Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/75dec98b-0438-33df-b1fe-dda199f56012.roa
File:                     75dec98b-0438-33df-b1fe-dda199f56012.roa (raw, json)
Hash identifier:          ujVzzrxCVtGdqq+nPoN+YMvrtMDSXv2wj7MZj1VxASA=
Subject key identifier:   D8:85:0E:2E:19:6F:C4:ED:D5:88:48:E4:0A:A9:80:70:A8:88:68:85
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A61913F96365D0DF41B960
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/75dec98b-0438-33df-b1fe-dda199f56012.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        68.66.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:19:13:f9:63:65:d0:df:41:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=308aa5ce-f386-4bd2-be18-eee12aeed9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:51:f0:c1:22:8a:d5:e1:90:1c:6c:04:ec:
                    a5:1f:28:55:5d:9f:5a:2c:1a:5e:4c:77:e0:d5:8d:
                    17:7e:09:0e:a8:51:3c:14:9c:5e:2e:b6:44:0b:b6:
                    74:14:73:30:56:15:61:5f:d1:74:df:8f:08:bf:d8:
                    7b:aa:88:ca:07:4f:7e:30:aa:da:bd:c3:a8:01:6c:
                    4f:b1:23:96:a8:a9:fc:b6:a4:6c:7f:da:d5:83:65:
                    54:43:0b:c9:b0:9d:a0:7e:07:95:c9:79:b0:15:d0:
                    78:ab:65:52:01:fe:1b:e7:fd:1d:4b:68:a3:5b:dd:
                    b4:7a:c0:d3:cb:c7:e5:1b:8e:99:5e:de:be:3f:d9:
                    f5:94:49:a7:93:83:8f:68:30:c8:65:ad:25:3e:13:
                    1f:de:cd:03:92:80:b2:06:a1:31:d3:61:33:a0:65:
                    e3:bd:f2:a5:81:ef:c6:ec:bc:87:e0:b5:e5:60:f0:
                    1b:8e:55:91:6a:45:a9:ba:a0:4e:2b:f4:2a:48:22:
                    0e:3e:53:06:13:db:3e:a2:ee:9e:b0:e0:df:21:d7:
                    6f:da:98:ae:1a:3d:ff:38:01:73:89:50:eb:e0:18:
                    41:13:0b:9b:39:e6:6d:b4:56:ab:f4:b4:92:ea:9d:
                    4f:37:61:7d:5c:05:66:29:0c:f0:a0:03:e5:35:43:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:85:0E:2E:19:6F:C4:ED:D5:88:48:E4:0A:A9:80:70:A8:88:68:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/75dec98b-0438-33df-b1fe-dda199f56012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:bf:d0:5c:3c:11:3e:2d:5a:7a:79:01:99:cf:d4:1f:3e:
         40:e8:54:b3:1e:56:fc:4d:52:af:fe:1f:bf:4b:01:cb:14:98:
         39:d4:7b:85:63:e9:1e:f1:90:55:b9:b3:c4:3e:54:4e:dd:5a:
         5e:93:e8:3b:1f:36:6f:8f:f9:fa:7b:8f:12:65:31:37:81:02:
         f9:47:81:05:23:fd:3f:70:c1:b8:f4:83:52:8e:e1:e3:ed:68:
         de:96:23:20:00:e0:69:84:29:b8:94:9f:ee:cf:dd:ea:a4:0d:
         f5:bd:22:c0:cb:f7:b3:19:d1:37:90:86:53:72:53:21:66:6c:
         de:d0:cd:0c:53:17:02:f7:d3:9d:99:fb:59:01:d4:be:9d:44:
         42:31:3d:ee:99:36:b1:d1:1b:60:6b:aa:9a:bf:e0:e8:33:e3:
         e1:ba:96:d5:1c:9f:9d:10:88:da:21:cb:9b:dc:68:79:eb:1d:
         17:65:57:27:cf:42:72:e5:6b:9a:81:63:cf:ea:73:df:0a:82:
         83:b1:3f:ab:c4:2b:b0:0e:a9:73:0c:39:ea:ab:46:0f:7e:6f:
         31:a9:b3:53:0d:b2:05:99:b3:81:82:22:3e:37:80:e1:ad:43:
         bb:6f:71:6b:70:83:40:5c:29:79:77:b7:ce:9f:c7:21:0b:f8:
         cf:a6:36:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphkT+WNl0N9BuWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
MzA4YWE1Y2UtZjM4Ni00YmQyLWJlMTgtZWVlMTJhZWVkOWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYxR8MEiitXhkBxsBOylHyhVXZ9aLBpeTHfg
1Y0XfgkOqFE8FJxeLrZEC7Z0FHMwVhVhX9F0348Iv9h7qojKB09+MKravcOoAWxP
sSOWqKn8tqRsf9rVg2VUQwvJsJ2gfgeVyXmwFdB4q2VSAf4b5/0dS2ijW920esDT
y8flG46ZXt6+P9n1lEmnk4OPaDDIZa0lPhMf3s0DkoCyBqEx02EzoGXjvfKlge/G
7LyH4LXlYPAbjlWRakWpuqBOK/QqSCIOPlMGE9s+ou6esODfIddv2piuGj3/OAFz
iVDr4BhBEwubOeZttFar9LSS6p1PN2F9XAVmKQzwoAPlNUM7UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiFDi4Zb8Tt1YhI5AqpgHCoiGiFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNzVkZWM5OGItMDQzOC0z
M2RmLWIxZmUtZGRhMTk5ZjU2MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRELYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEisv9BcPBE+LVp6eQGZz9QfPkDoVLMeVvxNUq/+H79LAcsUmDnUe4Vj
6R7xkFW5s8Q+VE7dWl6T6DsfNm+P+fp7jxJlMTeBAvlHgQUj/T9wwbj0g1KO4ePt
aN6WIyAA4GmEKbiUn+7P3eqkDfW9IsDL97MZ0TeQhlNyUyFmbN7QzQxTFwL3052Z
+1kB1L6dREIxPe6ZNrHRG2Brqpq/4Ogz4+G6ltUcn50QiNohy5vcaHnrHRdlVyfP
QnLla5qBY8/qc98KgoOxP6vEK7AOqXMMOeqrRg9+bzGps1MNsgWZs4GCIj43gOGt
Q7tvcWtwg0BcKXl3t86fxyEL+M+mNlo=
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:04 2025 by rpki-client