Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
File:                     66ce0b4e-7237-3244-be3e-2799aece7280.roa (raw, json)
Hash identifier:          4lYF+R9zEElwBMreDREp1GY3N5v6SbkAPsw45rcg3C0=
Subject key identifier:   01:F4:B1:F5:42:8A:AA:9D:1A:EE:F6:4A:DC:EA:26:86:54:21:4D:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE09B409CABEE2FCC8B5600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.202.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:9b:40:9c:ab:ee:2f:cc:8b:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=8cce77f0-bdca-43b4-b43b-f65b465d6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:ef:fe:b6:f6:45:ec:98:57:8a:49:37:aa:
                    e7:98:31:6a:ce:da:a5:a4:e0:1f:2b:31:58:a7:d4:
                    3b:9f:d6:86:75:39:4e:c0:32:f4:56:ca:bf:6a:ed:
                    84:1f:c6:01:70:79:91:87:20:61:7d:ac:ec:86:64:
                    f0:51:8c:bd:c9:ba:e9:4a:61:d0:8a:e8:a8:f3:e4:
                    6e:14:e8:cd:72:29:1e:25:f3:90:3d:f9:b0:52:d4:
                    5c:bc:d1:24:88:63:1c:de:4a:30:61:84:6d:cb:e0:
                    cf:de:0e:2c:78:62:0a:3d:4e:16:da:09:45:9c:d7:
                    77:5f:43:70:43:87:ba:14:2d:af:b3:ed:87:40:44:
                    f9:8c:50:9b:16:99:5b:a5:0b:18:1e:47:03:1a:45:
                    f5:b6:83:68:7e:bd:c2:c2:8c:2c:a0:7e:2a:ea:b4:
                    1b:72:c6:ec:f8:33:90:84:16:8c:85:d2:d8:ac:b4:
                    32:62:da:94:b0:f1:e0:dd:2c:97:9a:8b:d0:07:32:
                    a7:0c:dd:22:69:ab:b9:80:1f:53:df:38:a6:7e:f0:
                    8b:a4:7d:d8:12:49:60:1b:b2:f8:50:ac:19:3e:ff:
                    0e:34:c5:73:91:ba:d6:12:84:ed:c2:2e:d2:d9:22:
                    5a:5a:56:c0:d2:c4:06:70:1e:6a:b4:e3:d2:79:60:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F4:B1:F5:42:8A:AA:9D:1A:EE:F6:4A:DC:EA:26:86:54:21:4D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ce0b4e-7237-3244-be3e-2799aece7280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.202.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:af:59:03:2a:1a:a7:dc:c2:cd:b0:07:85:82:f4:72:10:
         0b:3a:71:de:30:8f:4e:ec:73:c6:0b:42:b8:87:22:41:a2:e6:
         c5:df:16:a7:05:bb:2e:93:fd:c2:e3:79:bf:7d:e1:4f:7b:23:
         3b:b0:81:4a:db:ca:9f:8d:bf:9e:17:df:1f:19:4b:b7:11:af:
         1a:28:69:ce:cc:02:db:d1:8d:5c:8a:4b:31:03:b2:8e:56:84:
         4b:eb:64:f0:13:d2:c3:a7:d4:d3:ae:fb:f2:1f:e8:a5:33:e5:
         f4:d3:10:6f:05:ea:d5:a1:bf:0f:15:65:15:94:c5:9d:e4:9e:
         3a:29:67:c2:c3:78:27:7e:ce:83:82:9b:22:85:48:1c:75:af:
         b3:ad:18:49:3e:44:e6:37:ff:21:89:88:bf:d3:92:f2:21:13:
         af:72:4b:24:96:b3:74:9e:b5:6d:5c:a5:2d:0b:a5:14:78:7a:
         15:86:d6:9d:c2:58:83:df:7e:11:5c:fe:95:36:c2:61:02:62:
         fc:36:bd:27:4e:bd:36:d7:e7:95:8f:4a:c9:aa:9f:1c:dd:c2:
         ce:f1:75:b2:c9:49:9d:3f:ac:f4:27:f8:c6:83:45:b4:ea:2f:
         ff:e2:66:19:74:3e:29:75:3d:8a:83:8b:f6:d1:ee:67:cd:2d:
         18:01:ca:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JtAnKvuL8yLVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
OGNjZTc3ZjAtYmRjYS00M2I0LWI0M2ItZjY1YjQ2NWQ2MDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17Xv/rb2ReyYV4pJN6rnmDFqztqlpOAfKzFY
p9Q7n9aGdTlOwDL0Vsq/au2EH8YBcHmRhyBhfazshmTwUYy9ybrpSmHQiuio8+Ru
FOjNcikeJfOQPfmwUtRcvNEkiGMc3kowYYRty+DP3g4seGIKPU4W2glFnNd3X0Nw
Q4e6FC2vs+2HQET5jFCbFplbpQsYHkcDGkX1toNofr3CwowsoH4q6rQbcsbs+DOQ
hBaMhdLYrLQyYtqUsPHg3SyXmovQBzKnDN0iaau5gB9T3zimfvCLpH3YEklgG7L4
UKwZPv8ONMVzkbrWEoTtwi7S2SJaWlbA0sQGcB5qtOPSeWB0NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAH0sfVCiqqdGu72StzqJoZUIU3YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjZjZTBiNGUtNzIzNy0z
MjQ0LWJlM2UtMjc5OWFlY2U3MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrspgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2Jr1kDKhqn3MLNsAeFgvRyEAs6cd4wj07sc8YLQriHIkGi5sXfFqcF
uy6T/cLjeb994U97IzuwgUrbyp+Nv54X3x8ZS7cRrxooac7MAtvRjVyKSzEDso5W
hEvrZPAT0sOn1NOu+/If6KUz5fTTEG8F6tWhvw8VZRWUxZ3knjopZ8LDeCd+zoOC
myKFSBx1r7OtGEk+ROY3/yGJiL/TkvIhE69ySySWs3SetW1cpS0LpRR4ehWG1p3C
WIPffhFc/pU2wmECYvw2vSdOvTbX55WPSsmqnxzdws7xdbLJSZ0/rPQn+MaDRbTq
L//iZhl0Pil1PYqDi/bR7mfNLRgByp4=
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:16 2025 by rpki-client