Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa
File:                     e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa (raw, json)
Hash identifier:          CI6bgta3h7tGgDdd5ExrBBGF1WmLxuHZs0zt0nMO8mo=
Subject key identifier:   AC:3B:20:88:AF:C5:37:69:6A:43:6B:95:4E:C7:8D:1A:76:28:60:08
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F4328584A8C70C4D699D7C1D9B23FB0A0
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     10753
IP address blocks:        64.29.70.0/24 maxlen: 24
                          66.180.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c4:d6:99:d7:c1:d9:b2:3f:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=4aab5742-cdc9-4d50-95c1-89943261cac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0b:7c:be:c1:1d:ca:28:38:0c:e6:23:42:bb:
                    47:8a:5b:88:4c:7d:74:69:12:52:2c:15:d7:f8:7c:
                    fe:4b:57:bd:25:4a:7a:c4:e3:c2:0d:12:be:f9:82:
                    61:a9:6b:37:9e:07:09:12:03:a2:0e:c0:10:c3:be:
                    36:23:96:59:4b:72:82:16:c6:6c:59:69:41:3c:b1:
                    67:81:08:e9:e6:59:3d:8d:ea:b7:e5:73:5d:d4:e1:
                    2f:7f:6f:c1:99:fc:54:7b:5f:b7:2d:f4:b4:c0:7d:
                    8b:9c:e7:36:99:7f:e7:0b:3c:e1:20:4d:6e:75:af:
                    7a:c0:af:94:91:bf:f7:59:9d:34:a5:63:59:e5:cb:
                    aa:e5:2c:5c:17:b8:24:09:5f:de:a9:62:45:a4:b6:
                    cb:f9:0c:6e:33:44:5e:2b:35:57:17:2a:9a:c9:6c:
                    11:37:d8:ac:ef:08:8a:0c:0a:9f:27:d9:61:40:d1:
                    56:6f:47:6a:f6:a0:03:e4:e0:9d:13:66:e6:c5:0c:
                    6d:23:60:21:93:a0:92:09:c6:19:67:06:d0:08:d0:
                    77:58:eb:67:cd:4e:69:66:c4:ce:e3:b4:c1:d1:3b:
                    e0:47:2f:b2:bd:0c:0b:5c:28:84:7a:5e:2a:af:d1:
                    36:e1:b0:b6:85:9a:f2:cb:f5:3c:39:ed:1b:48:64:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:20:88:AF:C5:37:69:6A:43:6B:95:4E:C7:8D:1A:76:28:60:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/e0d41d80-bc3a-30ca-a6d8-db9aef437404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.70.0/24
                  66.180.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ec:69:4d:4d:33:e6:67:12:ed:16:11:67:1c:9b:6a:a5:a4:
         c4:64:bc:19:ba:c5:71:32:1c:7a:ce:9e:ac:ac:ec:e1:dd:92:
         5e:d4:5d:62:6b:4a:41:74:1c:3b:87:07:ec:59:81:3f:e6:71:
         7d:54:8c:09:04:22:58:88:a8:f6:f8:0a:f9:b5:52:85:a3:48:
         17:c9:6b:f7:d4:09:35:35:51:67:94:5b:e2:8e:05:e0:76:4b:
         ed:c4:de:29:e4:b0:a5:ed:e8:34:bd:ce:ca:5c:4f:23:71:85:
         48:f6:fb:b5:20:c0:e9:f6:41:f1:79:a6:e8:0f:67:f0:cb:ce:
         f8:66:a5:d6:40:07:7d:e9:cb:c5:a6:e7:47:88:77:8e:16:a2:
         61:44:ec:c8:91:1b:72:8d:61:30:1a:55:22:57:d7:ad:0e:6f:
         89:26:69:3d:cf:80:d5:67:54:fb:57:75:4e:c4:e4:c1:d6:3b:
         14:8b:f2:97:48:c6:d2:e4:c2:81:12:19:95:e0:e0:83:5f:74:
         82:ec:53:3c:c6:63:a1:e6:b4:60:8c:cc:5c:fd:07:b3:6d:e8:
         ec:4c:27:15:54:d8:07:33:ce:e0:19:4f:b5:15:ac:e7:78:bb:
         ce:80:5c:a1:37:6b:13:2b:15:d1:10:86:68:38:40:1a:06:f8:
         7d:a2:e0:49
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqMcMTWmdfB2bI/sKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU1MzY3MDEtZTQwYy00MjBhLWFiZDAtOTkzYmY4ZTBl
YWM4MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
NGFhYjU3NDItY2RjOS00ZDUwLTk1YzEtODk5NDMyNjFjYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQt8vsEdyig4DOYjQrtHiluITH10aRJSLBXX
+Hz+S1e9JUp6xOPCDRK++YJhqWs3ngcJEgOiDsAQw742I5ZZS3KCFsZsWWlBPLFn
gQjp5lk9jeq35XNd1OEvf2/BmfxUe1+3LfS0wH2LnOc2mX/nCzzhIE1uda96wK+U
kb/3WZ00pWNZ5cuq5SxcF7gkCV/eqWJFpLbL+QxuM0ReKzVXFyqayWwRN9is7wiK
DAqfJ9lhQNFWb0dq9qAD5OCdE2bmxQxtI2Ahk6CSCcYZZwbQCNB3WOtnzU5pZsTO
47TB0TvgRy+yvQwLXCiEel4qr9E24bC2hZryy/U8Oe0bSGRgiQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKw7IIivxTdpakNrlU7HjRp2KGAIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUz
NjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhlMGVhYzgvZTBkNDFkODAtYmMzYS0z
MGNhLWE2ZDgtZGI5YWVmNDM3NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU1MzY3MDEtZTQwYy00MjBhLWFi
ZDAtOTkzYmY4ZTBlYWM4LzFlNTM2NzAxLWU0MGMtNDIwYS1hYmQwLTk5M2JmOGUw
ZWFjOC5jcmwwHwYDVR0jBBgwFoAUTOj0knFEJlIJQflQP4AuKyHOilswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNi
ZjhlMGVhYzguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQB1GAwQA
QrSXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADvsaU1NM+ZnEu0WEWccm2qlpMRkvBm6xXEyHHrOnqys7OHd
kl7UXWJrSkF0HDuHB+xZgT/mcX1UjAkEIliIqPb4Cvm1UoWjSBfJa/fUCTU1UWeU
W+KOBeB2S+3E3inksKXt6DS9zspcTyNxhUj2+7UgwOn2QfF5pugPZ/DLzvhmpdZA
B33py8Wm50eId44WomFE7MiRG3KNYTAaVSJX160Ob4kmaT3PgNVnVPtXdU7E5MHW
OxSL8pdIxtLkwoESGZXg4INfdILsUzzGY6HmtGCMzFz9B7Nt6OxMJxVU2AczzuAZ
T7UVrOd4u86AXKE3axMrFdEQhmg4QBoG+H2i4Ek=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:03 2025 by rpki-client