Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/66877e82-f422-3172-afcf-58c1401e7382.roa
File:                     66877e82-f422-3172-afcf-58c1401e7382.roa (raw, json)
Hash identifier:          2KFZfzUURhdshlwKufi+0Rk5KlSFWp7Kd5rONXAvoVA=
Subject key identifier:   A7:C2:50:31:7E:12:02:C9:EF:D4:B0:58:F9:92:16:6F:92:4A:66:8D
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CCA64DADEE445B4C935FC0
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/66877e82-f422-3172-afcf-58c1401e7382.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        69.73.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a6:4d:ad:ee:44:5b:4c:93:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=174c7edb-e83d-48a0-8f45-bd8cc9cdf5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:e4:e1:d0:e1:ad:49:87:cf:43:a0:1f:fb:
                    9b:c9:80:cc:0c:4e:3a:61:48:32:ba:8b:55:bb:36:
                    81:4a:08:b2:a5:f4:0e:b7:35:2a:27:ca:aa:48:78:
                    dc:4d:7a:b7:e4:b3:c3:36:31:de:8c:30:68:f9:80:
                    62:e8:d5:16:c8:4f:db:d1:d5:52:ad:90:45:a7:e2:
                    c3:31:4a:fa:b7:1b:92:2c:5d:7c:28:e6:31:49:8d:
                    73:47:e7:8a:1f:8c:8e:fd:5e:47:fb:04:22:61:02:
                    13:3e:03:b0:c4:a4:b5:a7:34:44:80:69:68:6b:88:
                    2e:ad:04:fd:d7:50:48:9c:3f:68:1c:e3:21:e7:bb:
                    d3:a7:d5:3a:1f:c5:13:9e:91:d3:f9:bb:a6:bd:04:
                    af:5b:1c:19:d4:7a:6b:f0:d4:7e:b2:e1:d7:48:a7:
                    35:1e:27:99:0e:d6:01:41:43:02:66:3d:c8:27:61:
                    d5:72:c0:77:f5:ff:ab:27:40:89:a0:e7:3c:69:88:
                    d9:b9:90:e0:a8:37:32:ee:a7:ca:c1:41:87:41:30:
                    33:b2:14:20:be:dd:db:e9:28:2a:68:f8:41:cf:da:
                    18:ee:70:dd:38:7f:3e:87:fb:be:38:1a:9a:2c:62:
                    69:72:25:d9:61:96:97:72:0d:26:c8:11:af:0a:6d:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:50:31:7E:12:02:C9:EF:D4:B0:58:F9:92:16:6F:92:4A:66:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/66877e82-f422-3172-afcf-58c1401e7382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:17:8d:18:b6:19:99:5e:82:fd:2f:ea:ba:86:89:6d:42:54:
         6c:1f:fe:f2:7f:86:2f:c6:5d:e0:49:23:5d:7e:55:91:9d:d1:
         ff:2b:a3:ad:54:77:36:e0:ce:29:dd:4f:37:66:08:9f:d9:d2:
         71:81:68:90:2b:f5:5c:92:a0:9b:04:45:18:eb:19:2b:a5:f7:
         25:b9:4d:43:7e:d2:0f:07:a2:3a:3c:d5:ab:93:75:18:9e:90:
         d1:9f:8f:60:26:4f:51:ca:0c:d9:2e:54:f8:d8:21:bd:fb:44:
         4a:01:9f:99:c4:93:86:7d:d2:e5:80:9d:c9:cf:e9:9d:47:15:
         41:32:58:45:af:a1:58:ac:10:84:4d:ec:3b:e2:b5:12:8f:ac:
         46:31:20:10:d5:92:6e:54:db:a4:df:d8:2b:c6:27:84:96:27:
         29:43:c2:7d:17:67:7b:ac:20:bb:3f:45:1b:9b:68:03:e1:d1:
         90:e1:3f:f3:6e:18:03:f4:98:61:48:65:73:65:b6:d1:da:2a:
         3c:8d:76:cc:6e:2f:f4:a5:4c:55:10:09:43:a6:53:f7:5b:ce:
         08:d4:00:b6:40:68:d8:23:65:7f:dd:2f:f4:ff:04:2a:31:24:
         37:ae:a9:3b:9a:3d:6e:db:19:27:c8:c8:bc:88:e4:ca:62:2a:
         87:b2:bb:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKZNre5EW0yTX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTc0YzdlZGItZTgzZC00OGEwLThmNDUtYmQ4Y2M5Y2RmNWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JPk4dDhrUmHz0OgH/ubyYDMDE46YUgyuotV
uzaBSgiypfQOtzUqJ8qqSHjcTXq35LPDNjHejDBo+YBi6NUWyE/b0dVSrZBFp+LD
MUr6txuSLF18KOYxSY1zR+eKH4yO/V5H+wQiYQITPgOwxKS1pzREgGloa4gurQT9
11BInD9oHOMh57vTp9U6H8UTnpHT+bumvQSvWxwZ1Hpr8NR+suHXSKc1HieZDtYB
QUMCZj3IJ2HVcsB39f+rJ0CJoOc8aYjZuZDgqDcy7qfKwUGHQTAzshQgvt3b6Sgq
aPhBz9oY7nDdOH8+h/u+OBqaLGJpciXZYZaXcg0myBGvCm0VUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfCUDF+EgLJ79SwWPmSFm+SSmaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNjY4NzdlODItZjQyMi0z
MTcyLWFmY2YtNThjMTQwMWU3MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4XjRi2GZlegv0v6rqGiW1CVGwf/vJ/hi/GXeBJI11+VZGd0f8ro61U
dzbgzindTzdmCJ/Z0nGBaJAr9VySoJsERRjrGSul9yW5TUN+0g8Hojo81auTdRie
kNGfj2AmT1HKDNkuVPjYIb37REoBn5nEk4Z90uWAncnP6Z1HFUEyWEWvoVisEIRN
7DvitRKPrEYxIBDVkm5U26Tf2CvGJ4SWJylDwn0XZ3usILs/RRubaAPh0ZDhP/Nu
GAP0mGFIZXNlttHaKjyNdsxuL/SlTFUQCUOmU/dbzgjUALZAaNgjZX/dL/T/BCox
JDeuqTuaPW7bGSfIyLyI5MpiKoeyu1g=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:50 2025 by rpki-client