Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa
File:                     676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa (raw, json)
Hash identifier:          WXMHeyurBhktX7E+JzytXgOGVIwJuaaqhkG0kvygq/c=
Subject key identifier:   EF:85:AF:D8:00:02:FF:9A:61:6A:58:C0:33:11:16:01:7D:74:64:37
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB30A1115476EF5494E10
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14065
IP address blocks:        68.168.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b3:0a:11:15:47:6e:f5:49:4e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=40954186-2a7a-44e3-9fe0-f5db4802d995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:de:3f:62:fb:ef:ed:cb:1c:ec:8b:19:4e:
                    c7:42:01:06:97:6e:ef:af:74:a5:44:9a:81:ef:3b:
                    27:7f:66:4c:bc:41:27:4d:6c:91:7d:70:ce:db:ce:
                    66:f2:7a:5e:f4:a7:b6:5b:2e:a6:3e:14:0d:32:c4:
                    d4:f9:4e:89:f8:aa:51:f6:3c:38:86:0b:f8:47:2d:
                    87:f2:77:34:c1:19:45:6e:dd:d2:6d:cc:de:ba:40:
                    ea:c0:15:b0:97:c7:a5:d1:4a:c4:bc:22:c2:e4:18:
                    b3:0a:9c:c9:77:34:ce:33:58:1b:b8:66:b3:e3:52:
                    e4:0e:b1:37:86:98:88:20:2a:d9:fc:36:bd:52:95:
                    86:00:bc:4f:51:c7:99:ae:c0:a2:51:45:6c:74:ec:
                    a9:1a:0b:c8:42:f5:d3:78:18:a4:28:08:2d:61:d7:
                    cd:a0:ae:d6:b8:1a:37:75:3b:60:41:f3:fc:df:fd:
                    91:62:79:06:50:f9:47:98:bb:01:ad:2b:09:48:e0:
                    b1:df:2f:7e:82:53:09:56:60:a5:7b:be:c3:04:65:
                    20:e8:d3:e3:6e:b7:71:6b:35:d4:42:b2:0b:cd:3a:
                    ed:eb:0f:4d:3c:f4:c0:df:64:2a:5d:c0:5b:88:02:
                    b9:c2:80:b7:4d:b3:44:04:ad:02:e0:1c:50:54:9a:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:AF:D8:00:02:FF:9A:61:6A:58:C0:33:11:16:01:7D:74:64:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/676991a7-d2b6-3d4f-bc68-5dd2ded064b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:57:5e:b8:52:ca:b5:e0:e0:80:76:42:a6:32:a6:29:9f:
         79:d1:0e:fc:a0:98:05:d5:b5:4e:23:3f:43:9c:2c:f1:53:88:
         63:a6:e7:2a:26:bf:16:af:0f:bc:3e:9d:76:46:58:65:0c:97:
         4b:07:6d:cb:65:f3:d5:e7:b7:3c:7d:8c:f4:99:8d:55:3d:21:
         2c:e8:d9:71:4d:c6:22:15:c2:bd:77:03:d0:11:be:e1:7e:2d:
         ed:4c:87:e4:fa:07:5f:40:0d:66:2a:e1:29:63:2a:82:d0:18:
         05:4a:23:aa:71:53:a8:df:f5:3b:30:b5:33:23:d5:81:13:0b:
         7a:e2:dc:36:3c:84:19:88:4a:0b:6b:e9:b6:7b:dc:17:73:13:
         b3:21:86:9c:ef:5c:c8:1a:cd:91:87:b3:ac:ed:28:7e:24:e7:
         bc:a0:ed:f5:10:dd:31:34:3f:20:ad:5e:98:43:21:d8:e7:c6:
         ae:f9:2e:2c:1d:50:93:15:c4:29:87:91:28:4b:8f:e1:ed:7f:
         ac:3d:64:ec:57:36:99:11:04:36:fd:fd:93:81:09:2b:7b:94:
         b9:86:df:cc:b6:31:6a:47:78:23:96:c6:aa:fd:ab:52:6b:23:
         dc:4d:8f:b5:39:a6:87:3e:e4:10:fa:ed:63:80:9a:b3:99:bd:
         ea:2f:ea:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHbMKERVHbvVJThAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NDA5NTQxODYtMmE3YS00NGUzLTlmZTAtZjVkYjQ4MDJkOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUHeP2L77+3LHOyLGU7HQgEGl27vr3SlRJqB
7zsnf2ZMvEEnTWyRfXDO285m8npe9Ke2Wy6mPhQNMsTU+U6J+KpR9jw4hgv4Ry2H
8nc0wRlFbt3SbczeukDqwBWwl8el0UrEvCLC5BizCpzJdzTOM1gbuGaz41LkDrE3
hpiIICrZ/Da9UpWGALxPUceZrsCiUUVsdOypGgvIQvXTeBikKAgtYdfNoK7WuBo3
dTtgQfP83/2RYnkGUPlHmLsBrSsJSOCx3y9+glMJVmCle77DBGUg6NPjbrdxazXU
QrILzTrt6w9NPPTA32QqXcBbiAK5woC3TbNEBK0C4BxQVJoYbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+Fr9gAAv+aYWpYwDMRFgF9dGQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjc2OTkxYTctZDJiNi0z
ZDRmLWJjNjgtNWRkMmRlZDA2NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrNV164Usq14OCAdkKmMqYpn3nRDvygmAXVtU4jP0OcLPFTiGOm5yom
vxavD7w+nXZGWGUMl0sHbctl89Xntzx9jPSZjVU9ISzo2XFNxiIVwr13A9ARvuF+
Le1Mh+T6B19ADWYq4SljKoLQGAVKI6pxU6jf9TswtTMj1YETC3ri3DY8hBmISgtr
6bZ73BdzE7MhhpzvXMgazZGHs6ztKH4k57yg7fUQ3TE0PyCtXphDIdjnxq75Liwd
UJMVxCmHkShLj+Htf6w9ZOxXNpkRBDb9/ZOBCSt7lLmG38y2MWpHeCOWxqr9q1Jr
I9xNj7U5poc+5BD67WOAmrOZveov6qM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:35 2025 by rpki-client