Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/616d736b-e697-39bb-91a3-e0d4710e8ade.roa
File:                     616d736b-e697-39bb-91a3-e0d4710e8ade.roa (raw, json)
Hash identifier:          EGVBW7/WBMuoK7849FwfwhYGwYpze+xUxIqJlIXm6q0=
Subject key identifier:   66:A8:9C:19:62:95:06:94:90:4B:C3:85:E7:A7:BD:68:48:F9:15:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7BDBCDA981E50C4826120
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/616d736b-e697-39bb-91a3-e0d4710e8ade.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54288
IP address blocks:        66.160.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:bd:bc:da:98:1e:50:c4:82:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=6e34325e-b598-4be3-a772-1e10c9a5d034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:fd:78:da:5e:23:31:27:70:d4:54:8f:ca:
                    b5:d0:2e:c7:94:3c:b0:6c:f0:43:a7:95:25:46:0c:
                    e2:1e:ff:60:61:33:2e:6f:2f:6b:22:8d:c5:de:0c:
                    26:69:bb:04:ca:dc:76:1c:1e:f8:57:34:88:c0:1f:
                    22:b8:a9:9b:8f:95:e7:62:ff:41:94:93:b9:83:e0:
                    cc:c6:16:58:83:37:5d:ef:4e:f9:c0:43:dc:9e:df:
                    0e:0e:2b:11:02:d4:65:2b:2c:59:ce:1c:a8:c0:0a:
                    10:00:4e:8b:aa:10:0d:b2:a1:95:b4:b6:b9:00:39:
                    8e:a9:94:24:fd:2f:18:01:10:0f:1f:b8:0b:63:3f:
                    b2:29:cc:84:12:a9:86:a3:48:ed:d0:fd:40:f9:42:
                    8c:c9:ad:4c:2e:7f:95:51:73:03:f2:46:7a:90:d5:
                    bf:e4:85:80:3f:08:e7:43:65:0a:28:d9:91:7d:92:
                    ac:c7:f1:3c:2f:01:d2:21:0e:49:7d:03:16:89:d5:
                    c2:a6:6b:83:37:ed:b9:94:b6:bf:a0:76:dc:87:bb:
                    79:cc:e3:3d:fe:99:50:77:95:96:6c:9c:b6:64:6b:
                    9a:2b:02:37:95:42:c2:e8:66:79:78:04:00:73:30:
                    54:eb:75:04:11:d9:f7:f5:7c:dc:ed:8b:d9:4d:a4:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:9C:19:62:95:06:94:90:4B:C3:85:E7:A7:BD:68:48:F9:15:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/616d736b-e697-39bb-91a3-e0d4710e8ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:52:19:e2:1a:d6:0f:2c:79:04:32:3d:2b:bd:2c:d5:82:62:
         12:54:0e:93:74:8f:b7:2f:b3:98:4d:0a:53:f1:f9:bb:c0:54:
         0f:b0:aa:fb:50:19:f8:6b:35:cb:d3:3f:10:3b:ee:41:d0:d8:
         76:d7:db:1b:d6:57:33:f9:e4:ee:09:9a:19:1b:11:4d:69:f1:
         ee:41:52:bb:b5:6c:7d:42:d0:c6:01:a0:e9:4f:b0:33:84:3b:
         03:f5:4a:7a:6e:5b:a7:99:62:18:6d:f1:b9:d6:56:67:24:38:
         e8:82:c5:9f:68:78:e0:cb:6f:a2:33:3f:2a:dc:62:4c:66:a3:
         df:4a:80:4a:0b:93:e7:9b:df:50:f0:92:94:ae:c8:a0:94:54:
         68:ef:2d:a9:aa:30:d8:4a:74:ad:77:41:33:8c:58:cf:56:ba:
         35:c1:65:d4:c5:4e:31:93:8f:c7:5c:09:57:76:9a:40:97:65:
         cf:47:92:c6:c8:ad:7c:9f:cd:1f:42:ca:95:72:6f:ce:bb:00:
         60:43:ad:d5:d4:46:e1:8a:05:d1:35:f2:5c:a0:f1:90:f0:c2:
         9b:a7:25:e5:7b:b0:44:18:13:de:4e:3c:4c:a7:ee:48:e9:82:
         45:bd:8c:df:5b:3e:ad:43:80:20:c3:73:d0:a2:61:a8:99:f0:
         0d:fb:07:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17282pgeUMSCYSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NmUzNDMyNWUtYjU5OC00YmUzLWE3NzItMWUxMGM5YTVkMDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPP9eNpeIzEncNRUj8q10C7HlDywbPBDp5Ul
RgziHv9gYTMuby9rIo3F3gwmabsEytx2HB74VzSIwB8iuKmbj5XnYv9BlJO5g+DM
xhZYgzdd7075wEPcnt8ODisRAtRlKyxZzhyowAoQAE6LqhANsqGVtLa5ADmOqZQk
/S8YARAPH7gLYz+yKcyEEqmGo0jt0P1A+UKMya1MLn+VUXMD8kZ6kNW/5IWAPwjn
Q2UKKNmRfZKsx/E8LwHSIQ5JfQMWidXCpmuDN+25lLa/oHbch7t5zOM9/plQd5WW
bJy2ZGuaKwI3lULC6GZ5eAQAczBU63UEEdn39Xzc7YvZTaQmuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaonBlilQaUkEvDheenvWhI+RUZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjE2ZDczNmItZTY5Ny0z
OWJiLTkxYTMtZTBkNDcxMGU4YWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqDPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZSGeIa1g8seQQyPSu9LNWCYhJUDpN0j7cvs5hNClPx+bvAVA+wqvtQ
GfhrNcvTPxA77kHQ2HbX2xvWVzP55O4JmhkbEU1p8e5BUru1bH1C0MYBoOlPsDOE
OwP1SnpuW6eZYhht8bnWVmckOOiCxZ9oeODLb6IzPyrcYkxmo99KgEoLk+eb31Dw
kpSuyKCUVGjvLamqMNhKdK13QTOMWM9WujXBZdTFTjGTj8dcCVd2mkCXZc9HksbI
rXyfzR9CypVyb867AGBDrdXURuGKBdE18lyg8ZDwwpunJeV7sEQYE95OPEyn7kjp
gkW9jN9bPq1DgCDDc9CiYaiZ8A37B9o=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:26:02 2025 by rpki-client