Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/c695956c-2339-309a-b261-41321bf324a7.roa
File:                     c695956c-2339-309a-b261-41321bf324a7.roa (raw, json)
Hash identifier:          KpLlotq8+PG5tZ15/FUuYmHOmvkAoUNNGXJwETFKXCY=
Subject key identifier:   D1:9D:55:98:42:D6:C3:4E:C1:65:55:20:EE:40:95:B3:AD:B4:58:E4
Certificate issuer:       /CN=221fa56a-4e00-462c-9583-3f6493cb4c92
Certificate serial:       010D0C9F43285849F71516450A91F37C8385A540
Authority key identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/c695956c-2339-309a-b261-41321bf324a7.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     206092
IP address blocks:        216.73.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:16:45:0a:91:f3:7c:83:85:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221fa56a-4e00-462c-9583-3f6493cb4c92
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=da2d71a4-b034-48c5-aec2-6d7ab83b9521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:75:b5:d8:bf:43:3a:46:36:cb:0f:57:da:
                    6e:af:d2:fd:a4:72:d9:16:a6:31:1c:72:13:a9:0c:
                    da:76:58:9e:01:b8:f8:5f:b4:a0:05:5c:31:6d:78:
                    ee:7e:2e:63:e3:2f:72:bd:9d:d3:03:7e:9b:ff:ff:
                    3a:83:45:b1:18:e9:2b:23:55:72:79:53:33:d9:b3:
                    fa:05:97:ec:a6:43:a3:d1:fa:58:46:27:0e:ab:72:
                    54:d5:40:7e:a0:46:a1:e1:ff:fe:36:fe:9f:3b:8c:
                    9a:3c:ea:ee:85:f5:5d:8f:bd:2b:b9:d6:4a:18:4a:
                    20:59:cc:b2:21:26:32:8c:44:46:02:af:75:9f:bd:
                    02:8d:73:91:a9:92:30:72:95:85:d0:a5:7c:08:df:
                    69:e5:97:8a:d9:7c:3b:cb:40:32:85:40:d7:81:0e:
                    7d:f0:a1:e4:91:7b:1f:c5:f3:36:19:05:e9:97:5a:
                    70:0a:d6:93:13:32:4b:c2:8b:de:d3:42:6a:af:38:
                    e4:89:36:66:de:8b:da:9b:42:cf:59:d0:29:e4:24:
                    0b:9c:db:6f:24:a5:73:58:26:47:d8:5d:30:e3:df:
                    87:26:21:0f:12:dc:c0:41:66:5a:81:73:7c:0f:dd:
                    17:d7:fc:3d:62:2e:31:64:2a:ea:74:a3:42:10:24:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:55:98:42:D6:C3:4E:C1:65:55:20:EE:40:95:B3:AD:B4:58:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/c695956c-2339-309a-b261-41321bf324a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.crl

            X509v3 Authority Key Identifier:
                keyid:59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:05:93:80:06:f6:ff:40:97:f7:58:ba:18:e0:44:11:6f:98:
         94:05:21:14:76:cd:95:c8:d1:53:6f:2b:70:e1:05:46:5b:ec:
         05:e8:76:75:66:fb:45:4c:e0:de:1e:b5:90:08:c5:2b:13:6a:
         34:57:c1:7b:ba:8b:6a:13:32:3f:c6:7b:67:e8:17:02:6f:7f:
         79:fb:78:f4:99:84:9c:3c:83:13:d1:1a:08:1a:80:c3:30:e1:
         ef:ae:1f:6b:07:8b:f7:0d:a9:ec:2f:e8:80:13:c9:63:85:00:
         22:ac:97:fb:e8:b5:20:71:f0:10:2e:0c:2f:67:d1:72:87:28:
         9e:4f:62:90:57:c1:f8:a0:9d:3c:c4:28:cb:5f:67:e0:34:80:
         21:e9:1d:20:54:ea:80:d1:46:d8:42:68:1b:2f:86:d5:8a:13:
         da:40:d5:c3:bc:b4:19:64:09:ae:f8:18:66:a8:a2:4a:57:67:
         63:aa:d1:87:ea:88:f0:ed:24:00:98:26:88:66:9d:ac:5e:7f:
         2b:32:b7:99:c4:b6:60:0c:8c:14:c5:61:e4:3b:7c:71:4e:22:
         aa:da:b4:72:27:cc:62:17:28:7d:83:f8:7c:51:0f:aa:96:97:
         13:ea:c9:ec:70:a2:b2:f3:a5:34:c5:80:c5:51:4c:44:d6:b7:
         79:c7:ff:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRZFCpHzfIOFpUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIxZmE1NmEtNGUwMC00NjJjLTk1ODMtM2Y2NDkzY2I0
YzkyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZGEyZDcxYTQtYjAzNC00OGM1LWFlYzItNmQ3YWI4M2I5NTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzx1tdi/QzpGNssPV9pur9L9pHLZFqYxHHIT
qQzadlieAbj4X7SgBVwxbXjufi5j4y9yvZ3TA36b//86g0WxGOkrI1VyeVMz2bP6
BZfspkOj0fpYRicOq3JU1UB+oEah4f/+Nv6fO4yaPOruhfVdj70rudZKGEogWcyy
ISYyjERGAq91n70CjXORqZIwcpWF0KV8CN9p5ZeK2Xw7y0AyhUDXgQ598KHkkXsf
xfM2GQXpl1pwCtaTEzJLwove00JqrzjkiTZm3ovam0LPWdAp5CQLnNtvJKVzWCZH
2F0w49+HJiEPEtzAQWZagXN8D90X1/w9Yi4xZCrqdKNCECRriQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGdVZhC1sNOwWVVIO5AlbOttFjkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjFm
YTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNjYjRjOTIvYzY5NTk1NmMtMjMzOS0z
MDlhLWIyNjEtNDEzMjFiZjMyNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjIxZmE1NmEtNGUwMC00NjJjLTk1
ODMtM2Y2NDkzY2I0YzkyLzIyMWZhNTZhLTRlMDAtNDYyYy05NTgzLTNmNjQ5M2Ni
NGM5Mi5jcmwwHwYDVR0jBBgwFoAUWcy1DQVXNtKlzETxWsgg/RKPt2swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0
OTNjYjRjOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEFk4AG9v9Al/dYuhjgRBFvmJQFIRR2zZXI0VNvK3DhBUZb7AXodnVm
+0VM4N4etZAIxSsTajRXwXu6i2oTMj/Ge2foFwJvf3n7ePSZhJw8gxPRGggagMMw
4e+uH2sHi/cNqewv6IATyWOFACKsl/votSBx8BAuDC9n0XKHKJ5PYpBXwfignTzE
KMtfZ+A0gCHpHSBU6oDRRthCaBsvhtWKE9pA1cO8tBlkCa74GGaookpXZ2Oq0Yfq
iPDtJACYJohmnaxefysyt5nEtmAMjBTFYeQ7fHFOIqratHInzGIXKH2D+HxRD6qW
lxPqyexworLzpTTFgMVRTETWt3nH/50=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:48 2025 by rpki-client