Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/19034637-70b7-33b4-b413-f9d5855546ce.roa
File:                     19034637-70b7-33b4-b413-f9d5855546ce.roa (raw, json)
Hash identifier:          SEKzqa710uPaZ9IvxuXsRiL5cL+BnK1r1iZ8/JMb8hQ=
Subject key identifier:   C3:1E:A9:4A:07:A7:E2:06:A1:1B:7E:E9:12:74:DB:D6:1A:C7:FC:8C
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F43285849DD254088668FD87C86435A80
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/19034637-70b7-33b4-b413-f9d5855546ce.roa
Signing time:             Thu 15 May 2025 18:02:32 +0000
ROA not before:           Thu 15 May 2025 18:02:32 +0000
ROA not after:            Wed 13 Aug 2025 18:02:32 +0000
asID:                     0
IP address blocks:        199.176.64.0/24 maxlen: 24
                          199.176.65.0/24 maxlen: 24
                          199.176.66.0/24 maxlen: 24
                          199.176.67.0/24 maxlen: 24
                          199.176.68.0/24 maxlen: 24
                          199.176.69.0/24 maxlen: 24
                          199.176.70.0/24 maxlen: 24
                          199.176.71.0/24 maxlen: 24
                          199.176.73.0/24 maxlen: 24
                          199.176.74.0/24 maxlen: 24
                          199.176.76.0/24 maxlen: 24
                          199.177.64.0/24 maxlen: 24
                          199.177.65.0/24 maxlen: 24
                          199.177.66.0/24 maxlen: 24
                          199.177.67.0/24 maxlen: 24
                          199.177.68.0/24 maxlen: 24
                          199.177.69.0/24 maxlen: 24
                          199.177.70.0/24 maxlen: 24
                          199.177.71.0/24 maxlen: 24
                          199.178.64.0/24 maxlen: 24
                          199.178.65.0/24 maxlen: 24
                          199.178.66.0/24 maxlen: 24
                          199.178.67.0/24 maxlen: 24
                          199.178.72.0/22 maxlen: 22
                          199.178.76.0/24 maxlen: 24
                          199.178.77.0/24 maxlen: 24
                          199.178.80.0/24 maxlen: 24
                          199.178.83.0/24 maxlen: 24
                          199.178.84.0/24 maxlen: 24
                          199.178.85.0/24 maxlen: 24
                          199.178.86.0/24 maxlen: 24
                          199.178.87.0/24 maxlen: 24
                          199.178.88.0/24 maxlen: 24
                          199.178.90.0/24 maxlen: 24
                          199.178.91.0/24 maxlen: 24
                          199.178.92.0/24 maxlen: 24
                          199.178.93.0/24 maxlen: 24
                          199.178.94.0/24 maxlen: 24
                          199.178.95.0/24 maxlen: 24
                          199.178.96.0/22 maxlen: 22
                          199.178.100.0/22 maxlen: 22
                          199.178.127.0/24 maxlen: 24
                          199.178.160.0/24 maxlen: 24
                          199.178.161.0/24 maxlen: 24
                          199.178.162.0/24 maxlen: 24
                          199.178.165.0/24 maxlen: 24
                          199.178.166.0/24 maxlen: 24
                          199.178.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:25:40:88:66:8f:d8:7c:86:43:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: May 15 18:02:32 2025 GMT
            Not After : Aug 13 18:02:32 2025 GMT
        Subject: CN=7d8a2a82-32b8-41d1-b1c0-d71000f0f3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:b4:83:a2:11:91:eb:95:24:37:c0:ad:0b:
                    e9:5c:36:b5:b7:cb:9a:62:31:64:f1:f6:c1:30:e8:
                    ee:0c:14:88:86:67:31:1e:94:7a:6e:5d:15:d0:bd:
                    a4:03:c6:36:b4:50:2b:af:af:11:f9:a0:f2:79:c7:
                    69:b5:d4:a3:95:85:8a:1a:6b:08:45:88:4f:5a:5a:
                    f5:4f:30:0d:1e:c2:63:65:f5:62:2a:3f:4c:d1:79:
                    8e:4e:6a:4c:40:d1:42:4e:5f:04:89:ce:0d:58:51:
                    d1:f4:87:5a:16:cf:81:24:4c:81:6a:f4:a3:8e:38:
                    c1:b6:d7:e6:1f:6c:a2:04:af:18:ca:f5:04:bb:3d:
                    d4:74:4e:82:e8:b2:f9:20:75:b0:6c:f2:56:2c:6e:
                    d4:b6:4d:9c:86:4d:18:1c:90:c6:23:fd:b5:de:30:
                    f8:43:5e:91:0d:b6:f9:4d:f0:82:31:46:96:1d:9f:
                    f8:28:b2:ca:8b:ee:05:32:77:88:f8:cc:0d:ef:f9:
                    c1:32:55:d8:15:61:69:08:c9:7a:ba:30:ca:3c:ae:
                    78:46:1b:d6:5a:cb:9c:08:28:48:db:5a:c3:a4:0a:
                    4d:af:00:6d:52:fd:9a:62:84:fd:6d:90:2b:37:ec:
                    bd:2b:b9:8b:dc:b1:06:51:aa:cd:a5:09:dc:a4:bf:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:A9:4A:07:A7:E2:06:A1:1B:7E:E9:12:74:DB:D6:1A:C7:FC:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/19034637-70b7-33b4-b413-f9d5855546ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.176.64.0/21
                  199.176.73.0-199.176.74.255
                  199.176.76.0/24
                  199.177.64.0/21
                  199.178.64.0/22
                  199.178.72.0-199.178.77.255
                  199.178.80.0/24
                  199.178.83.0-199.178.88.255
                  199.178.90.0-199.178.103.255
                  199.178.127.0/24
                  199.178.160.0-199.178.162.255
                  199.178.165.0-199.178.167.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:56:f8:83:79:88:7c:33:ca:59:d5:84:cc:cb:c8:4e:91:87:
         37:09:27:26:19:90:c5:e5:fb:db:ff:1c:41:cc:5f:14:84:e2:
         ab:26:7b:65:ba:7a:17:05:19:10:90:e1:42:71:65:01:71:48:
         dd:74:6d:86:92:0f:2e:9c:24:29:91:12:75:ee:18:8e:0f:cc:
         0d:42:82:33:41:9a:45:be:5d:88:15:85:59:ac:ed:17:a0:1a:
         4a:b3:da:0c:c5:3c:a4:d5:ec:bb:c3:81:dc:18:3f:7c:e7:cb:
         92:b2:24:05:c1:32:99:bc:f0:c1:e3:88:b1:a2:bb:99:bd:d9:
         20:6a:91:28:82:41:90:09:1f:3e:c1:66:8c:76:ec:ee:5c:af:
         31:57:7b:0e:55:73:86:f9:e6:50:c0:e0:48:04:97:9e:2e:49:
         22:cb:67:88:6e:de:e0:60:d2:90:b2:0d:33:42:92:4d:6f:59:
         24:1a:57:62:f0:2d:64:32:ee:68:e0:ce:1a:36:cf:ae:90:5d:
         05:68:52:f1:45:69:35:63:1d:61:0d:26:18:e4:9c:8a:f4:d6:
         c4:33:e5:80:c3:96:df:7f:9b:89:a1:86:9d:04:b8:f9:28:cb:
         e8:05:81:54:1d:8c:a6:db:51:03:67:53:fb:c0:b1:88:0e:d6:
         4d:df:54:9b
-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIUAQ0Mn0MoWEndJUCIZo/YfIZDWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NmZTY2M2MtODg3OC00Y2MwLWE3NzItMTdlNzZhNDkz
MDQwMB4XDTI1MDUxNTE4MDIzMloXDTI1MDgxMzE4MDIzMlowLzEtMCsGA1UEAxMk
N2Q4YTJhODItMzJiOC00MWQxLWIxYzAtZDcxMDAwZjBmM2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynS0g6IRkeuVJDfArQvpXDa1t8uaYjFk8fbB
MOjuDBSIhmcxHpR6bl0V0L2kA8Y2tFArr68R+aDyecdptdSjlYWKGmsIRYhPWlr1
TzANHsJjZfViKj9M0XmOTmpMQNFCTl8Eic4NWFHR9IdaFs+BJEyBavSjjjjBttfm
H2yiBK8YyvUEuz3UdE6C6LL5IHWwbPJWLG7Utk2chk0YHJDGI/213jD4Q16RDbb5
TfCCMUaWHZ/4KLLKi+4FMneI+MwN7/nBMlXYFWFpCMl6ujDKPK54RhvWWsucCChI
21rDpApNrwBtUv2aYoT9bZArN+y9K7mL3LEGUarNpQncpL/6WQIDAQABo4IDyjCC
A8YwHQYDVR0OBBYEFMMeqUoHp+IGoRt+6RJ029Yax/yMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jY2Zl
NjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3NmE0OTMwNDAvMTkwMzQ2MzctNzBiNy0z
M2I0LWI0MTMtZjlkNTg1NTU0NmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2NmZTY2M2MtODg3OC00Y2MwLWE3
NzItMTdlNzZhNDkzMDQwL2NjZmU2NjNjLTg4NzgtNGNjMC1hNzcyLTE3ZTc2YTQ5
MzA0MC5jcmwwHwYDVR0jBBgwFoAU/2L6gldR0zn/TiyQIVW+1KjY3vAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jY2ZlNjYzYy04ODc4LTRjYzAtYTc3Mi0xN2U3
NmE0OTMwNDAuY2VyMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQDx7BA
MAwDBADHsEkDBADHsEoDBADHsEwDBAPHsUADBALHskAwDAMEA8eySAMEAceyTAME
AMeyUDAMAwQAx7JTAwQAx7JYMAwDBAHHsloDBAPHsmADBADHsn8wDAMEBceyoAME
AMeyojAMAwQAx7KlAwQDx7KgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAERW+IN5iHwzylnVhMzLyE6RhzcJ
JyYZkMXl+9v/HEHMXxSE4qsme2W6ehcFGRCQ4UJxZQFxSN10bYaSDy6cJCmREnXu
GI4PzA1CgjNBmkW+XYgVhVms7RegGkqz2gzFPKTV7LvDgdwYP3zny5KyJAXBMpm8
8MHjiLGiu5m92SBqkSiCQZAJHz7BZox27O5crzFXew5Vc4b55lDA4EgEl54uSSLL
Z4hu3uBg0pCyDTNCkk1vWSQaV2LwLWQy7mjgzho2z66QXQVoUvFFaTVjHWENJhjk
nIr01sQz5YDDlt9/m4mhhp0EuPkoy+gFgVQdjKbbUQNnU/vAsYgO1k3fVJs=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:16:34 2025 by rpki-client