Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/56222583-ba9c-384c-8941-9f9142982019.roa
File:                     56222583-ba9c-384c-8941-9f9142982019.roa (raw, json)
Hash identifier:          3O1Gf2AOWkDur7CauxN7jaiMq3evRug4lSp0ezJBQj0=
Subject key identifier:   12:A4:34:D2:07:93:0D:25:61:41:78:F7:1C:21:B9:80:75:F2:98:00
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A2836B3BD1DD3E243C866BDE0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/56222583-ba9c-384c-8941-9f9142982019.roa
Signing time:             Wed 11 Jun 2025 15:23:19 +0000
ROA not before:           Wed 11 Jun 2025 15:23:19 +0000
ROA not after:            Tue 09 Sep 2025 15:23:19 +0000
asID:                     329007
IP address blocks:        74.81.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:36:b3:bd:1d:d3:e2:43:c8:66:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 11 15:23:19 2025 GMT
            Not After : Sep  9 15:23:19 2025 GMT
        Subject: CN=deb9e7c9-2c97-4ecc-8993-0964ae0f7905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:61:08:cc:fd:d2:9f:b5:08:d1:81:5d:60:
                    09:6d:c0:9b:e2:11:a4:72:48:14:e3:cf:11:00:20:
                    fb:40:cf:80:ed:37:96:c3:07:6a:e1:c7:5d:6f:f5:
                    bc:88:84:f9:f0:32:66:33:0c:8b:d2:c3:7e:21:c3:
                    7c:17:10:65:1f:b3:28:4b:e3:f8:b6:3c:a7:55:1b:
                    d9:a0:df:7d:50:14:34:1f:c2:b3:99:be:39:a2:07:
                    b1:72:97:51:03:d1:ef:77:7b:4c:96:84:ae:27:f7:
                    4a:4f:4e:c0:0e:2c:72:13:38:c6:57:68:3d:8b:78:
                    0c:60:fc:cc:66:c0:c9:07:09:e5:87:d7:8e:49:15:
                    b8:aa:78:60:56:3f:e6:57:39:83:a3:30:35:63:be:
                    20:ff:db:ad:22:3c:6a:f3:5e:3e:4c:c8:61:b2:6d:
                    91:b5:a4:d8:f2:9f:02:99:43:f6:79:64:78:1c:70:
                    4b:5c:06:d7:85:1c:f7:bb:08:0c:24:86:a8:78:51:
                    c2:42:76:64:15:2a:0d:5f:9a:56:4b:21:03:fb:2d:
                    a0:f5:f5:42:45:c8:f7:f3:a8:03:96:2a:8f:26:66:
                    cb:71:5b:c0:36:4f:8f:39:a7:8d:e3:ae:4c:d6:b1:
                    a9:54:c1:a0:f7:3a:c9:8f:74:6b:40:9b:cb:ec:1c:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:34:D2:07:93:0D:25:61:41:78:F7:1C:21:B9:80:75:F2:98:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/56222583-ba9c-384c-8941-9f9142982019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:6b:9a:9a:10:b3:54:7a:ce:24:f3:bc:a7:72:e4:12:19:
         79:fb:78:43:33:df:a8:ea:3f:79:6c:b4:95:f0:ce:a6:a1:52:
         d8:cb:ad:c6:76:c0:25:37:2c:2d:36:8f:fc:3a:16:75:de:fd:
         1b:a9:8f:0a:7f:8c:67:0c:be:88:88:3e:a1:15:87:98:6e:b4:
         c2:05:78:e1:63:78:f4:46:c9:c9:fd:cd:12:66:cc:bb:7b:ac:
         b3:04:48:5a:5b:09:8a:6c:69:fa:d8:0b:85:f7:09:88:76:c3:
         9c:c8:59:24:0d:94:6f:36:06:96:87:97:d3:82:bf:9a:a6:3f:
         61:e0:1b:69:ac:8a:92:99:c5:cc:95:ef:f4:75:d3:99:b3:84:
         38:8a:eb:76:2a:77:67:34:1f:18:40:05:d3:f8:3e:f9:46:f5:
         b9:fa:5e:97:14:b1:53:87:52:68:26:22:23:fb:a9:39:41:68:
         b7:32:34:a7:61:f7:24:a6:7d:97:a3:02:e6:56:50:3c:40:1a:
         7a:c4:42:77:a8:60:3c:5b:d3:7a:75:b0:67:43:d4:dc:27:1f:
         a5:a4:66:9f:35:4c:72:ac:d9:9c:38:41:5b:2b:9e:46:a3:69:
         f8:b0:fe:f3:2d:39:7b:1d:01:f9:1e:78:64:f1:03:46:e9:6f:
         81:e0:02:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEooNrO9HdPiQ8hmveAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI1MDYxMTE1MjMxOVoXDTI1MDkwOTE1MjMxOVowLzEtMCsGA1UEAxMk
ZGViOWU3YzktMmM5Ny00ZWNjLTg5OTMtMDk2NGFlMGY3OTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCthCMz90p+1CNGBXWAJbcCb4hGkckgU488R
ACD7QM+A7TeWwwdq4cddb/W8iIT58DJmMwyL0sN+IcN8FxBlH7MoS+P4tjynVRvZ
oN99UBQ0H8Kzmb45ogexcpdRA9Hvd3tMloSuJ/dKT07ADixyEzjGV2g9i3gMYPzM
ZsDJBwnlh9eOSRW4qnhgVj/mVzmDozA1Y74g/9utIjxq814+TMhhsm2RtaTY8p8C
mUP2eWR4HHBLXAbXhRz3uwgMJIaoeFHCQnZkFSoNX5pWSyED+y2g9fVCRcj386gD
liqPJmbLcVvANk+POaeN465M1rGpVMGg9zrJj3RrQJvL7BwIIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKkNNIHkw0lYUF49xwhuYB18pgAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNTYyMjI1ODMtYmE5Yy0z
ODRjLTg5NDEtOWY5MTQyOTgyMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlFDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB++a5qaELNUes4k87yncuQSGXn7eEMz36jqP3lstJXwzqahUtjLrcZ2
wCU3LC02j/w6FnXe/Rupjwp/jGcMvoiIPqEVh5hutMIFeOFjePRGycn9zRJmzLt7
rLMESFpbCYpsafrYC4X3CYh2w5zIWSQNlG82BpaHl9OCv5qmP2HgG2msipKZxcyV
7/R105mzhDiK63Yqd2c0HxhABdP4PvlG9bn6XpcUsVOHUmgmIiP7qTlBaLcyNKdh
9ySmfZejAuZWUDxAGnrEQneoYDxb03p1sGdD1NwnH6WkZp81THKs2Zw4QVsrnkaj
afiw/vMtOXsdAfkeeGTxA0bpb4HgAro=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:23:36 2025 by rpki-client