Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa
File:                     ea2b8f6b-1d68-3288-867f-4922b4a39175.roa (raw, json)
Hash identifier:          2JP61gfKJUrvPMlvNWkk+eJ7E/9x+kd0px4XVu/G8fw=
Subject key identifier:   2C:24:AC:E4:15:9B:17:84:96:D4:EA:10:38:92:C0:D5:E8:9C:22:44
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F43285849DC8FB2B368D0885E822C6000
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     18875
IP address blocks:        216.20.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b2:b3:68:d0:88:5e:82:2c:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=101f250a-4314-454d-94bd-b4cd5ddf3e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:36:96:b2:1a:a0:25:05:92:7a:44:e0:f2:
                    15:46:8b:59:37:15:23:23:51:b4:53:19:a4:db:b8:
                    b4:09:e0:a7:5d:fa:3a:65:e6:d0:a4:42:79:be:80:
                    a5:ba:68:71:fc:cc:35:6e:db:86:43:41:1c:11:fd:
                    57:39:70:61:ae:ec:a1:94:ff:7b:cb:e1:6c:4b:fa:
                    7f:cd:c9:07:18:f2:5a:33:67:8b:ab:30:bf:8a:82:
                    58:3d:aa:57:1c:53:54:fd:ce:58:00:4c:f8:a5:cd:
                    3b:73:86:8d:5a:32:e7:b3:c5:65:00:62:b4:d0:16:
                    13:87:97:d3:77:75:f3:58:d0:ca:8f:88:88:3d:49:
                    b9:7b:a0:40:89:b1:02:a2:78:c6:05:af:fd:fc:2f:
                    a6:e4:b1:0d:1f:7a:17:0b:2a:47:d3:57:b6:ad:de:
                    68:12:ea:b0:c3:43:87:90:db:78:ec:56:ef:60:e7:
                    b4:8b:11:28:0a:40:b1:83:66:3d:c9:99:3f:c8:4f:
                    b2:ac:50:d4:e0:1a:52:26:4e:cd:a9:da:0c:c7:63:
                    9e:15:2b:c4:55:68:37:18:dc:59:f5:37:35:eb:80:
                    ec:3a:af:3a:9d:cd:6c:12:79:9d:08:75:ea:76:4e:
                    c4:48:7e:bd:68:51:5a:b9:1f:7f:e6:11:b5:54:2b:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:24:AC:E4:15:9B:17:84:96:D4:EA:10:38:92:C0:D5:E8:9C:22:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:02:be:ec:a2:a3:94:c1:2d:da:4c:ab:1e:55:db:01:e3:
         5b:b3:df:d2:1f:3d:38:d6:a0:c7:d9:46:71:de:60:64:6b:be:
         8f:9c:b3:d6:bc:7f:f8:1b:c6:b1:10:77:fb:3a:16:3f:4c:2c:
         5f:88:bd:99:54:da:bc:ff:c4:41:15:c4:63:41:22:db:14:b7:
         9f:12:8d:2f:c0:f7:ef:4b:ff:36:7e:46:21:9d:b7:61:36:73:
         18:f6:eb:fd:62:b4:eb:33:33:ca:85:a9:6d:5d:ec:4e:f9:c8:
         15:b3:23:6b:b3:b5:7d:2f:a1:4b:c0:66:28:bb:87:1d:a1:92:
         2c:94:4c:2d:2e:28:79:b7:0c:cf:8b:aa:f3:11:9c:2f:ae:91:
         e3:a7:6a:a5:f0:89:72:14:37:9d:0a:93:bb:da:9e:de:ff:c7:
         f6:03:16:7a:08:2b:59:b5:fd:89:7b:d7:b2:bd:8d:7d:90:f0:
         82:e6:61:53:c3:9d:41:e3:5f:3b:43:bf:db:28:4d:c8:23:6c:
         e0:c9:b1:d0:47:8d:e7:5d:31:8d:a6:02:18:89:f3:d0:8a:6e:
         11:3f:b8:9e:1a:60:35:1b:0b:4f:86:34:46:2e:fc:2f:ae:19:
         97:bc:da:a7:1e:3f:71:7f:19:fa:b6:fc:2f:5d:b3:90:30:cf:
         c1:91:20:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7KzaNCIXoIsYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk
YjI2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
MTAxZjI1MGEtNDMxNC00NTRkLTk0YmQtYjRjZDVkZGYzZTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhME2lrIaoCUFknpE4PIVRotZNxUjI1G0Uxmk
27i0CeCnXfo6ZebQpEJ5voClumhx/Mw1btuGQ0EcEf1XOXBhruyhlP97y+FsS/p/
zckHGPJaM2eLqzC/ioJYPapXHFNU/c5YAEz4pc07c4aNWjLns8VlAGK00BYTh5fT
d3XzWNDKj4iIPUm5e6BAibEConjGBa/9/C+m5LENH3oXCypH01e2rd5oEuqww0OH
kNt47FbvYOe0ixEoCkCxg2Y9yZk/yE+yrFDU4BpSJk7NqdoMx2OeFSvEVWg3GNxZ
9Tc164DsOq86nc1sEnmdCHXqdk7ESH69aFFauR9/5hG1VCtlSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwkrOQVmxeEltTqEDiSwNXonCJEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5
MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvZWEyYjhmNmItMWQ2OC0z
Mjg4LTg2N2YtNDkyMmI0YTM5MTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3
NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0
ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy
YzI3NGRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BTQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIR8Ar7soqOUwS3aTKseVdsB41uz39IfPTjWoMfZRnHeYGRrvo+cs9a8
f/gbxrEQd/s6Fj9MLF+IvZlU2rz/xEEVxGNBItsUt58SjS/A9+9L/zZ+RiGdt2E2
cxj26/1itOszM8qFqW1d7E75yBWzI2uztX0voUvAZii7hx2hkiyUTC0uKHm3DM+L
qvMRnC+ukeOnaqXwiXIUN50Kk7vant7/x/YDFnoIK1m1/Yl717K9jX2Q8ILmYVPD
nUHjXztDv9soTcgjbODJsdBHjeddMY2mAhiJ89CKbhE/uJ4aYDUbC0+GNEYu/C+u
GZe82qceP3F/Gfq2/C9ds5Awz8GRIE8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:28:49 2025 by rpki-client