Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa
File:                     cb7b4dc1-eb5a-3766-84ef-84426556a075.roa (raw, json)
Hash identifier:          rU2zQ0babguU+Ycx9cM5E8FizgVBq7158oUfna+Zfko=
Subject key identifier:   93:CA:AF:9A:54:7D:86:13:29:60:01:D9:E2:A2:3F:D6:D8:1D:BA:00
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584B441287DCD2F3B81C2FA9C080
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa
Signing time:             Sun 21 Sep 2025 07:40:00 +0000
ROA not before:           Sun 21 Sep 2025 07:40:00 +0000
ROA not after:            Sat 20 Dec 2025 08:40:00 +0000
asID:                     1288
IP address blocks:        66.185.116.0/24 maxlen: 24
                          74.80.114.0/24 maxlen: 24
                          2620:171:54::/48 maxlen: 48
                          2620:171:e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:12:87:dc:d2:f3:b8:1c:2f:a9:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Sep 21 07:40:00 2025 GMT
            Not After : Dec 20 08:40:00 2025 GMT
        Subject: CN=090012f3-3bdc-428f-b3c3-dd6c93e560a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:82:54:6b:d1:43:c3:f3:38:d8:24:bb:ad:
                    1c:8a:b6:30:7c:d5:fa:59:74:43:bc:0e:40:e9:aa:
                    eb:55:0f:a6:43:be:8d:3b:8a:20:5d:d3:e1:42:31:
                    56:f6:a6:cc:34:83:de:0c:26:9f:4c:0d:ad:6e:7b:
                    d5:8b:61:79:e7:19:4e:8e:b5:22:aa:1d:89:1a:33:
                    17:89:12:4b:33:81:b7:2a:10:58:8e:5a:0e:fc:a1:
                    0a:cf:c1:f4:00:1d:d0:58:b9:09:2a:9a:6e:21:30:
                    1d:a1:30:2a:26:c5:db:39:83:a4:92:8d:64:85:4f:
                    ec:7e:fb:47:4d:a3:12:fb:09:15:32:da:55:be:4d:
                    cb:66:e9:ab:7a:81:d9:b3:8a:8a:e5:65:1e:51:6c:
                    94:ec:92:60:af:73:0e:07:e2:fd:d3:b3:f8:e9:73:
                    83:49:5b:c3:47:7e:9b:b2:1d:80:af:ba:3e:0a:af:
                    dc:74:2b:96:50:d8:01:f2:d8:86:21:cc:4e:bf:4c:
                    bf:ee:cf:9a:da:e7:31:62:5f:4f:c5:d3:a0:df:ba:
                    79:d9:03:fa:b8:63:5b:0a:4c:fa:be:0c:f0:e6:6d:
                    8a:32:78:6b:e6:0b:55:c0:05:b4:84:62:18:28:f8:
                    64:13:fa:e3:41:02:8c:e0:32:af:41:b0:79:fb:ba:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CA:AF:9A:54:7D:86:13:29:60:01:D9:E2:A2:3F:D6:D8:1D:BA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.116.0/24
                  74.80.114.0/24
                IPv6:
                  2620:171:54::/48
                  2620:171:e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:db:f1:72:93:96:97:ac:0e:57:88:d7:01:e0:1c:86:83:dd:
         70:72:3e:97:37:c5:26:6f:e0:90:fe:94:0f:4a:6e:0f:e5:78:
         98:e2:8d:9c:fe:14:a0:e8:0c:bc:97:39:b2:6d:8e:e7:a2:2f:
         2d:61:4c:fb:66:29:26:70:aa:92:2b:6b:3c:41:39:e9:82:18:
         32:ec:b4:37:81:eb:63:af:50:b1:53:61:b7:0f:80:83:fc:d1:
         e2:fd:a8:b8:3a:0e:54:7f:9a:3c:74:59:40:3d:a2:38:ff:3d:
         a2:30:fe:09:bd:0a:9b:1b:87:41:2d:a6:b3:50:e4:54:15:48:
         d9:b9:38:73:7d:d4:03:ef:05:bc:bc:f4:79:02:ed:39:6b:85:
         a6:ca:b9:77:4e:b7:08:49:bd:37:0e:39:db:34:72:09:c4:98:
         db:4b:c8:16:7e:88:6d:35:1b:89:e0:3e:49:72:06:c5:21:95:
         2e:71:96:37:0d:dc:54:87:fa:54:b4:6b:98:32:20:cd:ca:3c:
         d9:a1:61:44:66:63:04:45:d3:90:84:9b:98:43:f7:36:e8:5e:
         2b:39:99:c6:0e:66:db:a7:5e:04:bd:c1:6e:3c:f3:36:34:93:
         db:f5:d6:0c:d3:60:e7:7a:0e:be:80:8a:56:17:8e:07:e4:0a:
         4a:d0:ac:81
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEtEEofc0vO4HC+pwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MDkyMTA3NDAwMFoXDTI1MTIyMDA4NDAwMFowLzEtMCsGA1UEAxMk
MDkwMDEyZjMtM2JkYy00MjhmLWIzYzMtZGQ2YzkzZTU2MGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou6CVGvRQ8PzONgku60cirYwfNX6WXRDvA5A
6arrVQ+mQ76NO4ogXdPhQjFW9qbMNIPeDCafTA2tbnvVi2F55xlOjrUiqh2JGjMX
iRJLM4G3KhBYjloO/KEKz8H0AB3QWLkJKppuITAdoTAqJsXbOYOkko1khU/sfvtH
TaMS+wkVMtpVvk3LZumreoHZs4qK5WUeUWyU7JJgr3MOB+L907P46XODSVvDR36b
sh2Ar7o+Cq/cdCuWUNgB8tiGIcxOv0y/7s+a2ucxYl9PxdOg37p52QP6uGNbCkz6
vgzw5m2KMnhr5gtVwAW0hGIYKPhkE/rjQQKM4DKvQbB5+7qlfwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFJPKr5pUfYYTKWAB2eKiP9bYHboAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvY2I3YjRkYzEtZWI1YS0z
NzY2LTg0ZWYtODQ0MjY1NTZhMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAQrl0AwQA
SlByMBgEAgACMBIDBwAmIAFxAFQDBwAmIAFxAOQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOdvxcpOWl6wO
V4jXAeAchoPdcHI+lzfFJm/gkP6UD0puD+V4mOKNnP4UoOgMvJc5sm2O56IvLWFM
+2YpJnCqkitrPEE56YIYMuy0N4HrY69QsVNhtw+Ag/zR4v2ouDoOVH+aPHRZQD2i
OP89ojD+Cb0KmxuHQS2ms1DkVBVI2bk4c33UA+8FvLz0eQLtOWuFpsq5d063CEm9
Nw452zRyCcSY20vIFn6IbTUbieA+SXIGxSGVLnGWNw3cVIf6VLRrmDIgzco82aFh
RGZjBEXTkISbmEP3NuheKzmZxg5m26deBL3BbjzzNjST2/XWDNNg53oOvoCKVheO
B+QKStCsgQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:41 2025 by rpki-client