Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69cbe6f4-c7b4-3624-a743-e4b3d0d08195.roa
File:                     69cbe6f4-c7b4-3624-a743-e4b3d0d08195.roa (raw, json)
Hash identifier:          M2Py4LfFajeCrwHZ06WLlrRqw25staL4WfpIuz4pDFg=
Subject key identifier:   D3:9F:C5:94:92:C6:8D:6F:0A:FB:60:0E:76:E4:73:90:72:72:7C:22
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D49900C7D0601E95A8F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69cbe6f4-c7b4-3624-a743-e4b3d0d08195.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        66.214.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:49:90:0c:7d:06:01:e9:5a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2f6a2d78-24f9-46c5-a28b-070d82c35f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:05:6f:88:12:0f:bd:4d:f0:c8:6a:92:bd:
                    96:09:9e:cc:8e:72:56:ac:7c:34:88:ae:50:33:15:
                    87:c6:b2:b1:08:0e:e9:1a:ea:d3:0f:42:14:18:01:
                    f4:5c:ab:21:7a:79:aa:92:81:ee:05:e5:eb:68:36:
                    f3:0c:f5:73:96:b9:26:32:6c:a3:c3:3b:6e:e0:98:
                    9c:92:bf:0e:30:c2:23:22:a9:2c:a1:93:d9:87:68:
                    e6:cb:53:34:45:da:6d:71:a1:71:59:e5:d4:8d:32:
                    2a:a0:5b:50:f4:25:8f:05:e6:89:b3:be:b2:06:0b:
                    1b:21:84:3c:6b:70:e5:e3:d9:b1:b0:1c:cc:b6:35:
                    1b:d3:65:3c:74:8f:bc:58:56:0f:28:69:29:91:3d:
                    25:05:30:c0:8b:46:11:9f:c1:aa:ac:60:d8:34:cb:
                    a6:28:b6:2e:31:84:52:83:e7:04:af:68:2c:3b:10:
                    02:43:86:23:a4:22:54:f4:1b:67:c7:ab:0e:21:55:
                    a8:e2:60:16:5b:e5:42:79:02:43:95:65:2d:1f:f3:
                    d4:a0:4d:5e:48:ad:89:28:30:36:19:41:90:61:01:
                    cf:da:ad:5b:98:8c:d5:6f:01:ed:1e:1b:68:31:d7:
                    6d:b5:8c:2e:6f:02:2f:2b:aa:45:72:0b:3f:1b:ba:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:C5:94:92:C6:8D:6F:0A:FB:60:0E:76:E4:73:90:72:72:7C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/69cbe6f4-c7b4-3624-a743-e4b3d0d08195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.214.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:22:c3:73:ce:3a:08:a9:f9:85:7f:cf:ce:dc:bf:5a:23:55:
         af:4d:12:74:1e:a8:85:1e:53:91:cf:a9:b4:37:a7:df:4d:c1:
         d1:b3:92:b5:3f:1c:60:17:b3:dc:4c:09:f2:66:4d:1f:35:48:
         73:b3:42:ef:8f:c7:b2:90:e8:7f:df:6c:f2:0c:b0:3c:7b:6b:
         7b:18:67:e3:55:93:cb:03:24:05:9b:58:1f:c5:b7:df:49:97:
         25:c6:ff:63:91:d8:31:0e:a0:7b:00:68:fb:07:c7:c6:c9:15:
         25:0e:48:d1:5e:4f:d2:28:82:f7:ea:e3:b2:95:0d:53:af:44:
         9a:a1:21:54:a0:d6:ec:cf:e4:e1:e2:db:af:0d:1b:fa:c6:9a:
         d4:37:a1:2b:94:66:17:d7:93:f9:71:40:d4:ae:6e:ea:08:67:
         b4:3c:32:1a:cb:da:45:b5:e5:39:5a:83:eb:64:15:b2:be:8d:
         51:c7:20:76:dd:43:9b:35:d8:d5:e0:9c:03:40:1e:89:4c:7a:
         35:bd:3e:fd:6a:fa:6f:24:a1:90:2d:10:d6:7c:d8:6c:7f:46:
         93:cc:4c:66:69:7b:39:17:13:cf:e1:83:8c:a9:e5:89:08:ec:
         bc:6a:b8:f9:68:5a:bd:3d:8e:90:ec:05:af:26:ee:dc:b1:a2:
         e2:3a:d7:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUmQDH0GAelaj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MmY2YTJkNzgtMjRmOS00NmM1LWEyOGItMDcwZDgyYzM1ZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTEFb4gSD71N8Mhqkr2WCZ7MjnJWrHw0iK5Q
MxWHxrKxCA7pGurTD0IUGAH0XKshenmqkoHuBeXraDbzDPVzlrkmMmyjwztu4Jic
kr8OMMIjIqksoZPZh2jmy1M0RdptcaFxWeXUjTIqoFtQ9CWPBeaJs76yBgsbIYQ8
a3Dl49mxsBzMtjUb02U8dI+8WFYPKGkpkT0lBTDAi0YRn8GqrGDYNMumKLYuMYRS
g+cEr2gsOxACQ4YjpCJU9Btnx6sOIVWo4mAWW+VCeQJDlWUtH/PUoE1eSK2JKDA2
GUGQYQHP2q1bmIzVbwHtHhtoMddttYwubwIvK6pFcgs/G7r64QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOfxZSSxo1vCvtgDnbkc5BycnwiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjljYmU2ZjQtYzdiNC0z
NjI0LWE3NDMtZTRiM2QwZDA4MTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgiw3POOgip+YV/z87cv1ojVa9NEnQeqIUeU5HPqbQ3p99NwdGzkrU/
HGAXs9xMCfJmTR81SHOzQu+Px7KQ6H/fbPIMsDx7a3sYZ+NVk8sDJAWbWB/Ft99J
lyXG/2OR2DEOoHsAaPsHx8bJFSUOSNFeT9Iogvfq47KVDVOvRJqhIVSg1uzP5OHi
268NG/rGmtQ3oSuUZhfXk/lxQNSubuoIZ7Q8MhrL2kW15Tlag+tkFbK+jVHHIHbd
Q5s12NXgnANAHolMejW9Pv1q+m8koZAtENZ82Gx/RpPMTGZpezkXE8/hg4yp5YkI
7LxquPloWr09jpDsBa8m7tyxouI614w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:35:46 2025 by rpki-client