Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa
File:                     86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa (raw, json)
Hash identifier:          xc0QmiXf0cn8eemAwyV+VzCSQx//5qG5ogQ6teIJy5Y=
Subject key identifier:   DE:31:0E:23:62:72:B4:54:0A:54:1B:02:A3:B4:4A:D3:9B:12:1C:38
Certificate issuer:       /CN=fc17d05f-7d42-4a94-bf57-e5618bd1b580
Certificate serial:       010D0C9F4328584A90A0B9C74E200C50EFE97500
Authority key identifier: 1C:09:08:4E:B7:63:70:C6:60:E6:A8:E7:91:7E:21:90:CC:40:58:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     63330
IP address blocks:        69.174.224.0/20 maxlen: 24
                          74.51.176.0/20 maxlen: 24
                          2607:fba0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/fc17d05f-7d42-4a94-bf57-e5618bd1b580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/fc17d05f-7d42-4a94-bf57-e5618bd1b580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b9:c7:4e:20:0c:50:ef:e9:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc17d05f-7d42-4a94-bf57-e5618bd1b580
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=f183e81a-7289-4129-8279-bb71803b9535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:c7:19:4e:03:53:29:f6:4a:f8:24:ba:c9:
                    d5:00:b1:cf:c4:b8:0a:9b:bf:9f:4a:08:ea:da:b1:
                    d5:0f:9c:32:72:fa:0c:45:95:fc:6f:53:b4:f9:2b:
                    aa:8d:3f:67:9f:fb:f3:fd:7b:9c:a1:9e:1b:2c:2d:
                    4c:58:39:38:22:d1:e5:5c:f7:24:ca:eb:2d:5b:7d:
                    b9:82:f2:c2:e5:8a:da:66:14:0c:88:e4:22:e1:6f:
                    bf:83:fd:02:df:a9:8b:0f:fc:f2:92:ad:82:4c:9b:
                    2f:e2:90:97:d6:80:90:aa:2f:f0:12:ae:f5:f3:c8:
                    40:e0:b5:92:12:28:71:4b:fc:4d:21:e0:84:ac:68:
                    95:e8:69:bf:1e:d4:9e:0f:54:aa:6d:01:07:ee:ad:
                    8a:06:31:a1:ef:56:77:45:37:c9:a0:7b:7a:1b:12:
                    6e:0b:ad:ed:ee:4d:b3:40:84:c5:cb:aa:6e:15:23:
                    cd:b4:4e:32:16:0c:54:ec:6e:b2:db:a8:d7:87:bd:
                    d5:b6:a4:e7:e9:f1:5b:f2:21:b3:62:a1:4b:5f:c2:
                    f4:ee:d7:a3:43:bd:4b:41:e0:9f:d1:fc:15:99:68:
                    b2:2c:47:c7:ac:1b:3f:83:45:a5:f0:7b:a6:2e:a6:
                    00:a7:34:f1:cd:a2:81:f5:0d:1b:f6:15:88:19:48:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:31:0E:23:62:72:B4:54:0A:54:1B:02:A3:B4:4A:D3:9B:12:1C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/fc17d05f-7d42-4a94-bf57-e5618bd1b580.crl

            X509v3 Authority Key Identifier:
                keyid:1C:09:08:4E:B7:63:70:C6:60:E6:A8:E7:91:7E:21:90:CC:40:58:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.224.0/20
                  74.51.176.0/20
                IPv6:
                  2607:fba0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5d:5c:1a:63:d2:db:c4:c0:37:76:69:15:e2:c9:8b:56:01:
         5b:32:c6:ea:3b:3e:8e:79:7c:a1:14:9e:a9:f3:bb:03:61:95:
         e6:c6:12:6e:92:38:7c:e2:4b:b8:14:7a:77:7d:7d:fb:f9:ef:
         25:ed:41:fa:8d:c5:8c:4a:89:3c:6c:fe:ab:71:cd:48:ea:92:
         a7:89:89:17:32:fb:e9:d6:01:bd:23:c1:1b:d9:ab:68:fb:46:
         80:89:d8:65:b2:a0:91:c0:fa:7d:15:45:cc:5c:50:4c:b8:aa:
         66:75:2e:03:52:7a:bb:aa:5b:f2:e7:bb:5e:db:7b:48:25:ee:
         71:a9:e2:47:8b:f7:fa:a3:f1:1f:61:9d:b1:4e:8b:d4:ef:5f:
         86:aa:9d:49:db:61:61:6b:e5:fb:0b:60:91:b3:f8:f8:fa:6b:
         18:fd:77:bf:a4:b7:30:03:65:ac:ed:d0:d7:61:99:f1:2f:3c:
         a3:79:af:82:bb:67:86:02:dd:c5:24:49:70:4c:b6:13:02:4c:
         ec:76:d1:b2:87:a5:39:4d:6d:94:d1:60:17:ba:4c:8e:2e:5d:
         aa:3a:99:40:d7:37:bd:62:b8:7a:33:14:5f:9d:3d:a4:db:ca:
         82:1a:d7:cd:d3:74:63:1a:0d:56:5c:59:c3:ab:fe:2a:47:77:
         9a:38:6d:ce
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEqQoLnHTiAMUO/pdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMxN2QwNWYtN2Q0Mi00YTk0LWJmNTctZTU2MThiZDFi
NTgwMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZjE4M2U4MWEtNzI4OS00MTI5LTgyNzktYmI3MTgwM2I5NTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL/HGU4DUyn2SvgkusnVALHPxLgKm7+fSgjq
2rHVD5wycvoMRZX8b1O0+SuqjT9nn/vz/XucoZ4bLC1MWDk4ItHlXPckyustW325
gvLC5YraZhQMiOQi4W+/g/0C36mLD/zykq2CTJsv4pCX1oCQqi/wEq7188hA4LWS
EihxS/xNIeCErGiV6Gm/HtSeD1SqbQEH7q2KBjGh71Z3RTfJoHt6GxJuC63t7k2z
QITFy6puFSPNtE4yFgxU7G6y26jXh73VtqTn6fFb8iGzYqFLX8L07tejQ71LQeCf
0fwVmWiyLEfHrBs/g0Wl8HumLqYApzTxzaKB9Q0b9hWIGUjy6QIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFN4xDiNicrRUClQbAqO0StObEhw4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYzE3
ZDA1Zi03ZDQyLTRhOTQtYmY1Ny1lNTYxOGJkMWI1ODAvODZlYWEzZWYtOGQ0ZC0z
NzE2LWFjMWYtZTBhZDBkYmUzODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmMxN2QwNWYtN2Q0Mi00YTk0LWJm
NTctZTU2MThiZDFiNTgwL2ZjMTdkMDVmLTdkNDItNGE5NC1iZjU3LWU1NjE4YmQx
YjU4MC5jcmwwHwYDVR0jBBgwFoAUHAkITrdjcMZg5qjnkX4hkMxAWJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mYzE3ZDA1Zi03ZDQyLTRhOTQtYmY1Ny1lNTYx
OGJkMWI1ODAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQERa7gAwQE
SjOwMA0EAgACMAcDBQAmB/ugMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAExdXBpj0tvEwDd2aRXiyYtWAVsy
xuo7Po55fKEUnqnzuwNhlebGEm6SOHziS7gUend9ffv57yXtQfqNxYxKiTxs/qtx
zUjqkqeJiRcy++nWAb0jwRvZq2j7RoCJ2GWyoJHA+n0VRcxcUEy4qmZ1LgNSeruq
W/Lnu17be0gl7nGp4keL9/qj8R9hnbFOi9TvX4aqnUnbYWFr5fsLYJGz+Pj6axj9
d7+ktzADZazt0NdhmfEvPKN5r4K7Z4YC3cUkSXBMthMCTOx20bKHpTlNbZTRYBe6
TI4uXao6mUDXN71iuHozFF+dPaTbyoIa183TdGMaDVZcWcOr/ipHd5o4bc4=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:17 2025 by rpki-client