Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
File:                     ba243f99-0c02-3caf-abae-a7672e161f0a.roa (raw, json)
Hash identifier:          rLP9KpnhcK/3eD25FJ8KNa1AymEIPF193z8fBfG6RSE=
Subject key identifier:   09:FF:E9:72:AD:38:6F:D0:2B:AF:DC:13:CD:97:B8:44:04:FE:FC:62
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F4328584B9E07978C2A9ED0C36A84FE80
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     18875
IP address blocks:        64.66.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:97:8c:2a:9e:d0:c3:6a:84:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=0646c579-ebb5-48f9-a516-a8d289977144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:98:3d:d8:23:1c:57:25:12:b6:40:81:5c:
                    94:0e:f3:b1:4f:ef:9d:06:22:d3:10:ac:3a:45:87:
                    56:5b:f1:0f:1b:c9:41:d7:c1:39:f0:56:25:2d:c0:
                    d4:47:33:f1:0b:e5:5c:1c:ab:28:ff:55:39:b4:01:
                    b7:75:8f:1f:92:99:3f:98:8e:f6:87:7c:3e:28:79:
                    ab:5a:00:07:52:61:5e:d5:f1:30:7f:87:17:bc:d1:
                    0b:13:ea:a6:17:9e:93:7b:c2:0e:50:28:31:df:56:
                    fa:20:07:12:e0:ec:35:42:53:3b:e8:25:69:62:f7:
                    b6:3e:e8:5d:69:ed:6f:e1:c1:96:a1:e9:74:c2:83:
                    3c:c3:1a:5b:5a:88:ad:a2:d5:9e:17:d1:6b:7a:0e:
                    77:2c:40:23:97:e3:0b:1f:b7:df:2c:2a:c1:45:e7:
                    5b:7a:1a:65:c7:07:66:eb:e5:d4:81:93:27:e2:0c:
                    a3:b7:17:ba:a1:03:3b:6c:06:5b:c1:a4:58:90:60:
                    f8:4c:84:f6:74:2e:19:37:ae:5c:f4:de:c7:38:5c:
                    23:c7:c0:d9:36:7e:79:fc:0e:83:d9:24:83:0b:bc:
                    6d:55:c2:f8:8d:5c:41:3f:e3:d5:b6:e7:c6:ba:47:
                    21:85:49:b4:ac:23:c6:1f:6c:cf:5e:1f:6f:2b:b1:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FF:E9:72:AD:38:6F:D0:2B:AF:DC:13:CD:97:B8:44:04:FE:FC:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:d2:da:20:20:b5:4d:9e:10:c4:a6:cd:d4:1f:39:f2:84:
         b6:75:9c:17:86:55:1f:3f:4e:6c:2a:57:02:d4:97:f1:e5:a1:
         21:d9:8e:ab:c4:28:0d:1d:31:c0:3f:ab:d9:99:0d:51:37:b3:
         79:d8:cd:64:e6:b2:c7:a9:85:02:a9:c2:72:07:13:69:c1:a5:
         0c:da:f9:4c:64:13:42:5d:5f:01:4d:47:91:77:5a:f7:e7:85:
         c3:70:73:06:d7:89:7c:fe:2b:d4:39:f6:40:fa:41:a4:72:0a:
         6a:a2:f5:8b:bc:e9:ac:0c:d9:67:e2:82:5d:96:29:bc:bc:b0:
         9a:44:b6:b9:3e:49:8c:f7:16:75:19:37:2c:01:38:2f:0b:cb:
         fa:13:51:65:4e:f6:36:06:44:e5:79:71:41:78:0d:8e:b6:0a:
         53:5f:ed:62:f6:f3:3f:ea:40:01:63:93:ba:43:e3:8c:a2:69:
         27:54:45:64:d8:e5:e2:1f:05:71:83:da:19:cd:cd:24:31:ad:
         86:95:ec:67:fc:5b:1a:61:f6:b5:57:a9:25:67:50:cd:b6:08:
         f5:68:ce:d2:0e:02:75:cc:cd:d9:6a:08:ce:ab:d0:e2:f8:fa:
         f2:2f:fc:9c:bd:4c:fb:3e:19:e0:67:1a:97:21:19:4a:53:e9:
         bf:4c:fe:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5eMKp7Qw2qE/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk
YjI2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
MDY0NmM1NzktZWJiNS00OGY5LWE1MTYtYThkMjg5OTc3MTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL6YPdgjHFclErZAgVyUDvOxT++dBiLTEKw6
RYdWW/EPG8lB18E58FYlLcDURzPxC+VcHKso/1U5tAG3dY8fkpk/mI72h3w+KHmr
WgAHUmFe1fEwf4cXvNELE+qmF56Te8IOUCgx31b6IAcS4Ow1QlM76CVpYve2Puhd
ae1v4cGWoel0woM8wxpbWoitotWeF9Freg53LEAjl+MLH7ffLCrBRedbehplxwdm
6+XUgZMn4gyjtxe6oQM7bAZbwaRYkGD4TIT2dC4ZN65c9N7HOFwjx8DZNn55/A6D
2SSDC7xtVcL4jVxBP+PVtufGukchhUm0rCPGH2zPXh9vK7HtOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAn/6XKtOG/QK6/cE82XuEQE/vxiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5
MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvYmEyNDNmOTktMGMwMi0z
Y2FmLWFiYWUtYTc2NzJlMTYxZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3
NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0
ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy
YzI3NGRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEV70togILVNnhDEps3UHznyhLZ1nBeGVR8/TmwqVwLUl/HloSHZjqvE
KA0dMcA/q9mZDVE3s3nYzWTmssephQKpwnIHE2nBpQza+UxkE0JdXwFNR5F3Wvfn
hcNwcwbXiXz+K9Q59kD6QaRyCmqi9Yu86awM2Wfigl2WKby8sJpEtrk+SYz3FnUZ
NywBOC8Ly/oTUWVO9jYGROV5cUF4DY62ClNf7WL28z/qQAFjk7pD44yiaSdURWTY
5eIfBXGD2hnNzSQxrYaV7Gf8Wxph9rVXqSVnUM22CPVoztIOAnXMzdlqCM6r0OL4
+vIv/Jy9TPs+GeBnGpchGUpT6b9M/vw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:33 2025 by rpki-client