Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/6c7a1f59-6809-3921-b596-eaaaa35d6cde.roa
File:                     6c7a1f59-6809-3921-b596-eaaaa35d6cde.roa (raw, json)
Hash identifier:          Kmg/Zy/tg0Zrus0IkT67ohCp2gw2VOvDS/6TvELwD70=
Subject key identifier:   56:2F:40:3D:C1:E1:A8:52:3B:9A:CE:88:C3:12:E4:78:5D:7A:59:B3
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858499F249D282E9717DAC9416A00
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/6c7a1f59-6809-3921-b596-eaaaa35d6cde.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     33635
IP address blocks:        66.36.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9d:28:2e:97:17:da:c9:41:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=8c6b51cb-6888-4c68-a0af-230ace0d8030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:88:2f:2d:7c:de:6d:23:19:29:45:df:80:
                    c2:a2:15:4b:59:19:1a:9e:0b:c2:70:c0:e8:10:55:
                    7c:e3:f2:7c:27:d6:24:11:59:64:57:b3:68:a2:99:
                    89:93:0e:ee:be:ce:01:fb:c2:50:0f:ef:79:cd:ea:
                    dc:ae:df:16:e1:2d:8e:d4:5b:50:ac:85:b4:b7:f6:
                    7a:db:96:98:21:db:f4:dc:50:54:03:5e:ba:b8:ce:
                    6d:43:12:8a:6d:46:de:55:1c:5b:44:18:a6:16:14:
                    a6:7a:7a:9c:06:e2:f2:b9:fc:b8:92:0a:df:61:7c:
                    29:f3:68:f5:3e:05:68:7b:54:0e:7c:49:76:78:75:
                    e6:fb:3e:38:f1:df:34:7f:e3:b6:eb:74:df:f7:ce:
                    f8:7f:1a:a6:af:68:5f:2f:c5:7e:78:ec:23:83:da:
                    0f:c7:ce:8a:bf:75:d2:fd:ab:3b:f2:15:88:4d:ba:
                    e7:63:81:59:ef:10:54:b9:7d:6e:12:8d:d8:a7:31:
                    5e:40:de:4c:21:1d:17:2d:2c:df:de:5f:6b:a7:ed:
                    0a:a8:e0:4c:0e:5f:24:73:9b:77:a6:f2:c1:4a:20:
                    b5:8d:1c:eb:b4:8a:4e:d9:b4:88:9e:4c:af:ee:90:
                    e9:2b:59:b1:a7:5c:cd:d8:3b:6d:4f:21:a0:99:2f:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:40:3D:C1:E1:A8:52:3B:9A:CE:88:C3:12:E4:78:5D:7A:59:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/6c7a1f59-6809-3921-b596-eaaaa35d6cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:75:da:4e:36:8b:e4:ff:71:34:81:2b:42:37:24:2a:af:
         7b:f9:30:95:59:5d:84:97:f2:a4:4d:6e:76:32:be:e3:f6:84:
         9f:52:1e:56:cc:20:b0:be:2a:e5:6b:6e:92:3c:e1:e8:43:86:
         06:93:65:be:2d:3f:b1:35:6c:be:11:17:29:20:b9:89:28:a6:
         22:dd:c9:2b:c7:a9:f6:83:fb:83:d5:09:69:9f:a3:e3:03:82:
         b6:33:43:fe:73:3a:46:40:d0:eb:34:bd:51:1d:ea:00:9d:40:
         63:bd:bc:d5:73:df:81:4a:67:9a:d3:32:f0:5a:ca:b1:3b:45:
         74:aa:4c:5a:0b:0b:a6:a7:1c:3b:65:b2:c9:2e:e3:e0:71:8c:
         a6:43:76:70:e9:4c:8e:32:97:54:16:5a:d2:73:f0:a4:10:99:
         6e:1f:a6:1c:7d:a4:00:44:c9:05:bd:d0:02:17:3d:4c:33:85:
         8c:3e:be:54:7b:55:b9:90:ed:df:f6:c4:13:48:42:86:f0:0c:
         58:0a:11:11:c7:39:83:b0:aa:fe:3f:2e:7e:ad:a6:49:9b:e0:
         e0:e0:ef:73:04:d1:f0:32:cb:47:ec:53:95:61:be:68:e9:79:
         fa:5b:d3:91:80:8c:22:df:b8:a7:a4:12:56:82:59:04:a8:e0:
         a6:dd:4f:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJ0oLpcX2slBagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2
ZTM1MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
OGM2YjUxY2ItNjg4OC00YzY4LWEwYWYtMjMwYWNlMGQ4MDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihuILy183m0jGSlF34DCohVLWRkangvCcMDo
EFV84/J8J9YkEVlkV7NoopmJkw7uvs4B+8JQD+95zercrt8W4S2O1FtQrIW0t/Z6
25aYIdv03FBUA166uM5tQxKKbUbeVRxbRBimFhSmenqcBuLyufy4kgrfYXwp82j1
PgVoe1QOfEl2eHXm+z448d80f+O263Tf9874fxqmr2hfL8V+eOwjg9oPx86Kv3XS
/as78hWITbrnY4FZ7xBUuX1uEo3YpzFeQN5MIR0XLSzf3l9rp+0KqOBMDl8kc5t3
pvLBSiC1jRzrtIpO2bSInkyv7pDpK1mxp1zN2DttTyGgmS8daQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYvQD3B4ahSO5rOiMMS5HhdelmzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMWZj
MTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvNmM3YTFmNTktNjgwOS0z
OTIxLWI1OTYtZWFhYWEzNWQ2Y2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDFmYzE4MTUtMzRlZi00MjRkLTgy
NTgtNTA2ZjhiNDg2ZTM1LzAxZmMxODE1LTM0ZWYtNDI0ZC04MjU4LTUwNmY4YjQ4
NmUzNS5jcmwwHwYDVR0jBBgwFoAUUaJ7qddOmwRfZds/wwhmgYTMQJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZm
OGI0ODZlMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiR0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEpddpONovk/3E0gStCNyQqr3v5MJVZXYSX8qRNbnYyvuP2hJ9SHlbM
ILC+KuVrbpI84ehDhgaTZb4tP7E1bL4RFykguYkopiLdySvHqfaD+4PVCWmfo+MD
grYzQ/5zOkZA0Os0vVEd6gCdQGO9vNVz34FKZ5rTMvBayrE7RXSqTFoLC6anHDtl
ssku4+BxjKZDdnDpTI4yl1QWWtJz8KQQmW4fphx9pABEyQW90AIXPUwzhYw+vlR7
VbmQ7d/2xBNIQobwDFgKERHHOYOwqv4/Ln6tpkmb4ODg73ME0fAyy0fsU5Vhvmjp
efpb05GAjCLfuKekElaCWQSo4KbdT/s=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:18 2025 by rpki-client