Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e3cd6dd-6134-3abf-8eb0-6e27543d38d1.roa
File:                     2e3cd6dd-6134-3abf-8eb0-6e27543d38d1.roa (raw, json)
Hash identifier:          cPsdecBh/PraZJIi1tdJV2XxYAm4scfcrCZmKTYLnuQ=
Subject key identifier:   41:C3:EE:02:63:D3:C0:2B:7D:96:E7:B0:AC:0B:66:EF:34:70:A9:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800A0CEFCF92405902D600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e3cd6dd-6134-3abf-8eb0-6e27543d38d1.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        66.48.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0a:0c:ef:cf:92:40:59:02:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=b320afc2-f06d-4d03-ab91-840ee471c5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:87:be:00:34:ce:4b:e6:b7:0c:c9:3c:93:
                    8a:c3:f8:1a:be:54:2a:7c:8a:0d:c9:6d:10:d9:14:
                    99:48:b1:c0:4b:93:fc:c5:00:f5:fb:f6:93:13:24:
                    09:21:c0:47:24:f7:86:6d:08:00:91:f5:29:93:2b:
                    0c:18:7f:6a:e5:65:0f:4e:d4:bb:9c:8f:d5:fb:6b:
                    6a:9c:80:15:9b:e9:3e:41:1c:53:f3:79:49:9b:21:
                    2d:1f:7f:6a:81:75:41:bc:62:5b:ed:66:4d:e1:b5:
                    e8:fa:a2:fa:a0:cb:e0:7e:f5:03:31:83:24:d2:90:
                    0b:37:3c:15:8c:97:65:8e:cb:1e:be:2d:38:cf:b7:
                    ff:56:e9:71:13:a3:d0:e9:29:07:39:be:29:52:92:
                    cc:cf:35:6a:d7:43:48:44:78:7e:cf:50:a4:b6:0d:
                    21:c0:f5:fc:c4:8d:14:88:7b:f1:6a:59:fb:c6:0c:
                    c6:5a:21:1e:80:24:9c:13:84:46:b1:2e:00:48:e7:
                    af:3c:82:31:63:ba:f8:f8:22:a2:a5:e7:8b:0f:2e:
                    15:d5:0b:cd:43:8e:1d:1d:6d:28:03:ee:07:ee:af:
                    41:4c:2c:90:ae:f9:a9:b1:4b:a0:ad:1e:1a:89:76:
                    ed:76:60:f2:b2:7b:dd:b3:f2:a1:f4:51:93:35:f3:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:EE:02:63:D3:C0:2B:7D:96:E7:B0:AC:0B:66:EF:34:70:A9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e3cd6dd-6134-3abf-8eb0-6e27543d38d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:99:12:b8:79:d3:48:b6:2d:3e:a8:80:d7:1a:07:52:d1:
         df:41:29:a8:86:1e:db:e6:26:cc:99:83:c4:71:cb:67:e3:bb:
         36:e2:90:a5:c1:c0:58:2c:47:cf:62:75:82:53:a2:df:8b:80:
         b9:35:00:4a:83:e0:c5:32:5d:0d:48:ea:66:a5:23:0d:82:b3:
         79:d3:e9:f9:e1:9b:0f:87:26:22:ed:a6:d8:ee:4a:55:b7:2e:
         66:79:6a:17:35:2d:75:52:dc:48:99:7c:8c:49:2f:1b:64:9e:
         cd:86:ab:94:c9:7e:dc:89:aa:02:10:a4:24:b0:65:5a:75:dc:
         89:bd:f5:92:17:19:4f:71:7b:a2:e5:eb:a0:d3:ce:68:8d:df:
         54:c6:7a:72:87:e9:d8:6c:a9:f2:f8:2a:db:4e:9b:d1:31:43:
         76:28:f5:64:d1:fe:19:aa:05:de:94:a4:46:80:9a:1d:0d:4c:
         c7:ed:67:65:c4:63:85:06:23:3a:28:88:fe:10:57:79:de:e3:
         68:cd:4e:fd:06:20:74:9f:c7:36:ce:d6:55:59:d5:59:45:04:
         2a:33:14:00:7f:72:81:b1:15:86:3d:34:48:ec:02:ba:07:99:
         ee:07:56:ee:92:44:6b:3d:ef:3d:15:88:90:26:11:70:72:70:
         09:06:77:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnxgAoM78+SQFkC1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YjMyMGFmYzItZjA2ZC00ZDAzLWFiOTEtODQwZWU0NzFjNWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEeHvgA0zkvmtwzJPJOKw/gavlQqfIoNyW0Q
2RSZSLHAS5P8xQD1+/aTEyQJIcBHJPeGbQgAkfUpkysMGH9q5WUPTtS7nI/V+2tq
nIAVm+k+QRxT83lJmyEtH39qgXVBvGJb7WZN4bXo+qL6oMvgfvUDMYMk0pALNzwV
jJdljssevi04z7f/VulxE6PQ6SkHOb4pUpLMzzVq10NIRHh+z1Cktg0hwPX8xI0U
iHvxaln7xgzGWiEegCScE4RGsS4ASOevPIIxY7r4+CKipeeLDy4V1QvNQ44dHW0o
A+4H7q9BTCyQrvmpsUugrR4aiXbtdmDysnvds/Kh9FGTNfMUEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEHD7gJj08ArfZbnsKwLZu80cKljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmUzY2Q2ZGQtNjEzNC0z
YWJmLThlYjAtNmUyNzU0M2QzOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQjAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXOKZErh500i2LT6ogNcaB1LR30EpqIYe2+YmzJmDxHHLZ+O7NuKQpcHA
WCxHz2J1glOi34uAuTUASoPgxTJdDUjqZqUjDYKzedPp+eGbD4cmIu2m2O5KVbcu
ZnlqFzUtdVLcSJl8jEkvG2SezYarlMl+3ImqAhCkJLBlWnXcib31khcZT3F7ouXr
oNPOaI3fVMZ6cofp2Gyp8vgq206b0TFDdij1ZNH+GaoF3pSkRoCaHQ1Mx+1nZcRj
hQYjOiiI/hBXed7jaM1O/QYgdJ/HNs7WVVnVWUUEKjMUAH9ygbEVhj00SOwCugeZ
7gdW7pJEaz3vPRWIkCYRcHJwCQZ3Ww==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:43:54 2025 by rpki-client