:3d:26:dd:3e:
                    ea:4f:86:8e:ad:58:f3:5a:ad:39:26:e9:8c:c5:50:
                    b2:ec:fe:2d:56:db:71:7a:9b:c3:96:32:f9:1f:54:
                    d3:6a:ec:b8:de:4c:0a:20:d2:22:42:40:8d:04:5f:
                    1e:be:c0:6a:03:40:cb:75:07:c1:9d:20:2c:21:f3:
                    31:cb:e2:a5:b3:70:d2:86:58:b3:d1:5d:82:58:36:
                    9b:98:c8:33:62:7d:06:a6:ad:92:78:b7:be:47:98:
                    96:37:55:87:da:b5:38:8a:60:50:9b:7b:15:18:e0:
                    6f:51:44:9e:cc:26:11:fe:ab:e3:db:18:3a:21:1c:
                    a2:17:17:e1:6d:14:5a:15:04:1a:93:f8:8d:bf:8a:
                    d9:48:c7:a5:b5:f0:a7:40:7c:ea:98:02:7d:c5:80:
                    2a:1f:de:1b:7c:11:45:ce:1a:a7:48:82:85:53:94:
                    18:52:71:d5:bb:95:55:67:49:14:4c:5e:c4:4d:75:
                    da:9d:5b:94:be:85:34:c9:9b:1a:c4:f3:8d:e8:54:
                    2c:28:5f:ef:a5:47:f6:b5:71:4e:1b:39:84:f7:d8:
                    68:15:c7:36:ce:00:f8:46:35:84:89:2e:ad:59:c5:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7E:D0:25:6D:C0:D5:94:B2:DE:87:54:35:BC:04:46:0A:AF:3F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c556dbfe-b6d5-3157-8015-0f074ae4fe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:db:75:5f:e2:2e:83:c7:3b:30:bc:30:63:29:70:a0:bc:
         7f:f8:bf:da:bb:64:ed:df:e9:d3:41:7a:5a:1a:c9:45:3c:c3:
         4a:d8:eb:20:67:92:43:c0:20:29:6e:5e:a2:45:b6:fb:1a:b4:
         d9:09:c0:69:e7:d4:b0:6c:dc:83:a3:aa:15:36:74:ce:05:c7:
         a8:2c:4d:68:b4:83:9f:d4:ca:52:4d:c8:87:c4:bd:12:50:db:
         8f:55:1f:c3:d5:e5:af:e1:b0:06:df:32:9e:7a:98:1b:a8:24:
         51:e4:ce:ce:4f:95:8c:d3:cf:f2:d1:be:6a:71:9b:82:e0:a7:
         96:b1:6b:f8:5a:e1:74:ab:b0:b6:25:98:3e:0d:e7:7b:11:24:
         ad:07:b7:2e:a7:89:f7:bc:b7:0f:cb:e7:48:97:3e:33:09:8a:
         7c:f9:81:b2:3b:81:03:55:8d:2f:b5:6c:b5:7a:e7:f7:8f:25:
         a1:cb:84:74:9b:9a:28:e1:ea:73:b0:ce:53:fc:b2:12:46:4a:
         04:b4:eb:3f:28:3c:0a:aa:52:ae:f7:14:7c:22:b3:48:e2:90:
         06:22:ec:71:08:d5:97:ed:ba:b8:cc:f6:d3:db:5a:6a:d2:51:
         8e:8f:d5:1f:8b:a7:d7:57:00:c3:99:53:2b:3d:5a:31:b5:93:
         e9:57:fb:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ170zKOkjXqTHxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
MjdlMTNmMjAtZTgxZC00MmU4LWE3NWQtMWY1Y2FkNzQ0OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6b7zAZrR+StygHxxDA25tshmRpaQjYiYz0m
3T7qT4aOrVjzWq05JumMxVCy7P4tVttxepvDljL5H1TTauy43kwKINIiQkCNBF8e
vsBqA0DLdQfBnSAsIfMxy+Kls3DShliz0V2CWDabmMgzYn0Gpq2SeLe+R5iWN1WH
2rU4imBQm3sVGOBvUUSezCYR/qvj2xg6IRyiFxfhbRRaFQQak/iNv4rZSMeltfCn
QHzqmAJ9xYAqH94bfBFFzhqnSIKFU5QYUnHVu5VVZ0kUTF7ETXXanVuUvoU0yZsa
xPON6FQsKF/vpUf2tXFOGzmE99hoFcc2zgD4RjWEiS6tWcVCTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9+0CVtwNWUst6HVDW8BEYKrz+IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzU1NmRiZmUtYjZkNS0z
MTU3LTgwMTUtMGYwNzRhZTRmZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDw23Vf4i6DxzswvDBjKXCgvH/4v9q7ZO3f6dNBeloayUU8w0rY6yBn
kkPAICluXqJFtvsatNkJwGnn1LBs3IOjqhU2dM4Fx6gsTWi0g5/UylJNyIfEvRJQ
249VH8PV5a/hsAbfMp56mBuoJFHkzs5PlYzTz/LRvmpxm4Lgp5axa/ha4XSrsLYl
mD4N53sRJK0Hty6nife8tw/L50iXPjMJinz5gbI7gQNVjS+1bLV65/ePJaHLhHSb
mijh6nOwzlP8shJGSgS06z8oPAqqUq73FHwis0jikAYi7HEI1ZfturjM9tPbWmrS
UY6P1R+Lp9dXAMOZUys9WjG1k+lX+w8=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:54 2025 by rpki-client