Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa
File:                     f6ba3890-638c-37cc-80b2-c27c14be5a92.roa (raw, json)
Hash identifier:          dIsdrmcQtQr5XeJDQEm1WVTc8vfJfy6ecO7QF+akzWM=
Subject key identifier:   C0:C8:CA:8D:9A:3E:8A:2F:FC:8D:25:2E:2A:5E:A5:2E:C8:F5:C0:F4
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA7AB495A6C34A2127E900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        216.234.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7a:b4:95:a6:c3:4a:21:27:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=690980e9-8807-4d66-ae14-80e4754cd466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:dd:da:b0:21:6f:a7:36:a3:e5:cc:4b:00:
                    60:b0:a1:f5:1f:25:11:86:74:2a:58:22:1d:4c:93:
                    10:e5:59:c9:06:ab:dc:3b:88:9c:d2:cb:c5:d8:22:
                    3b:a4:9d:48:80:9e:67:48:80:6a:90:64:8e:f9:46:
                    2b:16:54:13:58:a7:b8:dd:ad:0a:c8:d8:b8:e0:70:
                    09:2a:ff:d6:a7:c8:13:68:fd:44:91:5c:f3:81:40:
                    1d:58:74:fc:4d:99:c3:da:70:25:12:b8:b9:cf:74:
                    c4:12:e6:9b:2e:6d:ea:a3:b8:39:97:cb:54:3d:87:
                    59:ff:c9:cf:1a:f0:61:0a:5c:9f:f2:bf:6c:d7:c5:
                    73:4d:fe:2b:1e:d8:1b:75:5c:ca:d8:4d:77:e6:91:
                    50:7b:3a:c1:ab:22:59:0e:9e:a0:da:f8:b8:ff:d8:
                    0e:00:2f:37:d3:1a:84:b9:df:c5:d9:0d:95:f6:bb:
                    87:3a:8b:ea:60:62:9b:0d:cf:ad:6a:23:6f:64:ab:
                    4d:e5:dd:23:5d:0c:c4:34:75:1a:10:40:36:f3:30:
                    c1:31:ae:ab:eb:f4:38:c5:ee:d9:3b:3f:fd:76:0c:
                    ef:8a:75:c6:b1:1c:de:23:84:3a:fe:a8:61:c1:c5:
                    f0:a3:df:3a:e6:91:6c:a9:9f:22:54:86:9f:1e:8e:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:CA:8D:9A:3E:8A:2F:FC:8D:25:2E:2A:5E:A5:2E:C8:F5:C0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/f6ba3890-638c-37cc-80b2-c27c14be5a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:c4:8e:3e:e8:81:e5:da:de:6b:eb:20:73:f5:46:90:83:
         18:03:03:be:10:90:49:b7:33:07:a9:e2:a8:da:7d:50:81:0a:
         69:54:40:5c:8f:1c:b9:b3:42:84:f2:ee:e0:63:49:b9:2d:2f:
         02:0b:27:b3:66:fb:3f:16:b7:6f:50:73:1b:57:98:06:2e:64:
         f3:ab:9c:85:45:c6:cb:12:fa:06:20:80:b0:f6:71:29:97:d0:
         c1:f5:34:bc:71:69:25:9a:7f:14:0a:7a:de:22:04:20:af:3c:
         3b:0b:2e:3d:b5:66:05:30:24:88:13:45:01:63:42:f9:c2:f4:
         4d:9d:c7:67:31:9e:ab:7f:41:78:ed:10:ad:4b:c7:5a:fb:43:
         b7:8a:8e:a1:22:9f:95:b6:70:61:b2:07:29:15:a7:f1:15:23:
         2d:27:84:56:45:f2:0c:d6:23:a5:3d:d0:9c:5c:be:6e:2f:31:
         5d:9f:12:1d:6c:ec:6e:8c:84:23:c2:e5:52:20:58:1f:75:d4:
         b0:03:f0:e5:d7:1b:b1:16:b9:5e:49:28:cf:5e:2a:9f:77:22:
         a7:6e:33:ae:39:ad:cf:6b:54:50:6e:71:46:e6:d3:5f:f1:e1:
         59:fa:ba:cd:39:b6:df:d7:a3:41:6b:d2:52:5e:4a:a9:89:2d:
         30:2b:e0:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnq0labDSiEn6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
NjkwOTgwZTktODgwNy00ZDY2LWFlMTQtODBlNDc1NGNkNDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv3d2rAhb6c2o+XMSwBgsKH1HyURhnQqWCId
TJMQ5VnJBqvcO4ic0svF2CI7pJ1IgJ5nSIBqkGSO+UYrFlQTWKe43a0KyNi44HAJ
Kv/Wp8gTaP1EkVzzgUAdWHT8TZnD2nAlEri5z3TEEuabLm3qo7g5l8tUPYdZ/8nP
GvBhClyf8r9s18VzTf4rHtgbdVzK2E135pFQezrBqyJZDp6g2vi4/9gOAC830xqE
ud/F2Q2V9ruHOovqYGKbDc+taiNvZKtN5d0jXQzENHUaEEA28zDBMa6r6/Q4xe7Z
Oz/9dgzvinXGsRzeI4Q6/qhhwcXwo9865pFsqZ8iVIafHo7m1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDIyo2aPoov/I0lLipepS7I9cD0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZjZiYTM4OTAtNjM4Yy0z
N2NjLTgwYjItYzI3YzE0YmU1YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAj/xI4+6IHl2t5r6yBz9UaQgxgDA74QkEm3Mwep4qjafVCBCmlUQFyP
HLmzQoTy7uBjSbktLwILJ7Nm+z8Wt29QcxtXmAYuZPOrnIVFxssS+gYggLD2cSmX
0MH1NLxxaSWafxQKet4iBCCvPDsLLj21ZgUwJIgTRQFjQvnC9E2dx2cxnqt/QXjt
EK1Lx1r7Q7eKjqEin5W2cGGyBykVp/EVIy0nhFZF8gzWI6U90Jxcvm4vMV2fEh1s
7G6MhCPC5VIgWB911LAD8OXXG7EWuV5JKM9eKp93IqduM645rc9rVFBucUbm01/x
4Vn6us05tt/Xo0Fr0lJeSqmJLTAr4HU=
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:03:03 2025 by rpki-client