Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/cfc6a79a-0863-3499-a46a-74368347f30a.roa
File:                     cfc6a79a-0863-3499-a46a-74368347f30a.roa (raw, json)
Hash identifier:          VRoZ5VHG3HKxn18WJ//hw32SsIRVY7gV4w/OnOUm2gA=
Subject key identifier:   71:50:FE:15:DE:55:8B:16:83:50:FB:FA:AA:06:D4:C9:F3:B0:79:59
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B16A1703246C502483F52BD00
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/cfc6a79a-0863-3499-a46a-74368347f30a.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        64.40.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:70:32:46:c5:02:48:3f:52:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=ff80880b-b87d-429b-a7cf-aa33a74dcaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:91:8d:c4:51:c4:18:78:11:3d:f4:6b:ca:a4:
                    01:f5:6f:ca:7d:bd:96:bb:5f:da:32:bf:b9:bd:a7:
                    6d:a8:26:9c:25:0a:4c:f1:41:b5:4a:06:04:27:57:
                    3c:fa:e9:84:9b:04:49:18:0b:bc:f8:95:81:22:ce:
                    c8:a4:9c:d7:b9:cb:63:66:4b:93:fe:72:d3:d7:e1:
                    42:8e:75:86:01:95:9d:03:7e:e0:1e:99:6a:08:6b:
                    63:f0:13:75:b5:65:fb:76:a3:3d:03:d3:ca:bf:6c:
                    57:df:e5:07:b6:45:cb:0e:41:70:a6:e9:31:40:6e:
                    7c:d7:07:4e:f5:82:76:76:8a:62:46:02:e8:86:84:
                    5d:93:5b:3f:15:da:94:2b:7a:5e:77:76:73:a9:83:
                    d8:55:65:e2:bb:13:e2:c5:d8:ca:a4:d8:ec:d5:61:
                    a8:6d:88:5f:b2:ad:48:84:32:9a:50:6b:a8:66:29:
                    3f:2e:99:97:17:05:5c:6d:9b:19:d6:d8:3e:da:7b:
                    c0:96:e0:7c:20:86:96:4e:b4:3d:78:2e:33:62:5f:
                    6a:52:ee:99:07:71:f3:00:5d:ff:ed:13:ea:2b:f6:
                    e6:b6:7a:ee:5f:cc:96:db:f4:83:03:93:93:65:56:
                    43:4a:93:a8:f7:f9:bd:70:1e:31:18:8e:b3:f6:76:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:FE:15:DE:55:8B:16:83:50:FB:FA:AA:06:D4:C9:F3:B0:79:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/cfc6a79a-0863-3499-a46a-74368347f30a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:f3:8f:e3:a2:49:84:c4:db:03:18:41:37:ad:b6:e8:ca:
         2d:be:87:0c:d3:52:58:18:92:81:98:a2:32:8d:86:88:19:5f:
         a4:8f:da:4e:42:33:e4:3e:15:8d:c6:95:79:57:6a:7f:54:1e:
         94:4e:6f:d8:84:ad:44:d4:0f:ec:4f:cf:c0:ae:31:d3:ec:4e:
         75:8c:de:4d:5c:0a:3f:29:dc:25:f9:6b:dd:3d:17:34:c9:70:
         5a:fa:0f:61:db:3d:61:74:2c:c9:31:91:fd:67:b4:85:72:b8:
         45:f9:50:9e:64:07:2d:d4:cb:4f:55:31:30:df:79:99:1b:99:
         a1:a5:6b:bb:09:37:f1:0f:66:86:7a:56:c2:5d:dd:64:5e:c1:
         33:37:23:4d:ee:66:c8:43:38:f2:64:f6:9c:51:da:e2:4c:38:
         99:df:06:9f:76:bb:8b:8d:07:79:2c:20:a4:74:fe:92:de:e8:
         84:05:80:c4:84:49:f2:dc:c3:a4:c7:39:67:88:cf:1a:9a:96:
         58:63:1f:8f:4b:13:a0:da:ed:1e:9e:ba:2c:42:18:2e:6d:ba:
         c8:f5:ea:fd:52:d1:66:0b:1b:18:b3:55:9b:42:f8:7a:88:a0:
         2b:90:2c:15:a7:b0:14:b7:3d:a3:ad:5a:87:c2:01:00:fb:2e:
         81:14:ee:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoXAyRsUCSD9SvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5
YTJlMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZmY4MDg4MGItYjg3ZC00MjliLWE3Y2YtYWEzM2E3NGRjYWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5GNxFHEGHgRPfRryqQB9W/Kfb2Wu1/aMr+5
vadtqCacJQpM8UG1SgYEJ1c8+umEmwRJGAu8+JWBIs7IpJzXuctjZkuT/nLT1+FC
jnWGAZWdA37gHplqCGtj8BN1tWX7dqM9A9PKv2xX3+UHtkXLDkFwpukxQG581wdO
9YJ2dopiRgLohoRdk1s/FdqUK3ped3ZzqYPYVWXiuxPixdjKpNjs1WGobYhfsq1I
hDKaUGuoZik/LpmXFwVcbZsZ1tg+2nvAluB8IIaWTrQ9eC4zYl9qUu6ZB3HzAF3/
7RPqK/bmtnruX8yW2/SDA5OTZVZDSpOo9/m9cB4xGI6z9nYbNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFQ/hXeVYsWg1D7+qoG1MnzsHlZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTIy
ZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvY2ZjNmE3OWEtMDg2My0z
NDk5LWE0NmEtNzQzNjgzNDdmMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWUyMmQ3YWUtMTIyNC00M2ZiLTkw
N2EtNjY5MGY3YmQ5YTJlLzVlMjJkN2FlLTEyMjQtNDNmYi05MDdhLTY2OTBmN2Jk
OWEyZS5jcmwwHwYDVR0jBBgwFoAUYLFmHyIaYxU6c0EQcq4OzNe6NGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02Njkw
ZjdiZDlhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPG84/jokmExNsDGEE3rbboyi2+hwzTUlgYkoGYojKNhogZX6SP2k5C
M+Q+FY3GlXlXan9UHpROb9iErUTUD+xPz8CuMdPsTnWM3k1cCj8p3CX5a909FzTJ
cFr6D2HbPWF0LMkxkf1ntIVyuEX5UJ5kBy3Uy09VMTDfeZkbmaGla7sJN/EPZoZ6
VsJd3WRewTM3I03uZshDOPJk9pxR2uJMOJnfBp92u4uNB3ksIKR0/pLe6IQFgMSE
SfLcw6THOWeIzxqallhjH49LE6Da7R6euixCGC5tusj16v1S0WYLGxizVZtC+HqI
oCuQLBWnsBS3PaOtWofCAQD7LoEU7pw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:36:20 2025 by rpki-client