Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ad6cfd8e-7306-3391-a07f-a207fb0468db.roa
File:                     ad6cfd8e-7306-3391-a07f-a207fb0468db.roa (raw, json)
Hash identifier:          l70ms/33WjrZiSSS+U98fYs5jgxDx7n7jlM6jicJFQw=
Subject key identifier:   8B:47:56:76:07:94:C2:73:21:40:F1:D1:C1:A1:6A:8D:C7:5E:6F:BB
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F432858498769BA8EF4FC898B9B4ECB00
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ad6cfd8e-7306-3391-a07f-a207fb0468db.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     10753
IP address blocks:        66.128.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ba:8e:f4:fc:89:8b:9b:4e:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=8dce447b-ee67-44b8-99cc-31f079914202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:73:35:b8:2e:b5:66:e5:11:6d:6c:b2:8a:
                    a9:62:ad:dd:ee:78:58:00:5d:1c:09:ef:c7:57:4a:
                    55:18:a6:8f:5e:2c:58:a3:58:d8:2a:c5:ad:31:ff:
                    11:e7:3d:09:a0:89:c8:e7:0a:fb:0b:5a:f7:4e:e1:
                    31:e6:58:71:e6:86:03:84:a5:74:05:13:e3:c6:e0:
                    a0:51:6a:32:a2:54:a4:3f:8b:a9:f4:c3:20:bc:0d:
                    66:70:35:05:84:54:af:d6:8f:13:1a:8a:3e:29:af:
                    e1:98:c2:b7:3b:54:bf:e5:08:e8:0c:a8:02:6e:12:
                    55:3c:7b:f1:92:32:51:fb:1b:34:04:7b:10:c0:df:
                    ae:b3:59:97:05:8e:5e:a7:83:e0:6f:b0:da:9d:80:
                    ee:fd:c0:d6:ee:5f:47:41:6d:32:7c:27:f6:cd:9a:
                    ec:ed:e0:0d:46:8b:66:95:6a:4b:1b:f5:ea:ad:40:
                    02:44:95:58:ec:29:1b:05:a8:9e:40:28:c6:3d:95:
                    40:f6:4d:42:c2:fd:cf:bd:a9:df:1f:6e:77:6a:04:
                    53:d9:9f:00:1a:d0:23:9c:6d:2c:75:44:ea:b8:2c:
                    84:6a:39:0f:6b:af:45:4e:63:6b:7e:e6:e7:b8:18:
                    2c:6f:46:f7:59:a0:a0:ff:9b:ca:8d:e4:82:32:75:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:56:76:07:94:C2:73:21:40:F1:D1:C1:A1:6A:8D:C7:5E:6F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/ad6cfd8e-7306-3391-a07f-a207fb0468db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:bc:da:99:8d:65:f8:cf:ef:b9:86:c6:15:3f:c0:6e:be:c5:
         6f:f6:f8:9a:7c:8d:e1:5a:f2:03:4d:25:fc:83:26:3c:1a:9f:
         89:89:22:9e:42:d4:0a:33:a1:4c:f9:49:07:19:cc:24:a0:30:
         e5:d2:24:1c:a8:9e:22:d5:44:c7:7a:6d:14:43:3d:ee:bc:6e:
         fe:2f:5d:24:55:28:59:56:c4:33:71:98:29:2f:fa:e2:26:d2:
         02:e4:b4:fc:4b:d8:dc:be:15:60:1a:c1:4a:50:9b:da:98:7a:
         fb:11:6b:c0:18:a6:c3:2d:88:34:ff:2c:ea:ca:aa:a4:e0:57:
         24:c9:46:4a:6b:82:99:ca:9c:0c:a6:d0:6a:7f:a0:8d:3e:69:
         81:55:9b:9f:66:65:ad:d6:28:34:54:33:1b:e6:8d:d0:a6:c6:
         44:15:94:0b:87:16:fd:d6:1d:38:4f:1e:69:f3:e9:bf:aa:1f:
         cf:b7:85:e8:43:cd:a5:f6:76:25:2c:f0:be:6f:b0:0a:46:66:
         f8:45:a7:c1:50:07:04:bf:bd:fe:f3:9d:48:26:64:be:70:8f:
         ec:a4:d7:af:ed:84:57:43:26:af:b7:d8:2a:af:b2:22:a1:99:
         95:52:ac:bb:9c:fe:64:d6:1d:04:fa:3e:39:9c:36:37:37:56:
         31:1d:ed:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabqO9PyJi5tOywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3
OGVhMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
OGRjZTQ0N2ItZWU2Ny00NGI4LTk5Y2MtMzFmMDc5OTE0MjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEZzNbgutWblEW1ssoqpYq3d7nhYAF0cCe/H
V0pVGKaPXixYo1jYKsWtMf8R5z0JoInI5wr7C1r3TuEx5lhx5oYDhKV0BRPjxuCg
UWoyolSkP4up9MMgvA1mcDUFhFSv1o8TGoo+Ka/hmMK3O1S/5QjoDKgCbhJVPHvx
kjJR+xs0BHsQwN+us1mXBY5ep4Pgb7DanYDu/cDW7l9HQW0yfCf2zZrs7eANRotm
lWpLG/XqrUACRJVY7CkbBaieQCjGPZVA9k1Cwv3PvanfH253agRT2Z8AGtAjnG0s
dUTquCyEajkPa69FTmNrfubnuBgsb0b3WaCg/5vKjeSCMnUAIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItHVnYHlMJzIUDx0cGhao3HXm+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz
OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvYWQ2Y2ZkOGUtNzMwNi0z
MzkxLWEwN2YtYTIwN2ZiMDQ2OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz
NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl
NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1
OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM282pmNZfjP77mGxhU/wG6+xW/2+Jp8jeFa8gNNJfyDJjwan4mJIp5C
1AozoUz5SQcZzCSgMOXSJByoniLVRMd6bRRDPe68bv4vXSRVKFlWxDNxmCkv+uIm
0gLktPxL2Ny+FWAawUpQm9qYevsRa8AYpsMtiDT/LOrKqqTgVyTJRkprgpnKnAym
0Gp/oI0+aYFVm59mZa3WKDRUMxvmjdCmxkQVlAuHFv3WHThPHmnz6b+qH8+3hehD
zaX2diUs8L5vsApGZvhFp8FQBwS/vf7znUgmZL5wj+yk16/thFdDJq+32CqvsiKh
mZVSrLuc/mTWHQT6PjmcNjc3VjEd7X4=
-----END CERTIFICATE-----
Generated at Sun May 11 01:40:36 2025 by rpki-client