Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/57d9da10-b8b7-3e33-a25a-512373867160.roa
File:                     57d9da10-b8b7-3e33-a25a-512373867160.roa (raw, json)
Hash identifier:          aPvrNWd/XoW+jl5EPZ9A0gAXXvYk1O26j+YPHiC1j+w=
Subject key identifier:   54:B8:97:44:0C:58:84:21:09:33:C7:2A:2D:FB:39:0E:D7:B1:71:CF
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584A146576C1D5DF178C2425E210
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/57d9da10-b8b7-3e33-a25a-512373867160.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     834
IP address blocks:        68.67.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:76:c1:d5:df:17:8c:24:25:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=beeee520-12f3-458c-8d96-583693711251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:07:18:82:f3:92:44:ed:24:6e:2f:0c:0d:cb:
                    11:c5:30:f9:b1:22:7a:d9:c8:e2:6d:5f:31:aa:d3:
                    a9:20:d6:a1:23:34:7c:7f:d3:c3:92:58:d2:47:e4:
                    12:43:b9:1d:4c:d9:8a:5f:bc:0b:ba:3d:a2:78:4e:
                    81:24:8c:5a:fd:7f:11:c1:b8:9f:37:7a:d0:74:df:
                    e9:d9:e1:c4:4d:2d:b5:eb:af:b5:d9:5b:f7:31:db:
                    06:e6:37:56:8c:ba:ae:71:57:f5:53:a3:4b:51:59:
                    cf:ee:ee:35:60:34:1d:3b:c0:88:f0:13:90:71:a6:
                    0a:0c:7a:1b:44:9b:25:b8:23:5b:33:77:e1:ce:1c:
                    67:33:39:06:e6:a0:67:17:c6:7b:79:58:bf:68:55:
                    99:01:41:50:8f:97:32:0b:78:38:f8:69:61:ce:22:
                    62:57:8a:c8:b0:a5:5a:29:ef:ba:61:de:b4:7b:de:
                    e6:ef:d8:8c:79:2f:35:2e:ef:75:5e:db:bb:7b:4d:
                    8d:c3:fa:a6:96:73:16:3c:47:83:96:73:a5:65:e1:
                    b2:cb:f4:96:a7:bd:72:3e:c7:7e:59:04:2e:d5:80:
                    57:43:00:5f:be:e3:33:84:81:ea:d6:22:da:c6:bc:
                    ba:b1:83:d5:37:5d:9a:20:35:e4:c1:a1:c6:19:38:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:97:44:0C:58:84:21:09:33:C7:2A:2D:FB:39:0E:D7:B1:71:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/57d9da10-b8b7-3e33-a25a-512373867160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:fe:83:76:9b:32:3e:88:6c:6b:83:6e:16:0c:99:2f:10:
         7e:a9:d0:5e:c5:14:b3:92:29:08:38:b0:30:62:50:65:54:a7:
         1b:67:2b:c4:90:e0:e8:9a:36:ef:3d:48:5f:d0:09:3e:7e:6d:
         f3:1b:d9:ce:23:86:38:c5:25:9a:b5:dc:ba:d7:f1:76:74:57:
         a9:ed:94:a5:83:89:69:50:61:21:ae:a6:02:7a:70:39:07:0e:
         ee:53:82:79:4a:b2:80:18:7d:36:a6:f7:1e:63:45:06:d9:5f:
         db:2b:ef:0a:65:a4:d9:36:19:b3:bd:f8:ea:27:e3:8a:cb:ff:
         c9:6d:50:73:7c:c5:d7:dd:d6:cd:86:c1:96:1e:12:25:99:47:
         44:0a:5e:7b:65:0f:85:bb:2d:40:2d:61:39:b9:5b:b0:8b:02:
         46:7c:18:d2:7d:6b:46:06:ba:60:0d:2d:71:9e:45:1e:04:8b:
         a4:68:e1:a6:11:31:3d:03:b6:d9:51:77:91:cb:d6:1d:52:80:
         ec:bc:88:35:bf:c4:8d:27:de:b9:8c:ae:87:9d:ac:67:73:3a:
         1e:bb:c1:1b:63:e9:55:f7:fc:ca:82:f2:de:8c:4f:10:80:cd:
         a2:ec:a8:fa:e2:05:00:f0:b9:1c:d2:57:d6:ed:ee:c0:3b:cc:
         32:74:1a:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXbB1d8XjCQl4hAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
YmVlZWU1MjAtMTJmMy00NThjLThkOTYtNTgzNjkzNzExMjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQcYgvOSRO0kbi8MDcsRxTD5sSJ62cjibV8x
qtOpINahIzR8f9PDkljSR+QSQ7kdTNmKX7wLuj2ieE6BJIxa/X8RwbifN3rQdN/p
2eHETS2166+12Vv3MdsG5jdWjLqucVf1U6NLUVnP7u41YDQdO8CI8BOQcaYKDHob
RJsluCNbM3fhzhxnMzkG5qBnF8Z7eVi/aFWZAUFQj5cyC3g4+GlhziJiV4rIsKVa
Ke+6Yd60e97m79iMeS81Lu91Xtu7e02Nw/qmlnMWPEeDlnOlZeGyy/SWp71yPsd+
WQQu1YBXQwBfvuMzhIHq1iLaxry6sYPVN12aIDXkwaHGGTj62wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFS4l0QMWIQhCTPHKi37OQ7XsXHPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNTdkOWRhMTAtYjhiNy0z
ZTMzLWEyNWEtNTEyMzczODY3MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPo/oN2mzI+iGxrg24WDJkvEH6p0F7FFLOSKQg4sDBiUGVUpxtnK8SQ
4OiaNu89SF/QCT5+bfMb2c4jhjjFJZq13LrX8XZ0V6ntlKWDiWlQYSGupgJ6cDkH
Du5TgnlKsoAYfTam9x5jRQbZX9sr7wplpNk2GbO9+Oon44rL/8ltUHN8xdfd1s2G
wZYeEiWZR0QKXntlD4W7LUAtYTm5W7CLAkZ8GNJ9a0YGumANLXGeRR4Ei6Ro4aYR
MT0DttlRd5HL1h1SgOy8iDW/xI0n3rmMroedrGdzOh67wRtj6VX3/MqC8t6MTxCA
zaLsqPriBQDwuRzSV9bt7sA7zDJ0Gq0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:14 2025 by rpki-client