Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9e0cf90-8527-3727-85ea-8bd7fb6ac26b.roa
File:                     e9e0cf90-8527-3727-85ea-8bd7fb6ac26b.roa (raw, json)
Hash identifier:          51MhrweK30T9fQspSkebm3ibfadgmchmCYcVQ0XoGbE=
Subject key identifier:   D0:CB:CD:81:B4:B9:4D:FF:1A:9F:2F:D0:EC:92:92:81:14:89:C2:96
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A8145FDF7DAE46A900F861A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9e0cf90-8527-3727-85ea-8bd7fb6ac26b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     39979
IP address blocks:        216.66.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:45:fd:f7:da:e4:6a:90:0f:86:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6787925e-091e-41fd-b8be-770a84eff008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:8a:0e:79:1a:30:56:10:5f:5d:85:2a:a8:
                    4f:62:1b:54:1e:14:d5:d5:f5:61:08:54:98:10:78:
                    11:ed:68:f3:87:82:aa:7f:7f:eb:8b:3a:9c:df:a4:
                    62:74:2a:7b:33:ae:14:c8:de:25:c6:9d:c0:77:55:
                    f1:30:92:b1:8d:01:e9:9e:24:17:97:d4:fe:8a:67:
                    eb:e9:0d:55:26:13:c5:89:09:31:51:fd:55:fa:b8:
                    68:95:55:be:2e:bf:d6:f8:f3:09:f4:2f:26:69:f8:
                    d3:b0:d4:72:6b:9a:66:c6:7d:5c:97:e4:33:a7:0e:
                    f0:6b:47:03:0f:29:4e:bc:44:33:2b:f1:aa:c2:89:
                    88:5e:b4:ec:0b:fe:bd:b7:e7:c0:52:c9:95:e6:9c:
                    1a:65:5c:61:96:a8:d5:9c:d1:50:43:af:3f:18:22:
                    7d:36:ad:bd:a9:40:1a:83:74:08:21:43:eb:97:ff:
                    37:36:67:1b:f5:f9:fd:b3:1d:65:4d:0c:d4:b7:e9:
                    19:02:58:af:bd:45:83:3e:0a:a8:60:75:54:f3:3b:
                    70:1b:b8:8d:7b:79:ef:96:2c:b3:fe:3a:55:d7:76:
                    b7:49:be:e4:6c:31:b6:84:06:f3:66:41:2e:fe:c4:
                    fe:d3:15:17:cb:9a:d0:a0:c1:b9:c5:c6:eb:2e:03:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CB:CD:81:B4:B9:4D:FF:1A:9F:2F:D0:EC:92:92:81:14:89:C2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9e0cf90-8527-3727-85ea-8bd7fb6ac26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:bb:19:01:e3:4a:99:bf:d0:26:aa:06:72:46:9e:58:23:
         b3:b3:2a:c0:ab:69:a2:a3:e5:31:a4:ae:83:c6:68:e8:04:d5:
         ec:a3:2b:98:c5:38:4c:1f:ff:3d:d6:29:c5:89:7e:09:92:aa:
         39:f4:ff:fd:3c:f7:42:05:e0:2d:c9:82:d2:5b:36:8d:eb:6c:
         e1:02:5a:2b:79:fe:a0:99:65:9f:f7:97:90:43:e9:a1:0d:1b:
         88:c9:e5:15:fc:40:12:68:99:8e:5f:cf:8d:5d:51:8f:cf:96:
         56:d3:9a:a7:15:15:97:3f:6c:37:26:d9:98:5b:e6:a3:6f:50:
         05:6a:58:38:15:13:c1:4a:7d:3e:cb:91:55:06:72:97:45:49:
         db:65:17:a4:c8:e6:92:de:28:9e:73:89:0a:61:f7:19:f1:76:
         3f:4e:ae:0d:0d:a9:68:9c:72:c0:38:0f:05:40:ea:7e:6b:5e:
         fc:1a:f3:f7:e5:7f:97:4c:da:b9:38:91:7e:5b:ce:36:3d:82:
         d1:b7:ab:1e:bb:7f:1d:cc:a1:57:56:f6:11:61:65:d7:48:dc:
         2e:93:36:de:c0:89:6e:06:0e:a8:fe:41:b8:07:be:8e:ef:7a:
         c0:e1:bb:d8:ac:44:79:6f:22:e4:c9:4f:33:12:77:51:6e:fe:
         2e:c7:92:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRf332uRqkA+GGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
Njc4NzkyNWUtMDkxZS00MWZkLWI4YmUtNzcwYTg0ZWZmMDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmraKDnkaMFYQX12FKqhPYhtUHhTV1fVhCFSY
EHgR7Wjzh4Kqf3/rizqc36RidCp7M64UyN4lxp3Ad1XxMJKxjQHpniQXl9T+imfr
6Q1VJhPFiQkxUf1V+rholVW+Lr/W+PMJ9C8mafjTsNRya5pmxn1cl+Qzpw7wa0cD
DylOvEQzK/GqwomIXrTsC/69t+fAUsmV5pwaZVxhlqjVnNFQQ68/GCJ9Nq29qUAa
g3QIIUPrl/83Nmcb9fn9sx1lTQzUt+kZAlivvUWDPgqoYHVU8ztwG7iNe3nvliyz
/jpV13a3Sb7kbDG2hAbzZkEu/sT+0xUXy5rQoMG5xcbrLgOWxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDLzYG0uU3/Gp8v0OySkoEUicKWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTllMGNmOTAtODUyNy0z
NzI3LTg1ZWEtOGJkN2ZiNmFjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EJCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwjuxkB40qZv9AmqgZyRp5YI7OzKsCraaKj5TGkroPGaOgE1eyjK5jF
OEwf/z3WKcWJfgmSqjn0//0890IF4C3JgtJbNo3rbOECWit5/qCZZZ/3l5BD6aEN
G4jJ5RX8QBJomY5fz41dUY/PllbTmqcVFZc/bDcm2Zhb5qNvUAVqWDgVE8FKfT7L
kVUGcpdFSdtlF6TI5pLeKJ5ziQph9xnxdj9Org0NqWiccsA4DwVA6n5rXvwa8/fl
f5dM2rk4kX5bzjY9gtG3qx67fx3MoVdW9hFhZddI3C6TNt7AiW4GDqj+QbgHvo7v
esDhu9isRHlvIuTJTzMSd1Fu/i7Hkmw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:55 2025 by rpki-client