Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa
File:                     f1389442-5028-3887-b4f0-43f58569208c.roa (raw, json)
Hash identifier:          ImJHC3QqelDxjnfWLsoPRDHpIHKNchAI85gCzdJIVag=
Subject key identifier:   9F:64:A6:60:F0:28:8C:A3:AA:2C:D9:7A:67:EF:C9:25:C4:9B:0B:17
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F4328584A2ABAE5D41FC240F8AE9FDC00
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        66.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e5:d4:1f:c2:40:f8:ae:9f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=887608be-6d3e-4d12-b62d-0654c9c316d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:90:fa:4f:43:54:58:9f:14:d3:e2:10:42:
                    52:93:04:cd:69:4d:77:9b:d7:75:5d:af:35:6b:4a:
                    de:55:53:9b:b9:8d:c5:98:f4:ce:a2:92:60:da:27:
                    55:4d:9a:d9:bf:93:67:c4:c6:91:02:c6:c0:d6:ec:
                    7b:cc:89:72:6b:92:ce:44:1d:84:4e:a7:83:cb:4e:
                    6f:a4:7f:7d:89:e6:8a:47:5e:42:74:6a:04:3b:ad:
                    3e:05:6e:5f:87:2c:41:70:03:8a:1a:d7:8e:67:4c:
                    e1:c0:30:f3:1c:db:fa:00:da:d3:df:b9:73:69:c2:
                    2d:10:16:c5:b3:77:a9:dc:f3:bf:71:97:26:05:db:
                    99:ce:5c:0f:ff:cd:62:0b:90:f7:52:76:10:98:f0:
                    da:e9:25:8e:ce:b7:c1:88:ee:38:e5:d5:32:ab:36:
                    11:97:1a:d7:1a:4d:84:76:69:12:cd:ac:76:ba:bb:
                    43:d4:a6:5a:43:3b:2d:04:4e:da:49:57:e3:1c:ec:
                    39:4e:54:a9:b6:4c:59:ba:ee:74:30:2b:00:9a:1b:
                    3b:24:b3:28:dc:63:f3:03:fc:e8:72:ff:47:09:77:
                    05:9d:ba:da:72:04:58:00:99:2b:e2:f6:c5:7c:96:
                    fe:82:d1:52:86:ec:68:c1:4e:fd:e1:86:60:f9:49:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:A6:60:F0:28:8C:A3:AA:2C:D9:7A:67:EF:C9:25:C4:9B:0B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:73:6d:82:b0:7f:c9:e4:6c:43:a1:66:19:ba:64:7f:84:
         cc:8f:7a:32:c4:0e:96:cd:03:01:f5:61:a2:35:d6:f0:a3:1d:
         54:3f:a1:79:30:e6:7d:e0:31:73:10:8a:4d:e6:2a:dd:21:a3:
         e0:b4:16:2b:a1:e0:68:73:e6:fe:98:ca:12:bb:81:17:fd:b7:
         f2:29:16:9c:10:a8:58:f7:95:be:be:9d:ae:96:54:6e:e1:92:
         d6:3b:2e:b9:44:cd:91:cc:0f:27:fd:a3:ac:be:9f:e5:8f:64:
         62:b6:13:5a:7a:56:c2:8c:1c:95:c2:b2:35:69:44:1d:92:dd:
         5b:03:10:53:8d:40:0c:a6:76:40:7a:54:7a:09:e4:ae:d4:5d:
         ff:a3:a6:ba:e0:fe:0d:dc:a6:e2:77:3f:fb:22:9c:d4:d6:66:
         5c:56:fa:ce:5f:a9:c5:35:2b:82:7d:a6:09:f9:d5:23:17:0a:
         bf:cf:81:92:5a:6a:d5:00:7e:57:2d:34:08:af:8b:54:b3:b5:
         28:85:9d:ae:af:c6:e7:43:54:62:be:24:6e:d8:a2:d6:65:d3:
         90:1f:61:f8:3b:44:dc:d4:3f:d4:12:e1:57:1f:8a:57:31:56:
         9b:08:84:25:f5:f3:2a:76:80:c5:78:c7:46:00:ec:cf:57:12:
         be:48:10:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuXUH8JA+K6f3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZlODlmNmYtNTMwZi00ZmQ2LThjOWYtNjhjNDQ3OGIz
YTQwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
ODg3NjA4YmUtNmQzZS00ZDEyLWI2MmQtMDY1NGM5YzMxNmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKQ+k9DVFifFNPiEEJSkwTNaU13m9d1Xa81
a0reVVObuY3FmPTOopJg2idVTZrZv5NnxMaRAsbA1ux7zIlya5LORB2ETqeDy05v
pH99ieaKR15CdGoEO60+BW5fhyxBcAOKGteOZ0zhwDDzHNv6ANrT37lzacItEBbF
s3ep3PO/cZcmBduZzlwP/81iC5D3UnYQmPDa6SWOzrfBiO445dUyqzYRlxrXGk2E
dmkSzax2urtD1KZaQzstBE7aSVfjHOw5TlSptkxZuu50MCsAmhs7JLMo3GPzA/zo
cv9HCXcFnbracgRYAJkr4vbFfJb+gtFShuxowU794YZg+UkpgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9kpmDwKIyjqizZemfvySXEmwsXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4
OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0NDc4YjNhNDAvZjEzODk0NDItNTAyOC0z
ODg3LWI0ZjAtNDNmNTg1NjkyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmZlODlmNmYtNTMwZi00ZmQ2LThj
OWYtNjhjNDQ3OGIzYTQwLzJmZTg5ZjZmLTUzMGYtNGZkNi04YzlmLTY4YzQ0Nzhi
M2E0MC5jcmwwHwYDVR0jBBgwFoAU68kNvj5cEQqhykqFI16xMNimyscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0
NDc4YjNhNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKhc22CsH/J5GxDoWYZumR/hMyPejLEDpbNAwH1YaI11vCjHVQ/oXkw
5n3gMXMQik3mKt0ho+C0Fiuh4Ghz5v6YyhK7gRf9t/IpFpwQqFj3lb6+na6WVG7h
ktY7LrlEzZHMDyf9o6y+n+WPZGK2E1p6VsKMHJXCsjVpRB2S3VsDEFONQAymdkB6
VHoJ5K7UXf+jprrg/g3cpuJ3P/sinNTWZlxW+s5fqcU1K4J9pgn51SMXCr/PgZJa
atUAflctNAivi1SztSiFna6vxudDVGK+JG7YotZl05AfYfg7RNzUP9QS4Vcfilcx
VpsIhCX18yp2gMV4x0YA7M9XEr5IEFU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:34:49 2025 by rpki-client