Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
File:                     62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa (raw, json)
Hash identifier:          C2i6Woo7/2vuOy/L74IMYZomICKytg7nHJjOFlUHWoQ=
Subject key identifier:   44:FC:88:42:39:8A:6F:46:8C:B2:2C:DC:23:FD:CA:4C:65:2D:D3:BF
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F43285849E91FA32CF2F9AA1907171FC0
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     64269
IP address blocks:        168.245.216.0/21 maxlen: 24
                          208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a3:2c:f2:f9:aa:19:07:17:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=c26c6c67-391d-417f-a0f8-16512c48646d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:fa:02:ff:e7:43:f6:c4:22:0d:08:e0:e8:
                    eb:1a:be:84:97:cc:0e:2d:50:b9:1f:96:47:56:f8:
                    ba:df:e3:be:6e:60:02:c1:8b:c9:e6:6b:2c:f0:e3:
                    7c:54:e8:8c:47:88:d9:4a:f1:37:cf:30:f0:7b:01:
                    44:e1:5a:af:79:cc:58:a8:e6:7b:09:3d:2c:79:e3:
                    4f:50:f6:c3:78:96:41:07:0c:19:4a:8a:9e:1c:8d:
                    44:79:bd:59:a5:71:fb:bc:77:3f:3f:db:85:e9:53:
                    36:bb:a9:9f:0d:f9:55:a2:5d:d9:45:7e:f5:6a:a6:
                    18:50:6a:74:6c:72:91:7d:1d:5a:f1:7a:5b:ed:7c:
                    75:15:d5:0d:5a:1f:e0:c2:4b:99:2d:b8:e1:e3:92:
                    9e:c1:c7:fc:ca:51:ab:f6:52:0b:0d:6a:1e:05:79:
                    17:03:9f:85:69:ec:71:aa:25:0e:2d:97:84:6d:54:
                    72:09:90:e1:13:56:cd:fc:ad:33:b8:bb:fe:44:91:
                    1e:c9:7e:d7:78:b1:c6:13:bf:a3:63:a4:46:e3:7b:
                    a3:b8:5a:cc:5a:8e:84:bd:d8:99:20:75:d9:4a:23:
                    9c:53:52:f0:9a:50:18:d0:68:90:c8:5a:6e:8e:97:
                    e4:e8:06:8b:48:5f:5c:b5:31:12:99:07:b2:15:74:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:88:42:39:8A:6F:46:8C:B2:2C:DC:23:FD:CA:4C:65:2D:D3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:df:4f:52:00:66:f4:7c:91:ef:e6:b9:a4:c3:c0:3d:55:47:
         fc:ae:29:9f:bd:05:1a:d7:69:2f:06:be:49:af:25:7d:41:1f:
         eb:8f:0e:8d:57:06:76:bf:ae:0e:13:e3:4e:e2:a2:00:4d:c5:
         e2:53:54:04:6f:6e:8b:1e:06:dd:0c:20:76:ce:e7:f8:90:70:
         36:28:3b:90:b4:6e:b0:00:48:50:70:65:33:cc:41:b3:52:bb:
         b8:54:48:a3:78:1d:61:a7:89:ba:25:87:a9:62:47:61:93:22:
         cb:e7:23:6f:42:da:40:89:80:af:34:78:09:19:db:da:74:f2:
         d3:85:e7:6b:21:4c:bb:c1:3a:dc:90:fa:ca:a4:22:48:a7:00:
         0f:de:70:30:35:08:26:8f:5e:11:1c:92:07:34:fd:c8:da:92:
         12:80:e2:ef:2e:b4:b0:57:03:d0:64:10:17:ea:0f:12:ad:f1:
         d4:a3:dd:41:aa:2f:0d:4c:04:83:ec:3c:24:19:aa:2f:24:35:
         27:e3:15:87:3c:d9:66:3b:8f:cd:c5:d5:83:9d:00:bc:80:a0:
         b6:b7:41:d8:bb:fe:8b:30:aa:ca:76:4d:96:10:02:c4:ed:c1:
         2e:17:af:b3:16:88:c2:22:ea:c2:75:e7:7c:d3:39:a4:8e:14:
         8a:e9:17:8e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnpH6Ms8vmqGQcXH8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy
OTQ1MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk
YzI2YzZjNjctMzkxZC00MTdmLWEwZjgtMTY1MTJjNDg2NDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qP6Av/nQ/bEIg0I4OjrGr6El8wOLVC5H5ZH
Vvi63+O+bmACwYvJ5mss8ON8VOiMR4jZSvE3zzDwewFE4VqvecxYqOZ7CT0seeNP
UPbDeJZBBwwZSoqeHI1Eeb1ZpXH7vHc/P9uF6VM2u6mfDflVol3ZRX71aqYYUGp0
bHKRfR1a8Xpb7Xx1FdUNWh/gwkuZLbjh45Kewcf8ylGr9lILDWoeBXkXA5+Faexx
qiUOLZeEbVRyCZDhE1bN/K0zuLv+RJEeyX7XeLHGE7+jY6RG43ujuFrMWo6EvdiZ
IHXZSiOcU1LwmlAY0GiQyFpujpfk6AaLSF9ctTESmQeyFXRfXwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFET8iEI5im9GjLIs3CP9ykxlLdO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi
ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjJiNjBhMGEtMmRmMS0z
ZTdhLTgxOTItMTA4YjBlODZiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy
MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1
Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2
YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG
0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACbfT1IAZvR8ke/muaTDwD1VR/yuKZ+9BRrXaS8GvkmvJX1B
H+uPDo1XBna/rg4T407iogBNxeJTVARvboseBt0MIHbO5/iQcDYoO5C0brAASFBw
ZTPMQbNSu7hUSKN4HWGnibolh6liR2GTIsvnI29C2kCJgK80eAkZ29p08tOF52sh
TLvBOtyQ+sqkIkinAA/ecDA1CCaPXhEckgc0/cjakhKA4u8utLBXA9BkEBfqDxKt
8dSj3UGqLw1MBIPsPCQZqi8kNSfjFYc82WY7j83F1YOdALyAoLa3Qdi7/oswqsp2
TZYQAsTtwS4Xr7MWiMIi6sJ153zTOaSOFIrpF44=
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:46:33 2025 by rpki-client