Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa
File:                     3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa (raw, json)
Hash identifier:          8qNJzcbXKcuzXSeE4zygRpxtSJqIoQMZcU3II+mMpa4=
Subject key identifier:   6E:F5:8A:43:A2:8E:94:D7:1C:7A:8D:03:61:C6:53:8B:37:F1:C4:76
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B328C3BFC9C6255ADEA3D3C00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     4651
IP address blocks:        66.114.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3b:fc:9c:62:55:ad:ea:3d:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=5e65c500-8587-436d-9367-be7ff8c0c109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:2c:f5:1d:a6:e5:86:85:5c:08:b6:4f:3d:
                    8f:ca:01:63:0e:12:28:d7:d7:33:21:55:36:4a:8b:
                    a6:bc:9b:95:3e:6e:32:fc:f7:c8:aa:32:2d:0a:96:
                    8d:67:96:c7:26:11:06:ff:1c:8d:53:96:0b:0e:d8:
                    bc:05:b5:d1:b3:52:25:23:99:d5:6c:4f:6c:c0:73:
                    a5:ae:13:26:4a:4a:03:56:a0:40:1d:a9:59:7d:de:
                    67:b6:0c:57:8c:11:8a:fa:55:01:40:af:a9:46:ce:
                    57:d7:c2:7c:b9:64:8d:90:9f:68:af:02:07:73:9e:
                    df:ba:a6:7d:c2:f9:64:08:02:63:cf:70:5e:ce:66:
                    62:47:0e:27:82:14:1f:14:8b:e6:b3:e1:4c:32:e5:
                    0e:e9:8e:7e:d1:59:d1:dd:8a:d5:92:de:bd:a9:d0:
                    0f:3a:a7:fa:0a:d3:3e:4c:c4:59:68:9b:69:28:2b:
                    68:4f:64:9a:ea:01:7b:a6:0d:99:84:8e:80:d9:d6:
                    f8:ed:91:3f:e1:96:b2:23:64:31:e3:5f:bd:7a:91:
                    bf:45:a2:98:be:03:48:e6:99:52:1b:b6:f0:42:80:
                    ac:e6:6b:04:07:fd:3a:46:17:b2:5e:63:1d:13:67:
                    53:d9:d8:68:9d:9b:a9:99:61:dc:0b:34:bc:41:19:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F5:8A:43:A2:8E:94:D7:1C:7A:8D:03:61:C6:53:8B:37:F1:C4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3fd0a2c3-768d-3936-bc85-bdb81e27269c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:23:68:f3:ab:cb:c8:1a:07:ba:cc:be:39:d8:ac:14:46:44:
         09:ff:6b:df:04:32:6d:8e:25:55:71:7a:74:32:96:40:d0:81:
         99:78:20:ed:8c:e5:61:e9:a4:51:b3:cb:24:f8:15:a8:c5:39:
         fd:fe:4d:83:fb:05:ff:dd:88:08:b1:32:db:0a:ac:af:83:eb:
         1a:61:ae:eb:c6:06:73:41:71:50:3e:b5:95:9e:57:91:5f:9b:
         eb:6c:88:d2:d0:16:35:97:bb:01:f3:ae:d8:bf:94:32:8a:9f:
         d9:8b:a4:55:e6:5c:27:d0:52:3b:5a:a4:af:af:49:77:c4:60:
         0a:17:c2:75:fb:e9:55:fa:7e:9e:30:70:39:ca:61:6e:2f:e7:
         14:ab:d4:32:9a:55:43:72:8d:a5:55:76:24:b5:84:9d:0a:be:
         ac:dd:df:f3:5a:fa:8a:77:25:54:9a:61:f1:c6:59:48:aa:c9:
         89:4f:95:7b:19:8b:97:9d:77:63:e9:2d:d2:92:a1:95:c6:3d:
         ee:60:f0:54:c4:12:16:73:7a:13:09:f1:73:ca:8d:ac:33:53:
         6f:79:d5:63:0e:d3:1d:cf:67:1c:25:6e:cb:b0:bd:17:89:ed:
         c1:43:a0:e4:d9:00:fd:da:35:6e:d2:bb:81:a8:1d:0b:18:66:
         ce:74:e7:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDv8nGJVreo9PAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
NWU2NWM1MDAtODU4Ny00MzZkLTkzNjctYmU3ZmY4YzBjMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyYs9R2m5YaFXAi2Tz2PygFjDhIo19czIVU2
SoumvJuVPm4y/PfIqjItCpaNZ5bHJhEG/xyNU5YLDti8BbXRs1IlI5nVbE9swHOl
rhMmSkoDVqBAHalZfd5ntgxXjBGK+lUBQK+pRs5X18J8uWSNkJ9orwIHc57fuqZ9
wvlkCAJjz3BezmZiRw4nghQfFIvms+FMMuUO6Y5+0VnR3YrVkt69qdAPOqf6CtM+
TMRZaJtpKCtoT2Sa6gF7pg2ZhI6A2db47ZE/4ZayI2Qx41+9epG/RaKYvgNI5plS
G7bwQoCs5msEB/06RheyXmMdE2dT2dhonZupmWHcCzS8QRncXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG71ikOijpTXHHqNA2HGU4s38cR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvM2ZkMGEyYzMtNzY4ZC0z
OTM2LWJjODUtYmRiODFlMjcyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAjaPOry8gaB7rMvjnYrBRGRAn/a98EMm2OJVVxenQylkDQgZl4IO2M
5WHppFGzyyT4FajFOf3+TYP7Bf/diAixMtsKrK+D6xphruvGBnNBcVA+tZWeV5Ff
m+tsiNLQFjWXuwHzrti/lDKKn9mLpFXmXCfQUjtapK+vSXfEYAoXwnX76VX6fp4w
cDnKYW4v5xSr1DKaVUNyjaVVdiS1hJ0Kvqzd3/Na+op3JVSaYfHGWUiqyYlPlXsZ
i5edd2PpLdKSoZXGPe5g8FTEEhZzehMJ8XPKjawzU2951WMO0x3PZxwlbsuwvReJ
7cFDoOTZAP3aNW7Su4GoHQsYZs5054s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:50 2025 by rpki-client