Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/768d7434-14ec-3257-b7e1-71e33e25c59f.roa
File:                     768d7434-14ec-3257-b7e1-71e33e25c59f.roa (raw, json)
Hash identifier:          Qz9zNdsbwCa6bZ+P1v3THukkHyXIgKZsFKxCljbpzq8=
Subject key identifier:   66:68:27:E9:F6:70:C2:87:34:2B:7E:49:D9:7F:F1:6C:B2:8C:A2:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A2ABAEBD6121B2CA560DB9E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/768d7434-14ec-3257-b7e1-71e33e25c59f.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     21769
IP address blocks:        67.203.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:eb:d6:12:1b:2c:a5:60:db:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=276ba039-e230-4c57-b583-43b2581be046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:dd:7c:6e:58:66:b0:e3:cf:85:55:10:b1:
                    85:6d:17:9d:4d:60:64:46:de:7d:47:c3:1b:3e:74:
                    46:3a:42:e2:03:f9:98:e1:a8:34:bd:d5:3a:b5:f3:
                    e7:eb:eb:04:a1:3f:b5:80:9c:6b:59:48:29:9f:d4:
                    b0:13:a3:2f:80:77:aa:25:0c:c7:08:46:8c:e5:59:
                    46:19:d5:95:14:45:31:f4:04:d0:82:2f:a1:db:99:
                    34:d8:29:90:3d:56:82:87:8a:17:6f:c7:c2:a2:63:
                    cf:61:34:41:22:ca:a0:be:39:39:eb:cd:a2:a6:28:
                    30:96:9e:d9:d8:c8:59:51:cd:26:f9:07:7b:01:0b:
                    9b:ef:90:25:b9:be:5a:01:a5:4f:56:79:3d:7e:d6:
                    11:f6:b3:10:25:c4:c5:63:72:a9:ef:8d:f2:d8:3f:
                    d8:8c:c2:75:42:ee:99:8d:43:44:dc:b1:5a:3d:ea:
                    7c:ae:c6:a8:ef:0d:14:97:c0:5d:ad:f6:18:36:0c:
                    de:34:8a:e6:8b:d4:40:50:a6:83:81:e9:54:7b:bf:
                    05:bd:df:f7:06:67:c5:35:39:ea:7d:7e:46:5e:b1:
                    ee:f3:d1:2f:44:60:d2:c8:c2:90:d2:f1:78:90:d5:
                    3a:4b:4e:73:6b:e3:81:05:61:e2:ff:08:84:7a:cd:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:68:27:E9:F6:70:C2:87:34:2B:7E:49:D9:7F:F1:6C:B2:8C:A2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/768d7434-14ec-3257-b7e1-71e33e25c59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:c8:01:4b:64:8b:f9:2b:5b:02:61:3f:ba:5f:1e:08:cf:
         0a:fa:73:c2:ef:93:72:e2:45:c4:e7:e4:61:1f:7e:28:75:8b:
         d3:89:e5:e9:f1:46:33:b5:3f:30:54:67:7c:79:a3:19:eb:2c:
         90:13:9e:52:47:74:3d:9f:97:d1:24:b5:58:ba:77:44:8d:43:
         67:df:21:07:01:8a:70:ab:26:c0:6b:a5:a2:b4:85:71:3c:39:
         7b:1d:6a:4e:f4:89:23:b1:4d:08:7e:42:f6:a9:65:df:6b:2a:
         be:90:d4:3d:d3:ff:01:ca:6b:6c:db:92:b9:e2:c0:fe:1a:4d:
         d0:eb:87:35:e6:07:f6:6b:f7:08:bd:62:8a:3c:fb:0a:b9:8b:
         1e:a7:89:1f:94:5b:3f:ef:9e:3d:45:cd:42:4f:c4:3d:45:6d:
         11:63:dd:68:f6:c1:8b:50:e3:b7:34:b9:f9:d8:fd:e5:5b:88:
         b5:dd:9e:5b:a8:08:c1:f3:dd:d1:87:69:cd:af:c5:2b:e9:74:
         bb:87:67:f4:0d:9e:90:42:1d:de:ed:b9:18:17:df:63:38:69:
         c5:3e:e6:22:0a:11:6f:65:ca:d6:c2:4d:52:c5:04:14:d2:5c:
         cf:ba:99:7d:3a:3f:0c:af:20:84:bd:e4:20:12:62:4d:a3:a3:
         77:7b:78:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuvWEhsspWDbnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
Mjc2YmEwMzktZTIzMC00YzU3LWI1ODMtNDNiMjU4MWJlMDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxHdfG5YZrDjz4VVELGFbRedTWBkRt59R8Mb
PnRGOkLiA/mY4ag0vdU6tfPn6+sEoT+1gJxrWUgpn9SwE6MvgHeqJQzHCEaM5VlG
GdWVFEUx9ATQgi+h25k02CmQPVaCh4oXb8fComPPYTRBIsqgvjk5682ipigwlp7Z
2MhZUc0m+Qd7AQub75Alub5aAaVPVnk9ftYR9rMQJcTFY3Kp743y2D/YjMJ1Qu6Z
jUNE3LFaPep8rsao7w0Ul8BdrfYYNgzeNIrmi9RAUKaDgelUe78Fvd/3BmfFNTnq
fX5GXrHu89EvRGDSyMKQ0vF4kNU6S05za+OBBWHi/wiEes15xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZoJ+n2cMKHNCt+Sdl/8WyyjKKdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzY4ZDc0MzQtMTRlYy0z
MjU3LWI3ZTEtNzFlMzNlMjVjNTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ8swMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0eyAFLZIv5K1sCYT+6Xx4Izwr6c8Lvk3LiRcTn5GEffih1i9OJ5enx
RjO1PzBUZ3x5oxnrLJATnlJHdD2fl9EktVi6d0SNQ2ffIQcBinCrJsBrpaK0hXE8
OXsdak70iSOxTQh+QvapZd9rKr6Q1D3T/wHKa2zbkrniwP4aTdDrhzXmB/Zr9wi9
Yoo8+wq5ix6niR+UWz/vnj1FzUJPxD1FbRFj3Wj2wYtQ47c0ufnY/eVbiLXdnluo
CMHz3dGHac2vxSvpdLuHZ/QNnpBCHd7tuRgX32M4acU+5iIKEW9lytbCTVLFBBTS
XM+6mX06PwyvIIS95CASYk2jo3d7eHY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:16:39 2025 by rpki-client