Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa
File:                     bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa (raw, json)
Hash identifier:          gguQkNrsfhdkgLQqvPcC0UNeZ65wWj4wfSdyWi4LuuU=
Subject key identifier:   4B:9E:12:5B:D7:77:51:A3:31:39:B9:62:91:A3:68:79:F4:F3:6D:73
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584AADF0FAB2FF38A66CDE0455E0
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     8038
IP address blocks:        67.221.240.0/24 maxlen: 24
                          67.221.242.0/24 maxlen: 24
                          67.221.244.0/24 maxlen: 24
                          67.221.245.0/24 maxlen: 24
                          67.221.250.0/24 maxlen: 24
                          67.221.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:fa:b2:ff:38:a6:6c:de:04:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=b1da7e1d-6d2f-4604-82f8-1648f5ef5733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:cc:62:96:01:9b:e0:0b:4c:19:4c:f2:67:
                    58:bf:99:3e:f6:46:55:b7:1f:40:fb:46:07:78:09:
                    28:44:73:d5:7c:5f:63:19:d0:e9:a2:42:b3:46:c9:
                    25:b3:0c:32:bc:d0:e6:5f:d0:ef:98:77:29:8b:ad:
                    59:53:19:53:78:7f:1e:e6:b1:ca:b7:34:51:f3:ab:
                    f6:5a:3c:55:53:d3:20:6a:ac:b4:1e:d2:af:9c:4d:
                    4a:74:89:6f:5b:4b:3d:1b:96:2b:c4:51:7e:19:44:
                    74:0c:d2:be:41:81:9b:5c:4c:c7:6e:97:d1:b9:0e:
                    54:56:40:ad:83:87:7c:76:1f:b1:ef:29:71:ca:36:
                    24:4a:53:f4:65:6b:bf:cf:37:4e:24:43:75:70:47:
                    bb:aa:2e:50:14:ac:2c:45:6b:f2:fa:3c:46:26:f4:
                    e1:53:bd:59:93:0c:88:c1:57:75:09:93:64:6d:52:
                    27:26:4f:23:9a:e0:13:8e:1e:cd:6a:d8:c5:a0:bd:
                    ac:b9:f0:b2:1d:f0:8c:66:37:9f:c2:fb:fa:32:2b:
                    d1:26:5f:d1:8f:c6:95:0b:81:ba:fb:b6:a5:bf:e1:
                    d4:70:62:2a:ca:6a:a4:ca:ca:22:48:a6:7e:b7:f0:
                    24:cb:57:ba:70:92:60:87:f9:8b:ab:cf:ee:a6:3d:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9E:12:5B:D7:77:51:A3:31:39:B9:62:91:A3:68:79:F4:F3:6D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/bb93c04e-7ef3-3636-b09a-f83039fa4aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.240.0/24
                  67.221.242.0/24
                  67.221.244.0/23
                  67.221.250.0/24
                  67.221.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:c2:85:64:a5:d5:fa:d8:d5:b0:9a:82:8c:30:4d:ae:7c:
         f8:40:56:19:0c:25:73:53:a4:0b:9b:16:f8:57:bd:d2:85:aa:
         93:22:b2:72:7b:f6:35:d2:15:da:da:4a:c7:d2:df:70:ca:1d:
         0f:6d:a0:c4:37:87:3a:47:ff:2e:52:81:66:f7:db:45:4b:8a:
         bf:47:21:6e:13:aa:0e:f7:70:fd:25:91:42:3a:4f:bd:08:1d:
         6b:46:5e:57:be:bd:ba:38:f9:2a:c5:06:0e:d0:2f:cf:5d:26:
         6b:96:53:13:e2:eb:e9:f6:0a:04:69:c5:73:6a:b9:32:54:ea:
         7e:44:23:01:77:f7:19:71:f7:f1:0b:3d:48:92:29:79:b9:74:
         87:0c:2a:33:5a:23:5d:ab:48:06:ad:b5:c6:71:e7:99:fe:24:
         fa:2b:e6:2a:f5:27:54:cc:c7:55:13:dc:d4:c4:e7:75:42:e5:
         9a:65:36:fd:0f:d6:c4:08:8f:03:e2:22:1a:3b:48:27:5c:50:
         71:98:80:90:fd:6c:fa:8e:8b:4a:e5:37:71:3d:fc:49:2d:bb:
         42:77:21:b1:7b:24:f7:0a:db:74:a0:e6:e5:40:8a:c1:1f:e5:
         ba:87:0d:6d:a4:9e:64:ee:d5:e4:56:eb:66:cf:e7:f5:78:db:
         8e:2f:1f:ab
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEqt8Pqy/zimbN4EVeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQzMTNjYTctODFlNy00MmUyLWJmMzgtYzk2YmI4Mzll
Y2Y0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
YjFkYTdlMWQtNmQyZi00NjA0LTgyZjgtMTY0OGY1ZWY1NzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWjMYpYBm+ALTBlM8mdYv5k+9kZVtx9A+0YH
eAkoRHPVfF9jGdDpokKzRsklswwyvNDmX9DvmHcpi61ZUxlTeH8e5rHKtzRR86v2
WjxVU9Mgaqy0HtKvnE1KdIlvW0s9G5YrxFF+GUR0DNK+QYGbXEzHbpfRuQ5UVkCt
g4d8dh+x7ylxyjYkSlP0ZWu/zzdOJEN1cEe7qi5QFKwsRWvy+jxGJvThU71ZkwyI
wVd1CZNkbVInJk8jmuATjh7NatjFoL2sufCyHfCMZjefwvv6MivRJl/Rj8aVC4G6
+7alv+HUcGIqymqkysoiSKZ+t/Aky1e6cJJgh/mLq8/upj1WFQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFEueElvXd1GjMTm5YpGjaHn0821zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMx
M2NhNy04MWU3LTQyZTItYmYzOC1jOTZiYjgzOWVjZjQvYmI5M2MwNGUtN2VmMy0z
NjM2LWIwOWEtZjgzMDM5ZmE0YWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWQzMTNjYTctODFlNy00MmUyLWJm
MzgtYzk2YmI4MzllY2Y0L2VkMzEzY2E3LTgxZTctNDJlMi1iZjM4LWM5NmJiODM5
ZWNmNC5jcmwwHwYDVR0jBBgwFoAUXZd2euVa2pUu/hSsnovu5Oj9kt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZDMxM2NhNy04MWU3LTQyZTItYmYzOC1jOTZi
YjgzOWVjZjQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQ93wAwQA
Q93yAwQBQ930AwQAQ936AwQAQ93+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ0zwoVkpdX62NWwmoKMME2u
fPhAVhkMJXNTpAubFvhXvdKFqpMisnJ79jXSFdraSsfS33DKHQ9toMQ3hzpH/y5S
gWb320VLir9HIW4Tqg73cP0lkUI6T70IHWtGXle+vbo4+SrFBg7QL89dJmuWUxPi
6+n2CgRpxXNquTJU6n5EIwF39xlx9/ELPUiSKXm5dIcMKjNaI12rSAattcZx55n+
JPor5ir1J1TMx1UT3NTE53VC5ZplNv0P1sQIjwPiIho7SCdcUHGYgJD9bPqOi0rl
N3E9/Ektu0J3IbF7JPcK23Sg5uVAisEf5bqHDW2knmTu1eRW62bP5/V4244vH6s=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:03 2025 by rpki-client