Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa
File:                     b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa (raw, json)
Hash identifier:          QvTvh0AxQCEHUvCtgF0GIZM8DDxNL1NCKnUD5WZv1dA=
Subject key identifier:   8C:D3:11:58:7F:05:E6:89:58:71:2A:10:CB:BA:BF:1A:D6:F7:AE:BB
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584AADF104F948966FFCB9897140
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     5662
IP address blocks:        157.166.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:04:f9:48:96:6f:fc:b9:89:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=8725622e-e98f-4913-bf0e-c65aa1e63fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:c0:5c:d3:2a:a6:e3:12:26:c5:56:10:b1:
                    cf:2b:08:27:e9:70:0c:73:8d:d4:f6:fe:d5:b5:31:
                    ec:c9:57:9a:08:1d:1a:25:5d:c9:8c:17:14:ab:fd:
                    bb:ac:cb:b4:01:dc:f8:7f:11:74:4b:37:96:43:bc:
                    40:cf:38:0f:29:26:e9:29:9c:2a:05:ec:52:13:c8:
                    15:31:3c:ee:a3:37:1a:b4:e1:7b:ad:5e:27:25:81:
                    5c:db:4a:68:9b:fe:10:c7:c7:d8:d5:20:f1:93:1f:
                    b9:a8:37:9d:9f:53:ea:08:2a:64:82:80:09:81:c0:
                    01:e2:d6:7b:62:63:2d:92:a2:14:8f:ac:74:bc:07:
                    f0:d7:29:f7:de:7e:55:c3:0d:b6:f6:d9:9e:33:ee:
                    3f:e5:e4:31:97:fa:c3:5c:97:d9:4d:0e:ec:b8:0d:
                    9d:42:6d:de:9b:29:7d:b3:bf:7f:a5:62:15:dd:29:
                    3c:bb:a4:a7:e8:42:49:a1:43:10:65:a9:45:64:5f:
                    f8:0d:cd:59:87:6d:2c:e5:2b:4d:58:b3:3e:4a:30:
                    b4:88:a9:98:28:63:12:af:83:e7:2d:ad:40:63:a5:
                    d3:ba:91:3e:7f:e5:50:3b:05:44:66:a8:cc:ac:06:
                    a6:27:eb:db:b1:ca:c9:4f:c2:cb:3b:83:eb:eb:24:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D3:11:58:7F:05:E6:89:58:71:2A:10:CB:BA:BF:1A:D6:F7:AE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:82:98:d6:5e:e9:44:7a:19:48:24:03:05:a2:f3:7b:bb:80:
         f2:e1:3f:06:36:8a:11:0c:82:34:db:c4:d9:e7:a9:37:9c:6c:
         0d:02:de:d0:77:59:bb:01:67:5f:86:f6:a7:5f:41:15:97:0e:
         08:0d:a1:54:17:59:78:9a:10:45:03:99:28:5c:f0:0b:fa:b3:
         e7:f3:c4:d5:c1:c0:e2:84:7d:d6:15:64:45:2a:d2:c6:36:da:
         0c:d1:69:82:69:30:63:ad:d5:a8:d6:55:55:12:ac:31:16:78:
         5f:3b:72:c8:8a:26:69:b7:a4:42:89:5b:83:1c:0c:18:70:54:
         a9:0b:b4:5c:59:bb:67:72:e2:9f:1a:d8:32:50:4a:37:89:e3:
         49:19:3d:63:1b:db:4d:22:62:52:24:f7:c6:e7:fc:35:cb:d4:
         ec:59:50:73:14:a4:f8:44:af:1d:c5:c4:e4:e6:67:e0:1f:bf:
         52:81:4e:4c:b6:73:ca:90:7e:fd:f2:c7:e2:d0:bd:49:78:a8:
         39:e8:71:a4:ba:e9:5a:37:78:e7:fc:a0:4f:f6:0a:cc:d1:c0:
         b2:d6:12:5b:c5:c5:17:91:91:82:5e:36:57:74:f3:02:c6:c4:
         78:d5:c4:7a:0e:de:4c:6c:cf:89:dc:95:9d:cc:b9:fe:87:27:
         66:05:fb:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QT5SJZv/LmJcUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi
OTU1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
ODcyNTYyMmUtZTk4Zi00OTEzLWJmMGUtYzY1YWExZTYzZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30HAXNMqpuMSJsVWELHPKwgn6XAMc43U9v7V
tTHsyVeaCB0aJV3JjBcUq/27rMu0Adz4fxF0SzeWQ7xAzzgPKSbpKZwqBexSE8gV
MTzuozcatOF7rV4nJYFc20pom/4Qx8fY1SDxkx+5qDedn1PqCCpkgoAJgcAB4tZ7
YmMtkqIUj6x0vAfw1yn33n5Vww229tmeM+4/5eQxl/rDXJfZTQ7suA2dQm3emyl9
s79/pWIV3Sk8u6Sn6EJJoUMQZalFZF/4Dc1Zh20s5StNWLM+SjC0iKmYKGMSr4Pn
La1AY6XTupE+f+VQOwVEZqjMrAamJ+vbscrJT8LLO4Pr6ySTVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzTEVh/BeaJWHEqEMu6vxrW9667MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz
NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvYjA5Y2Y4NmEtNDllOS0z
YWZjLThlY2QtMmUyZDVkMGQzNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm
M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm
Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1
Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaCmNZe6UR6GUgkAwWi83u7gPLhPwY2ihEMgjTbxNnnqTecbA0C3tB3
WbsBZ1+G9qdfQRWXDggNoVQXWXiaEEUDmShc8Av6s+fzxNXBwOKEfdYVZEUq0sY2
2gzRaYJpMGOt1ajWVVUSrDEWeF87csiKJmm3pEKJW4McDBhwVKkLtFxZu2dy4p8a
2DJQSjeJ40kZPWMb200iYlIk98bn/DXL1OxZUHMUpPhErx3FxOTmZ+Afv1KBTky2
c8qQfv3yx+LQvUl4qDnocaS66Vo3eOf8oE/2CszRwLLWElvFxReRkYJeNld08wLG
xHjVxHoO3kxsz4nclZ3Muf6HJ2YF+ww=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:51 2025 by rpki-client