Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa
File:                     6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa (raw, json)
Hash identifier:          CSpchvx0kGgwK7K8pF7RxxpZeIgR0xQ/0Wzqdngg1sc=
Subject key identifier:   48:1F:BA:BD:C6:C9:FF:9D:65:9F:4F:25:4C:30:CB:99:5A:84:66:61
Certificate issuer:       /CN=f64099bb-9c22-4781-89a0-e4774501bccf
Certificate serial:       010D0C9F4328584AFAB6813F65092D659241E4E0
Authority key identifier: 9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     36294
IP address blocks:        208.74.68.0/22 maxlen: 22
                          216.10.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:81:3f:65:09:2d:65:92:41:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64099bb-9c22-4781-89a0-e4774501bccf
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=1519ecb5-a2e0-424d-9d56-01db823fc065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:33:cc:8c:f1:b3:f6:60:50:9c:72:83:07:
                    95:a2:0a:56:75:56:d7:35:9f:09:29:8f:d1:ed:27:
                    bd:82:8a:db:72:f5:af:2e:56:90:67:3c:cb:e0:89:
                    b7:bb:9a:fe:be:1a:a2:17:2e:c1:7a:f5:c7:50:cb:
                    7c:0e:3d:82:49:55:9a:27:1d:90:4c:ea:5c:13:15:
                    3c:5e:c7:18:52:1c:61:52:c6:3f:11:65:5a:b8:aa:
                    ac:77:2c:58:3e:cc:81:63:b6:ec:8e:a7:6c:88:1c:
                    a2:5f:17:36:37:5f:87:ce:14:f0:c9:d3:9d:ff:85:
                    71:8f:89:e3:38:93:9e:80:f3:58:e6:0d:86:03:34:
                    4d:13:15:a6:06:9d:f0:82:09:67:8f:4d:56:85:89:
                    60:16:6d:8b:24:37:70:39:d5:c5:3f:68:1d:9d:1d:
                    7f:a6:b6:a4:9d:8c:85:0e:ef:d9:11:71:81:49:64:
                    22:15:6b:16:70:17:83:83:d8:88:80:39:10:b3:f8:
                    1e:7f:98:c2:4d:15:b8:2b:76:9f:ff:df:d3:54:a4:
                    8f:70:2d:ce:8a:bc:89:46:25:2c:3f:fe:25:e3:66:
                    9b:bf:57:15:f9:99:f6:5a:13:bf:a3:39:74:04:c8:
                    a5:fe:26:7b:d0:53:f2:63:5d:26:44:19:b8:79:1c:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:BA:BD:C6:C9:FF:9D:65:9F:4F:25:4C:30:CB:99:5A:84:66:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.68.0/22
                  216.10.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:dd:17:76:a5:af:44:33:7b:6d:9c:90:b7:66:97:9f:ed:03:
         74:73:1c:db:99:55:88:0b:63:03:ed:20:9e:b2:82:40:8c:d7:
         fd:2f:81:2b:71:0c:4e:bc:8e:62:24:df:2e:24:eb:32:35:ee:
         96:a3:b4:36:fe:ec:32:75:a0:38:22:67:91:c4:16:17:66:37:
         5f:f7:c1:d9:df:60:f3:06:32:da:4d:d9:71:c6:6f:3a:a9:4f:
         ba:de:ed:c7:4f:57:5a:a3:50:c0:0f:78:8d:6e:f1:c7:3d:2d:
         af:d7:b4:96:a9:b8:15:d7:bf:27:bf:e8:6d:b9:db:7a:40:b4:
         a9:bd:d0:ec:37:e5:65:c0:45:83:64:84:28:ce:0b:95:bc:ba:
         cb:b7:c3:13:f1:14:e3:74:7f:45:b3:df:16:e4:07:23:80:38:
         69:00:d8:69:76:b3:a9:10:60:d0:1b:75:25:1b:0e:cd:7c:01:
         c9:8e:bd:64:c7:c3:3b:d0:2f:81:1e:34:99:ca:36:08:04:6c:
         5b:77:93:d6:8c:db:cf:40:8e:ab:5a:03:c2:f3:cc:70:47:84:
         bb:85:46:d0:32:b9:6e:a1:bb:89:75:6a:68:60:02:04:a8:95:
         70:2a:8e:a0:2b:bc:b9:31:12:f5:34:41:3d:c4:26:67:27:86:
         f0:1c:52:9b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr6toE/ZQktZZJB5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY0MDk5YmItOWMyMi00NzgxLTg5YTAtZTQ3NzQ1MDFi
Y2NmMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk
MTUxOWVjYjUtYTJlMC00MjRkLTlkNTYtMDFkYjgyM2ZjMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUzzIzxs/ZgUJxygweVogpWdVbXNZ8JKY/R
7Se9gorbcvWvLlaQZzzL4Im3u5r+vhqiFy7BevXHUMt8Dj2CSVWaJx2QTOpcExU8
XscYUhxhUsY/EWVauKqsdyxYPsyBY7bsjqdsiByiXxc2N1+HzhTwydOd/4Vxj4nj
OJOegPNY5g2GAzRNExWmBp3wgglnj01WhYlgFm2LJDdwOdXFP2gdnR1/praknYyF
Du/ZEXGBSWQiFWsWcBeDg9iIgDkQs/gef5jCTRW4K3af/9/TVKSPcC3OiryJRiUs
P/4l42abv1cV+Zn2WhO/ozl0BMil/iZ70FPyY10mRBm4eRyvZwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEgfur3Gyf+dZZ9PJUwwy5lahGZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjQw
OTliYi05YzIyLTQ3ODEtODlhMC1lNDc3NDUwMWJjY2YvNmIxM2FmMDAtMmVjNy0z
OGQ4LTg2ODMtZjhhMzc4ZWRiYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjY0MDk5YmItOWMyMi00NzgxLTg5
YTAtZTQ3NzQ1MDFiY2NmL2Y2NDA5OWJiLTljMjItNDc4MS04OWEwLWU0Nzc0NTAx
YmNjZi5jcmwwHwYDVR0jBBgwFoAUneppSZvi6D1buaGJQmqAVer60lQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mNjQwOTliYi05YzIyLTQ3ODEtODlhMC1lNDc3
NDUwMWJjY2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0EpEAwQC
2ApAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABfdF3alr0Qze22ckLdml5/tA3RzHNuZVYgLYwPtIJ6ygkCM
1/0vgStxDE68jmIk3y4k6zI17pajtDb+7DJ1oDgiZ5HEFhdmN1/3wdnfYPMGMtpN
2XHGbzqpT7re7cdPV1qjUMAPeI1u8cc9La/XtJapuBXXvye/6G2523pAtKm90Ow3
5WXARYNkhCjOC5W8usu3wxPxFON0f0Wz3xbkByOAOGkA2Gl2s6kQYNAbdSUbDs18
AcmOvWTHwzvQL4EeNJnKNggEbFt3k9aM289AjqtaA8LzzHBHhLuFRtAyuW6hu4l1
amhgAgSolXAqjqArvLkxEvU0QT3EJmcnhvAcUps=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:29 2025 by rpki-client