Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/7b0b6429-7145-32fb-8c0d-208298348d3f.roa
File:                     7b0b6429-7145-32fb-8c0d-208298348d3f.roa (raw, json)
Hash identifier:          UCZ1erdILZenOtpDDD0Pow7eZ66vzwDHupRlVuJFPkc=
Subject key identifier:   C4:22:DD:AE:09:60:62:F9:68:6F:DA:98:DA:15:24:1E:2C:7B:4F:79
Certificate issuer:       /CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
Certificate serial:       010D0C9F432858499F249860A398CEC39B360A00
Authority key identifier: 30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/7b0b6429-7145-32fb-8c0d-208298348d3f.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        66.45.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:98:60:a3:98:ce:c3:9b:36:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63341d1-6cda-433e-9220-8eb860d0f1d5
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=0f23c648-915f-4224-b832-b4688a68f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fa:40:7f:07:da:69:be:17:f3:1e:86:90:26:
                    46:20:fa:7b:1d:f2:3b:ba:56:03:1a:ea:11:1d:69:
                    6f:b5:d8:2b:0d:2d:bb:a5:93:6d:41:d9:c9:e6:05:
                    39:60:58:f3:87:09:02:ba:ac:d4:82:4a:b9:74:1c:
                    8f:34:e3:bf:0f:e2:77:6b:61:c5:b3:2c:02:62:92:
                    36:56:d1:b7:99:e3:ec:e8:da:e8:56:99:dd:51:32:
                    54:b7:9f:18:2e:ff:e5:44:36:eb:c2:6e:6d:ac:22:
                    fe:d6:fc:ce:a5:b1:15:a3:ba:50:41:37:4b:9a:22:
                    8a:13:ad:96:36:49:f4:d0:f4:8c:5c:90:86:b6:af:
                    6b:a7:1e:7d:7d:1c:27:86:c2:9b:9b:04:b4:6b:97:
                    14:19:14:1e:7a:16:07:fe:75:59:68:3d:92:50:42:
                    f6:76:b4:20:a9:be:01:47:ad:7a:6a:84:0c:db:08:
                    c0:c8:a3:8c:36:c1:69:65:ab:06:5e:4f:4f:ea:74:
                    ad:bc:87:aa:e6:f7:75:af:9b:dd:c1:d0:c4:4b:b0:
                    ef:66:36:86:95:66:02:af:dd:8d:06:2f:be:43:ac:
                    e5:a8:9c:d0:4c:5b:9a:5a:04:c6:0b:b9:97:90:55:
                    ca:89:6c:55:de:51:ab:39:ef:da:ce:34:16:74:8c:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:DD:AE:09:60:62:F9:68:6F:DA:98:DA:15:24:1E:2C:7B:4F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/7b0b6429-7145-32fb-8c0d-208298348d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5/c63341d1-6cda-433e-9220-8eb860d0f1d5.crl

            X509v3 Authority Key Identifier:
                keyid:30:8E:63:48:1C:3A:A3:59:5B:A4:2F:67:BC:4B:84:13:B1:61:B0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c63341d1-6cda-433e-9220-8eb860d0f1d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:18:ac:5d:56:23:41:33:7b:d5:67:81:f8:d8:ed:a9:70:83:
         7e:3e:2a:2a:06:8e:0d:4a:97:78:02:67:3d:bc:a6:39:e8:39:
         5b:77:93:c6:ac:ca:e1:2f:3c:28:94:c9:3e:b3:64:96:4a:39:
         9a:f7:87:71:38:8f:28:49:ef:5f:4e:55:46:61:a9:fe:8b:75:
         31:47:a3:98:8e:e2:fb:84:43:fe:5f:2a:e0:40:91:d2:a9:97:
         90:b2:e8:db:3c:2b:20:ff:5a:dc:8f:2a:6b:c4:54:8b:1c:66:
         c4:d0:71:55:cb:07:11:a3:24:89:e3:94:c7:00:c0:c1:ae:4e:
         af:dc:99:06:32:11:17:b9:89:78:2b:78:4e:3b:c9:19:72:a3:
         eb:4e:40:e7:9f:44:f2:92:21:73:b1:27:6f:f2:92:88:20:40:
         f5:48:6b:20:78:72:36:7a:e3:c6:82:c1:09:48:3d:e8:48:50:
         b0:79:89:41:fa:6d:bc:69:e4:94:f5:e9:f3:ff:c7:92:ef:38:
         a0:d7:7e:04:5f:1e:d1:4d:bd:23:61:28:6c:aa:b4:61:d2:64:
         e9:48:57:0a:1c:f4:ea:94:bf:b4:b5:61:8d:64:37:15:44:ae:
         68:e4:cc:0f:3d:bb:ec:ba:d9:30:56:43:5e:56:53:a2:0b:4b:
         ed:b0:50:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJhgo5jOw5s2CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzMzQxZDEtNmNkYS00MzNlLTkyMjAtOGViODYwZDBm
MWQ1MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
MGYyM2M2NDgtOTE1Zi00MjI0LWI4MzItYjQ2ODhhNjhmMGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfpAfwfaab4X8x6GkCZGIPp7HfI7ulYDGuoR
HWlvtdgrDS27pZNtQdnJ5gU5YFjzhwkCuqzUgkq5dByPNOO/D+J3a2HFsywCYpI2
VtG3mePs6NroVpndUTJUt58YLv/lRDbrwm5trCL+1vzOpbEVo7pQQTdLmiKKE62W
Nkn00PSMXJCGtq9rpx59fRwnhsKbmwS0a5cUGRQeehYH/nVZaD2SUEL2drQgqb4B
R616aoQM2wjAyKOMNsFpZasGXk9P6nStvIeq5vd1r5vdwdDES7DvZjaGlWYCr92N
Bi++Q6zlqJzQTFuaWgTGC7mXkFXKiWxV3lGrOe/azjQWdIzo/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQi3a4JYGL5aG/amNoVJB4se095MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jNjMz
NDFkMS02Y2RhLTQzM2UtOTIyMC04ZWI4NjBkMGYxZDUvN2IwYjY0MjktNzE0NS0z
MmZiLThjMGQtMjA4Mjk4MzQ4ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzYzMzQxZDEtNmNkYS00MzNlLTky
MjAtOGViODYwZDBmMWQ1L2M2MzM0MWQxLTZjZGEtNDMzZS05MjIwLThlYjg2MGQw
ZjFkNS5jcmwwHwYDVR0jBBgwFoAUMI5jSBw6o1lbpC9nvEuEE7FhsHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jNjMzNDFkMS02Y2RhLTQzM2UtOTIyMC04ZWI4
NjBkMGYxZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi1KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYYrF1WI0Eze9VngfjY7alwg34+KioGjg1Kl3gCZz28pjnoOVt3k8as
yuEvPCiUyT6zZJZKOZr3h3E4jyhJ719OVUZhqf6LdTFHo5iO4vuEQ/5fKuBAkdKp
l5Cy6Ns8KyD/WtyPKmvEVIscZsTQcVXLBxGjJInjlMcAwMGuTq/cmQYyERe5iXgr
eE47yRlyo+tOQOefRPKSIXOxJ2/ykoggQPVIayB4cjZ648aCwQlIPehIULB5iUH6
bbxp5JT16fP/x5LvOKDXfgRfHtFNvSNhKGyqtGHSZOlIVwoc9OqUv7S1YY1kNxVE
rmjkzA89u+y62TBWQ15WU6ILS+2wUCk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:31 2025 by rpki-client