Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/507f67e3-f724-3c86-b6b5-b241b505f02a.roa
File:                     507f67e3-f724-3c86-b6b5-b241b505f02a.roa (raw, json)
Hash identifier:          i1wQOf8mC40r/a9RhfV+wrINeMG1qdZEUMQS6j2ysDg=
Subject key identifier:   9D:4E:7F:0E:F3:51:9B:D4:3A:60:28:C8:1B:7B:36:24:F1:98:C0:F3
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584B6201EC699EF3A1F147B4DA40
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/507f67e3-f724-3c86-b6b5-b241b505f02a.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        66.197.177.0/24 maxlen: 24
                          66.197.178.0/24 maxlen: 24
                          66.197.179.0/24 maxlen: 24
                          66.197.180.0/24 maxlen: 24
                          66.197.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ec:69:9e:f3:a1:f1:47:b4:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=85ea5674-bcb8-461d-92e2-7b2a0ce0c101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:98:48:2d:d5:5b:d6:af:4d:3a:da:27:f4:
                    92:d9:62:52:29:bd:d0:69:58:69:27:8e:b4:55:85:
                    1a:58:2b:80:77:9d:8f:05:a9:94:50:d9:14:f8:99:
                    6a:8f:13:7d:f0:47:40:3b:f8:df:0d:a7:35:04:7f:
                    71:10:53:87:ab:72:dc:cc:31:63:bf:48:63:48:dc:
                    bb:48:d7:e2:9b:33:a7:9b:87:3b:7d:95:72:ee:38:
                    56:57:ba:a4:a3:54:10:c4:d6:8c:3a:d2:45:e7:c1:
                    09:0a:79:84:7a:0d:0e:0c:37:bc:cf:bc:01:9b:32:
                    cd:1d:09:d4:7c:75:eb:12:ad:c1:6b:eb:3d:9f:27:
                    4f:b6:49:67:39:83:2a:a5:c3:17:b5:6e:c9:59:b4:
                    46:1f:1d:e5:35:09:ee:92:09:80:2b:f8:dc:6b:b6:
                    8f:29:36:66:38:bc:3b:4f:58:00:dd:35:03:5e:c6:
                    44:97:23:97:22:ed:bc:12:84:6c:26:06:9e:97:e7:
                    82:d3:fb:d4:cb:b8:80:8c:b2:10:61:fb:8e:c8:d2:
                    3f:d4:d1:0d:6d:ea:ad:f0:7b:ff:5d:af:75:af:08:
                    da:93:3a:5f:b9:3d:c2:26:92:a3:cd:b3:6f:6e:c8:
                    9d:1f:6b:95:19:84:4b:5a:30:a5:fd:45:07:a3:70:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:7F:0E:F3:51:9B:D4:3A:60:28:C8:1B:7B:36:24:F1:98:C0:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/507f67e3-f724-3c86-b6b5-b241b505f02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.197.177.0-66.197.181.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:9a:dd:5c:a9:3d:fb:fc:c8:9d:f0:ad:95:d2:2b:63:66:
         a7:b4:2d:10:7f:61:a0:fd:e7:1d:50:98:8f:c0:10:29:4c:a5:
         23:38:71:ed:d3:3a:76:cf:a9:4c:98:7f:78:26:81:8a:d5:3b:
         9b:01:61:d8:36:f3:39:60:54:a4:9e:aa:37:da:53:4d:3e:a7:
         da:f4:a2:4e:aa:fa:53:4e:db:8b:fd:e1:17:53:a6:09:b0:e3:
         88:b1:8a:f7:c4:16:42:ed:51:8e:70:ce:6b:2c:d9:e7:08:ae:
         b7:38:f9:04:aa:33:10:70:2a:85:a9:be:d4:95:de:63:70:fa:
         10:d7:41:22:88:27:bc:2a:82:75:4c:bc:1b:ab:74:26:1e:e8:
         f9:a1:69:0a:6f:fe:da:27:be:3e:6d:57:fe:60:84:64:f1:da:
         ed:94:8f:25:f4:13:9c:a6:5d:ab:e0:fd:ad:b1:be:62:34:c8:
         96:ed:f9:2e:a8:09:43:e3:01:e3:a3:ea:9a:d4:18:98:2d:8e:
         d7:9d:7f:8a:5a:63:47:75:ca:18:e9:f8:55:16:e4:20:41:1a:
         18:58:6d:52:82:56:16:6a:cc:ca:6d:64:b0:b9:3f:cc:ff:94:
         43:10:75:29:bb:7e:9c:ed:3c:a1:28:59:ac:42:67:cf:ea:2b:
         5f:f1:f5:15
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtiAexpnvOh8Ue02kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl
NTdjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ODVlYTU2NzQtYmNiOC00NjFkLTkyZTItN2IyYTBjZTBjMTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoaYSC3VW9avTTraJ/SS2WJSKb3QaVhpJ460
VYUaWCuAd52PBamUUNkU+JlqjxN98EdAO/jfDac1BH9xEFOHq3LczDFjv0hjSNy7
SNfimzOnm4c7fZVy7jhWV7qko1QQxNaMOtJF58EJCnmEeg0ODDe8z7wBmzLNHQnU
fHXrEq3Ba+s9nydPtklnOYMqpcMXtW7JWbRGHx3lNQnukgmAK/jca7aPKTZmOLw7
T1gA3TUDXsZElyOXIu28EoRsJgael+eC0/vUy7iAjLIQYfuOyNI/1NENbeqt8Hv/
Xa91rwjakzpfuT3CJpKjzbNvbsidH2uVGYRLWjCl/UUHo3CEMQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJ1Ofw7zUZvUOmAoyBt7NiTxmMDzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2
NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvNTA3ZjY3ZTMtZjcyNC0z
Yzg2LWI2YjUtYjI0MWI1MDVmMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk
Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2
NWIyNmU1N2MuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCxbED
BAFCxbQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAqJya3VypPfv8yJ3wrZXSK2Nmp7QtEH9hoP3nHVCYj8AQ
KUylIzhx7dM6ds+pTJh/eCaBitU7mwFh2DbzOWBUpJ6qN9pTTT6n2vSiTqr6U07b
i/3hF1OmCbDjiLGK98QWQu1RjnDOayzZ5wiutzj5BKozEHAqham+1JXeY3D6ENdB
IognvCqCdUy8G6t0Jh7o+aFpCm/+2ie+Pm1X/mCEZPHa7ZSPJfQTnKZdq+D9rbG+
YjTIlu35LqgJQ+MB46PqmtQYmC2O151/ilpjR3XKGOn4VRbkIEEaGFhtUoJWFmrM
ym1ksLk/zP+UQxB1Kbt+nO08oShZrEJnz+orX/H1FQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:34 2025 by rpki-client