Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa
File:                     e93b652e-f4e2-3292-b364-76a41c761a27.roa (raw, json)
Hash identifier:          yJ8Mrb6sjJ4B6k3j/cM+/p6CqlgrrsS00mq6ybTP41I=
Subject key identifier:   3A:29:4A:C0:2A:BE:2A:75:12:D5:59:ED:25:AE:D6:27:53:A5:4B:6F
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584B92DCDBBD56D956C14D389AC0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     6453
IP address blocks:        66.198.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:db:bd:56:d9:56:c1:4d:38:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=05acd631-22e3-430c-916e-adf9f26c58bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:e9:34:b3:c6:2e:42:e8:74:fa:09:8e:0d:
                    be:ac:9c:f1:bd:95:9b:58:ac:a3:72:38:2c:9c:a6:
                    c2:cf:18:fd:b9:ce:88:c6:c1:42:ca:35:36:75:b2:
                    7c:ad:27:99:cf:fd:32:de:c2:c0:cd:2d:86:d4:ed:
                    13:9e:0f:9a:c1:85:54:15:45:fd:c7:2c:a7:f0:3c:
                    61:50:d2:37:41:92:0f:3e:29:b2:e1:d8:64:d0:15:
                    46:f5:39:6a:21:84:3a:fc:57:11:f5:3b:ee:6e:47:
                    47:5a:ff:c7:97:1e:8a:01:b9:0a:1f:1d:b1:02:78:
                    9a:94:cc:23:87:80:54:0a:03:e6:f2:90:1c:1b:77:
                    ca:6e:79:e4:a5:50:2f:0c:f8:47:62:77:28:91:31:
                    e7:33:8e:00:e4:49:68:20:85:41:62:46:fa:91:39:
                    8f:de:c6:77:3b:6c:6d:b9:4b:9a:50:81:c7:ad:c4:
                    48:1c:1d:49:51:88:4e:f5:dc:54:c6:d7:98:81:03:
                    b8:e1:50:04:5a:c6:ff:37:62:c3:22:45:b7:ba:b8:
                    56:62:2f:3c:09:b2:3e:97:ff:80:84:11:20:5c:3c:
                    38:b4:a2:d6:af:1c:b8:e3:2f:6b:e1:58:5f:91:7e:
                    b3:33:4b:89:ef:04:33:a8:75:ea:d7:83:bb:2e:ee:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:4A:C0:2A:BE:2A:75:12:D5:59:ED:25:AE:D6:27:53:A5:4B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:f6:7f:4c:f2:5f:0a:69:58:cc:ef:f1:33:6c:a7:b2:f8:
         d5:eb:f5:da:b4:e5:fe:25:58:78:e9:d1:47:de:aa:87:ea:f8:
         49:c5:40:06:87:f4:16:59:f5:a8:8e:5b:fd:6e:d8:e5:30:0b:
         07:9e:13:e1:c6:72:da:d1:d9:71:53:dc:bf:6a:30:79:aa:cd:
         6a:5f:f8:2a:54:16:4f:39:a9:b9:97:c3:7d:9e:22:eb:57:b9:
         d5:95:0e:4d:c5:21:3e:bf:00:fe:d1:f3:13:fc:67:1d:99:1f:
         bb:21:3b:cc:d0:76:c2:6e:92:09:7e:36:3f:a7:68:e7:99:76:
         37:7c:99:80:13:8f:86:d6:53:58:81:36:86:c1:a8:b1:aa:31:
         d6:50:f3:00:bb:42:60:86:35:c5:cf:d1:a0:8e:a8:12:d9:d1:
         b5:23:a6:a9:07:88:c2:16:c6:2f:a6:72:2e:66:ce:5c:80:bc:
         98:b3:7d:e1:47:87:c9:1c:75:c8:f4:77:17:33:e9:81:fd:9c:
         85:fc:1a:e6:46:d4:5d:a1:ab:46:0b:bc:a1:b8:9c:f5:1f:44:
         49:6f:f2:8d:4b:29:c2:59:78:d4:7f:b8:3e:d5:d3:5c:0f:e9:
         8c:77:9d:71:03:10:02:59:61:d4:48:85:d5:1d:18:a3:d1:3f:
         fb:45:38:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Nu9VtlWwU04msAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
MDVhY2Q2MzEtMjJlMy00MzBjLTkxNmUtYWRmOWYyNmM1OGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHvpNLPGLkLodPoJjg2+rJzxvZWbWKyjcjgs
nKbCzxj9uc6IxsFCyjU2dbJ8rSeZz/0y3sLAzS2G1O0Tng+awYVUFUX9xyyn8Dxh
UNI3QZIPPimy4dhk0BVG9TlqIYQ6/FcR9TvubkdHWv/Hlx6KAbkKHx2xAnialMwj
h4BUCgPm8pAcG3fKbnnkpVAvDPhHYncokTHnM44A5EloIIVBYkb6kTmP3sZ3O2xt
uUuaUIHHrcRIHB1JUYhO9dxUxteYgQO44VAEWsb/N2LDIkW3urhWYi88CbI+l/+A
hBEgXDw4tKLWrxy44y9r4VhfkX6zM0uJ7wQzqHXq14O7Lu6EBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDopSsAqvip1EtVZ7SWu1idTpUtvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvZTkzYjY1MmUtZjRlMi0z
MjkyLWIzNjQtNzZhNDFjNzYxYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQsZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3U9n9M8l8KaVjM7/EzbKey+NXr9dq05f4lWHjp0Ufeqofq+EnFQAaH
9BZZ9aiOW/1u2OUwCweeE+HGctrR2XFT3L9qMHmqzWpf+CpUFk85qbmXw32eIutX
udWVDk3FIT6/AP7R8xP8Zx2ZH7shO8zQdsJukgl+Nj+naOeZdjd8mYATj4bWU1iB
NobBqLGqMdZQ8wC7QmCGNcXP0aCOqBLZ0bUjpqkHiMIWxi+mci5mzlyAvJizfeFH
h8kcdcj0dxcz6YH9nIX8GuZG1F2hq0YLvKG4nPUfRElv8o1LKcJZeNR/uD7V01wP
6Yx3nXEDEAJZYdRIhdUdGKPRP/tFOOY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:03:05 2025 by rpki-client