Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/d8719633-0456-3997-9b11-67dcf502954b.roa
File:                     d8719633-0456-3997-9b11-67dcf502954b.roa (raw, json)
Hash identifier:          1TSsAAEtwHfekg5/aMA6u3VvMs2diz9N6nYqsgTcDvQ=
Subject key identifier:   3E:61:45:75:30:4D:E2:30:0A:F6:2D:88:8C:DF:BF:F0:97:45:13:4A
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F43285849D2CA1C7ED60FCAEBC0D43600
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/d8719633-0456-3997-9b11-67dcf502954b.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     14955
IP address blocks:        64.68.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:1c:7e:d6:0f:ca:eb:c0:d4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=dd7845b9-6f33-4800-b86f-7d2c1c36aebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:ec:3a:cf:fb:cf:c5:e4:22:d7:eb:ee:67:
                    b2:3b:9c:87:96:8d:b4:76:cd:ff:fd:4c:f0:97:14:
                    3d:2c:dc:5b:40:02:01:d3:77:0a:ad:69:9a:17:dd:
                    f0:b7:8b:74:cc:cf:01:de:65:a8:00:23:a7:e2:6c:
                    cf:3c:8f:80:f8:39:cc:4d:55:fc:34:f2:e4:4f:b8:
                    5d:ca:36:84:80:a0:ff:87:71:0b:41:a4:8f:81:b3:
                    a7:e9:69:5f:69:d1:f4:1e:01:dd:c7:2a:7f:51:40:
                    b6:ff:7a:ad:f5:c0:73:86:c2:95:5e:a0:e5:a9:b1:
                    06:ae:10:1d:6d:02:94:8f:c2:83:f8:ea:d2:a5:16:
                    48:fa:2b:6e:13:4a:7d:ed:33:80:f5:2f:d6:6b:57:
                    e3:f3:88:00:ea:f4:d9:45:4d:a6:b9:3a:7a:f3:a8:
                    42:08:4c:38:12:7c:54:04:e2:2e:7e:65:8c:13:77:
                    18:6b:be:fc:de:49:ba:54:e0:b6:95:0f:08:18:99:
                    c9:62:70:ad:bf:fc:9a:b8:0e:18:7e:f5:21:1a:d5:
                    47:f9:93:a6:35:ed:e5:2e:53:39:8b:95:74:13:68:
                    e9:60:c1:67:72:f2:30:79:bc:a9:1c:96:a1:c3:8f:
                    d5:03:4e:ed:6a:65:1e:89:b3:e4:a6:d9:a8:93:bb:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:45:75:30:4D:E2:30:0A:F6:2D:88:8C:DF:BF:F0:97:45:13:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/d8719633-0456-3997-9b11-67dcf502954b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:f0:b0:b4:44:ad:45:c5:15:43:1f:b2:8a:69:a6:c6:38:
         5d:7b:de:94:5f:c8:4a:8e:7e:d2:6d:bd:b8:96:fb:d6:4e:44:
         95:fa:ad:02:91:c3:af:d0:27:ce:0d:70:76:40:2c:1b:92:aa:
         22:ad:6c:99:1c:51:10:ce:d7:c1:02:cb:1e:57:61:bb:1b:0c:
         d1:a3:25:0e:35:86:be:41:82:bb:49:8e:19:7d:4f:05:1e:a3:
         cf:0f:86:24:e0:74:52:c1:22:3f:cd:64:ef:3d:9a:50:ba:f1:
         a8:2b:15:0e:c0:b7:47:d4:9d:fe:2d:ff:f6:5e:f3:a3:36:68:
         fb:57:5f:73:36:b5:ed:2d:d2:96:ee:e2:18:f9:18:ab:6f:66:
         89:28:18:31:19:4a:c5:d5:d2:eb:45:32:df:c7:bf:7c:59:96:
         e3:f2:7c:83:ad:f3:5e:f9:77:bc:b3:6e:69:65:a5:ef:02:07:
         2c:42:c7:55:58:76:ff:ca:10:50:90:7b:ca:00:69:06:ab:07:
         91:6f:cb:a0:52:33:f9:8b:b8:66:50:c5:76:5c:d5:4d:53:e2:
         6f:63:24:04:d6:09:03:05:8e:e3:87:f9:e2:25:e4:d9:b5:c3:
         12:11:7a:d9:c4:7e:0d:c7:50:0a:cd:bb:8b:fa:58:03:b3:1d:
         e5:dd:52:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyhx+1g/K68DUNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3NzU5YjQtYTI0Ny00N2VhLWJhZGItYmI4MDliYzgw
YTMxMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk
ZGQ3ODQ1YjktNmYzMy00ODAwLWI4NmYtN2QyYzFjMzZhZWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRbsOs/7z8XkItfr7meyO5yHlo20ds3//Uzw
lxQ9LNxbQAIB03cKrWmaF93wt4t0zM8B3mWoACOn4mzPPI+A+DnMTVX8NPLkT7hd
yjaEgKD/h3ELQaSPgbOn6WlfadH0HgHdxyp/UUC2/3qt9cBzhsKVXqDlqbEGrhAd
bQKUj8KD+OrSpRZI+ituE0p97TOA9S/Wa1fj84gA6vTZRU2muTp686hCCEw4EnxU
BOIufmWME3cYa7783km6VOC2lQ8IGJnJYnCtv/yauA4YfvUhGtVH+ZOmNe3lLlM5
i5V0E2jpYMFncvIwebypHJahw4/VA07tamUeibPkptmok7vPywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5hRXUwTeIwCvYtiIzfv/CXRRNKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3
NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgwOWJjODBhMzEvZDg3MTk2MzMtMDQ1Ni0z
OTk3LTliMTEtNjdkY2Y1MDI5NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjc3NzU5YjQtYTI0Ny00N2VhLWJh
ZGItYmI4MDliYzgwYTMxLzY3Nzc1OWI0LWEyNDctNDdlYS1iYWRiLWJiODA5YmM4
MGEzMS5jcmwwHwYDVR0jBBgwFoAUSYDsXxW6YmUcIIY+JjxTmnHJOiwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgw
OWJjODBhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQESgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6o8LC0RK1FxRVDH7KKaabGOF173pRfyEqOftJtvbiW+9ZORJX6rQKR
w6/QJ84NcHZALBuSqiKtbJkcURDO18ECyx5XYbsbDNGjJQ41hr5BgrtJjhl9TwUe
o88PhiTgdFLBIj/NZO89mlC68agrFQ7At0fUnf4t//Ze86M2aPtXX3M2te0t0pbu
4hj5GKtvZokoGDEZSsXV0utFMt/Hv3xZluPyfIOt8175d7yzbmllpe8CByxCx1VY
dv/KEFCQe8oAaQarB5Fvy6BSM/mLuGZQxXZc1U1T4m9jJATWCQMFjuOH+eIl5Nm1
wxIRetnEfg3HUArNu4v6WAOzHeXdUpU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:10 2025 by rpki-client