Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa
File:                     7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa (raw, json)
Hash identifier:          55EtZTftxvAksuDq2VGgqXKtJ0NcwGnV4drW+9vCMDg=
Subject key identifier:   E9:62:41:77:A3:1D:7A:6F:FA:C7:D1:FF:9D:24:E3:4B:73:CE:86:E5
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F43285849E7BA734EA682E7CB4B327700
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        65.37.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:73:4e:a6:82:e7:cb:4b:32:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=1035b0f6-f498-457f-a381-204d23522f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:3c:a1:ed:be:a2:26:a8:06:5c:a3:e9:12:
                    0e:59:95:4c:63:6b:33:04:48:c0:c3:31:a0:90:ec:
                    d8:56:44:72:52:d5:6a:97:3b:85:1d:05:37:36:3e:
                    32:f2:87:16:92:ea:26:01:6c:84:28:9e:73:3d:2f:
                    99:36:79:19:56:a8:36:a2:11:a8:bb:99:2f:87:42:
                    5d:77:37:9c:c0:98:b8:23:5b:4b:9e:4a:05:00:5d:
                    38:39:e3:89:ba:a7:3b:fc:58:86:e7:9a:9b:13:3c:
                    82:9a:2a:bc:3b:57:a3:e9:b8:98:97:72:40:f7:76:
                    41:a6:37:89:29:a7:b5:9c:cf:33:4c:cf:49:13:4f:
                    f9:e0:22:01:39:af:f3:6e:d6:6f:2f:f7:4c:eb:6d:
                    89:22:73:ae:3f:be:69:2c:d2:49:e1:aa:0e:1e:81:
                    08:2f:fc:3f:c1:60:1f:a9:27:61:af:c7:6f:8c:9c:
                    0b:87:5f:c2:93:0f:e5:73:e6:37:80:0c:70:38:de:
                    f8:46:d9:17:7a:cb:97:16:15:e8:0a:79:02:85:74:
                    59:b9:e5:9d:a0:7b:c0:1c:2b:2d:a5:0d:e6:37:6b:
                    a1:14:fe:9c:30:c1:a8:6d:99:bd:89:9f:76:cf:d1:
                    53:92:77:06:03:3a:29:87:d1:d2:7f:61:27:32:d5:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:62:41:77:A3:1D:7A:6F:FA:C7:D1:FF:9D:24:E3:4B:73:CE:86:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:c8:ec:a1:93:f3:ad:48:39:c9:62:ad:82:27:60:fe:72:
         28:d7:c6:a4:46:aa:8d:0a:0d:0f:aa:44:9c:44:65:3f:09:d6:
         cd:b3:95:93:7a:d3:e8:fd:a8:37:9e:7b:8d:3e:e6:f6:25:8a:
         fb:e0:ce:cc:04:22:8e:ef:37:ef:54:c3:72:b3:b1:2d:e4:33:
         10:9c:13:3e:84:cf:03:fd:e6:4b:ff:a4:ec:16:24:22:de:bf:
         f8:23:f3:09:20:e2:a0:5e:28:66:ef:41:75:22:8a:52:b1:db:
         a6:23:33:87:73:a2:e6:65:4b:9d:cc:63:b3:52:e3:af:0a:39:
         f8:36:3d:6c:fb:3a:20:a4:e5:7f:e7:cc:a3:2f:5b:e7:f6:38:
         c5:82:47:df:c6:86:4c:87:c6:6a:cc:17:da:22:81:11:3b:40:
         cc:e4:37:e5:5b:e4:87:80:3f:c9:ff:a9:20:95:8b:cf:c9:90:
         05:8a:3a:69:30:f2:02:a1:bc:a5:3d:d3:38:64:17:e4:68:72:
         54:51:9f:73:20:4d:3a:ac:d1:d3:f5:ab:e5:c4:cb:6b:64:88:
         0c:8d:78:bc:e7:87:a0:16:93:b1:ca:ee:ce:48:82:de:67:12:
         d8:46:19:5d:55:ef:a4:a1:0e:4a:48:2c:a3:03:ce:69:cc:44:
         75:7a:1c:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunNOpoLny0sydwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
MTAzNWIwZjYtZjQ5OC00NTdmLWEzODEtMjA0ZDIzNTIyZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Q8oe2+oiaoBlyj6RIOWZVMY2szBEjAwzGg
kOzYVkRyUtVqlzuFHQU3Nj4y8ocWkuomAWyEKJ5zPS+ZNnkZVqg2ohGou5kvh0Jd
dzecwJi4I1tLnkoFAF04OeOJuqc7/FiG55qbEzyCmiq8O1ej6biYl3JA93ZBpjeJ
Kae1nM8zTM9JE0/54CIBOa/zbtZvL/dM622JInOuP75pLNJJ4aoOHoEIL/w/wWAf
qSdhr8dvjJwLh1/Ckw/lc+Y3gAxwON74RtkXesuXFhXoCnkChXRZueWdoHvAHCst
pQ3mN2uhFP6cMMGobZm9iZ92z9FTkncGAzoph9HSf2EnMtVgaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOliQXejHXpv+sfR/50k40tzzoblMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvN2Y3OGVmYTQtMzQ0OC0z
MWVmLWExZDUtY2Q2OTBhNGRjN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPgyOyhk/OtSDnJYq2CJ2D+cijXxqRGqo0KDQ+qRJxEZT8J1s2zlZN6
0+j9qDeee40+5vYlivvgzswEIo7vN+9Uw3KzsS3kMxCcEz6EzwP95kv/pOwWJCLe
v/gj8wkg4qBeKGbvQXUiilKx26YjM4dzouZlS53MY7NS468KOfg2PWz7OiCk5X/n
zKMvW+f2OMWCR9/GhkyHxmrMF9oigRE7QMzkN+Vb5IeAP8n/qSCVi8/JkAWKOmkw
8gKhvKU90zhkF+RoclRRn3MgTTqs0dP1q+XEy2tkiAyNeLznh6AWk7HK7s5Igt5n
EthGGV1V76ShDkpILKMDzmnMRHV6HC8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:45 2025 by rpki-client