Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47932dd3-0534-37b7-a2e9-041621769083.roa
File:                     47932dd3-0534-37b7-a2e9-041621769083.roa (raw, json)
Hash identifier:          Wkz/C4PXkfq8co1Wqu4vTDK/jr4BwTQfljCZusGWCXM=
Subject key identifier:   6C:1D:04:EF:36:3D:74:44:44:6A:A2:F6:D6:93:B8:10:95:49:84:50
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BAA97B99C9B39735A686441C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47932dd3-0534-37b7-a2e9-041621769083.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        129.153.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:b9:9c:9b:39:73:5a:68:64:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=eab8d321-b1c0-4f99-b84e-331fcbad306f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:3e:e7:47:9f:15:ba:11:34:30:a0:b5:e8:
                    cc:c9:11:3e:ed:21:92:ae:ee:82:4a:9c:ac:ff:18:
                    40:50:90:84:7a:8a:e2:50:9c:7e:6b:93:67:f9:9a:
                    27:76:64:a4:4a:73:77:92:57:20:1f:02:2d:1f:6b:
                    9c:04:6e:cb:d9:81:c5:3e:11:84:08:1b:36:ef:b7:
                    52:52:34:43:3f:ae:27:ff:65:1e:2c:8a:33:8b:91:
                    46:10:e1:2c:4a:33:8f:80:62:33:a5:6a:55:65:3e:
                    70:70:83:eb:fc:1c:ed:2a:1a:59:8b:a0:7f:4a:ce:
                    d1:c2:05:bf:4d:4a:18:3f:62:64:e0:f5:88:74:94:
                    53:9a:b8:88:e2:1d:c3:a6:2f:28:6d:6a:4b:cf:fe:
                    af:6c:97:20:ce:e4:54:0b:4b:2c:92:c7:04:96:a8:
                    26:64:89:95:b5:c7:82:8b:d5:26:e4:06:82:4a:2d:
                    ce:7f:54:05:ba:47:2b:ab:49:f8:7e:1a:75:43:b5:
                    ec:49:f7:4f:bd:5e:00:d0:41:9a:1b:c7:1f:4e:95:
                    64:f1:44:f0:79:c0:e0:e1:47:09:04:c6:fd:f2:88:
                    48:12:c0:5b:53:33:5d:58:49:3a:ad:4d:48:9f:5c:
                    e5:31:8c:0d:d4:2c:2a:d0:ef:eb:f3:9f:93:9a:9d:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:04:EF:36:3D:74:44:44:6A:A2:F6:D6:93:B8:10:95:49:84:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47932dd3-0534-37b7-a2e9-041621769083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.153.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6d:7c:73:18:cf:29:74:be:d2:54:5d:d1:99:ab:80:85:e4:
         0e:b6:93:60:f2:19:a9:df:22:7e:74:3e:1e:c0:37:34:c0:2b:
         aa:95:d3:f3:55:e9:55:c6:d3:1e:2d:73:79:1e:26:c6:27:7f:
         ee:87:e1:dc:34:16:f0:30:cd:6b:c8:23:d3:f1:70:fb:75:05:
         58:41:64:2f:98:b9:d8:95:b2:2a:2c:e0:05:58:52:14:97:e1:
         fe:25:83:9b:2f:15:45:de:75:f6:79:9a:fe:27:61:c9:fa:f8:
         83:b1:d1:ab:82:0e:11:e7:61:f3:95:59:97:2f:56:78:d9:94:
         24:d7:00:80:cf:8d:1f:cb:d0:e3:ec:e8:6a:7d:02:bb:46:c2:
         d1:a3:b1:3b:a3:65:5f:f1:25:ed:21:c1:26:0a:17:af:dc:7f:
         16:26:17:92:6c:1b:9e:15:d2:c2:27:45:92:25:bb:c4:35:6d:
         af:0d:ae:a2:1c:07:3c:c0:05:2d:99:97:74:04:72:83:00:c2:
         87:30:49:21:68:5d:dc:c0:d8:f8:47:f8:55:88:0f:c9:8e:fa:
         c3:ee:30:e8:d2:95:11:97:7d:ce:3a:dd:d2:43:f5:89:bf:21:
         b6:44:f2:bd:bd:a7:22:28:64:f3:eb:2a:df:87:be:c4:21:d2:
         fc:bd:6c:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7mcmzlzWmhkQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZWFiOGQzMjEtYjFjMC00Zjk5LWI4NGUtMzMxZmNiYWQzMDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihE+50efFboRNDCgtejMyRE+7SGSru6CSpys
/xhAUJCEeoriUJx+a5Nn+ZondmSkSnN3klcgHwItH2ucBG7L2YHFPhGECBs277dS
UjRDP64n/2UeLIozi5FGEOEsSjOPgGIzpWpVZT5wcIPr/BztKhpZi6B/Ss7RwgW/
TUoYP2Jk4PWIdJRTmriI4h3Dpi8obWpLz/6vbJcgzuRUC0sskscElqgmZImVtceC
i9Um5AaCSi3Of1QFukcrq0n4fhp1Q7XsSfdPvV4A0EGaG8cfTpVk8UTwecDg4UcJ
BMb98ohIEsBbUzNdWEk6rU1In1zlMYwN1Cwq0O/r85+Tmp1TeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwdBO82PXRERGqi9taTuBCVSYRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDc5MzJkZDMtMDUzNC0z
N2I3LWEyZTktMDQxNjIxNzY5MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFtfHMYzyl0vtJUXdGZq4CF5A62k2DyGanfIn50Ph7ANzTAK6qV0/NV
6VXG0x4tc3keJsYnf+6H4dw0FvAwzWvII9PxcPt1BVhBZC+YudiVsios4AVYUhSX
4f4lg5svFUXedfZ5mv4nYcn6+IOx0auCDhHnYfOVWZcvVnjZlCTXAIDPjR/L0OPs
6Gp9ArtGwtGjsTujZV/xJe0hwSYKF6/cfxYmF5JsG54V0sInRZIlu8Q1ba8NrqIc
BzzABS2Zl3QEcoMAwocwSSFoXdzA2PhH+FWID8mO+sPuMOjSlRGXfc463dJD9Ym/
IbZE8r29pyIoZPPrKt+HvsQh0vy9bBw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:45:17 2025 by rpki-client