Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa
File:                     be712c95-8da1-3462-9104-f7ad39bb722c.roa (raw, json)
Hash identifier:          T8rwnW1aOag4p7R+sKuNRksPpRYQE3FFuYq9YI3VUZM=
Subject key identifier:   05:D9:56:56:C3:A4:1A:FA:84:5A:6F:9F:3F:40:64:1C:C9:54:C8:64
Certificate issuer:       /CN=0605680b-ca76-43b6-81d9-2ac50993c59e
Certificate serial:       010D0C9F4328584B44B1BC37FF32FD0E9B8E8500
Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     11758
IP address blocks:        66.85.43.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:bc:37:ff:32:fd:0e:9b:8e:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=2ce2e34a-b1eb-43ef-a5b1-c97e8918e29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:32:ee:58:18:22:1c:b8:c7:7b:af:58:f6:
                    bf:8a:b0:d3:7d:5a:06:39:f4:f9:98:f1:a7:3e:1c:
                    be:5e:98:ed:6f:0f:fc:57:5a:0b:c1:41:36:48:c9:
                    0c:df:0b:d9:df:bf:df:b3:23:f5:69:5e:76:31:8c:
                    80:85:0d:2c:50:08:8b:bf:62:73:43:ad:6e:7d:05:
                    f8:cf:71:1f:68:fc:11:3b:fc:9d:86:bf:5e:37:74:
                    83:ce:bf:7d:20:1a:c0:ff:65:ed:fe:00:d7:af:bd:
                    9c:34:3c:cf:12:74:c7:68:9b:30:6e:2f:dd:39:78:
                    77:5e:d0:0a:64:e7:5e:b3:24:d2:a5:23:97:18:47:
                    41:8d:6b:5d:c8:b7:08:13:1e:48:2c:33:ce:6f:9e:
                    9e:54:05:73:3f:27:39:e1:61:ac:03:01:a2:95:91:
                    7d:71:43:67:ce:51:d1:8b:0c:25:57:44:f8:80:69:
                    2f:2d:1e:0c:f8:af:e5:e4:d7:69:da:ab:bf:d0:d8:
                    6a:1f:8c:ce:45:99:53:86:74:89:f2:db:de:36:a0:
                    fb:8b:9a:bc:c6:55:81:67:e1:58:9e:c0:e5:d2:a1:
                    2f:57:33:3f:74:ff:ac:bb:d0:01:4c:03:77:16:a5:
                    ad:c1:fa:28:f6:05:9f:d1:57:7c:3a:06:c8:4d:6f:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D9:56:56:C3:A4:1A:FA:84:5A:6F:9F:3F:40:64:1C:C9:54:C8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/be712c95-8da1-3462-9104-f7ad39bb722c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl

            X509v3 Authority Key Identifier:
                keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:64:6a:23:4e:92:a0:e1:60:fa:ce:ac:a9:c8:a9:62:bb:0e:
         d4:36:d1:0e:27:8c:43:9a:76:36:89:ee:02:c0:48:5b:cd:7b:
         c0:10:74:ac:6d:82:0e:a3:79:8a:12:1a:5a:5d:c3:72:3c:fd:
         ca:7a:95:e4:6c:f9:d4:58:39:97:36:23:88:78:dd:c8:a8:91:
         d8:bc:e6:96:7c:be:56:af:e5:cb:36:01:64:89:86:81:ef:b2:
         21:6d:2b:ea:92:ed:c9:a8:5b:7f:6b:16:10:25:e4:0e:43:b2:
         b8:88:d7:75:77:a6:8c:ca:d1:70:35:37:b2:14:52:87:fa:c3:
         e7:cc:92:cc:2a:5c:68:8a:34:6b:8e:0d:cf:df:94:2c:4d:22:
         fd:22:46:9a:cc:9b:01:e8:65:46:52:1f:c3:84:46:10:0b:57:
         18:6a:a6:0b:8f:2d:69:df:97:9a:d1:6c:7f:b9:51:22:a5:60:
         ae:b9:7c:9d:cf:11:28:f8:c6:c6:d5:dd:ba:c6:49:25:2e:b1:
         d5:6e:4d:3a:8b:9f:66:d6:80:38:dc:85:b9:e6:76:59:67:86:
         7a:55:4a:34:71:29:4d:f5:6a:3f:e3:3b:7d:63:e5:6f:2b:87:
         4b:98:72:49:43:3b:b3:46:9a:ea:bd:f0:b5:17:34:48:58:0e:
         cf:8a:50:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbw3/zL9DpuOhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj
NTllMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk
MmNlMmUzNGEtYjFlYi00M2VmLWE1YjEtYzk3ZTg5MThlMjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEgy7lgYIhy4x3uvWPa/irDTfVoGOfT5mPGn
Phy+Xpjtbw/8V1oLwUE2SMkM3wvZ37/fsyP1aV52MYyAhQ0sUAiLv2JzQ61ufQX4
z3EfaPwRO/ydhr9eN3SDzr99IBrA/2Xt/gDXr72cNDzPEnTHaJswbi/dOXh3XtAK
ZOdesyTSpSOXGEdBjWtdyLcIEx5ILDPOb56eVAVzPyc54WGsAwGilZF9cUNnzlHR
iwwlV0T4gGkvLR4M+K/l5Ndp2qu/0NhqH4zORZlThnSJ8tveNqD7i5q8xlWBZ+FY
nsDl0qEvVzM/dP+su9ABTAN3FqWtwfoo9gWf0Vd8OgbITW9I0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXZVlbDpBr6hFpvnz9AZBzJVMhkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1
NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvYmU3MTJjOTUtOGRhMS0z
NDYyLTkxMDQtZjdhZDM5YmI3MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx
ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz
YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1
MDk5M2M1OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBkaiNOkqDhYPrOrKnIqWK7DtQ20Q4njEOadjaJ7gLASFvNe8AQdKxt
gg6jeYoSGlpdw3I8/cp6leRs+dRYOZc2I4h43ciokdi85pZ8vlav5cs2AWSJhoHv
siFtK+qS7cmoW39rFhAl5A5DsriI13V3pozK0XA1N7IUUof6w+fMkswqXGiKNGuO
Dc/flCxNIv0iRprMmwHoZUZSH8OERhALVxhqpguPLWnfl5rRbH+5USKlYK65fJ3P
ESj4xsbV3brGSSUusdVuTTqLn2bWgDjchbnmdllnhnpVSjRxKU31aj/jO31j5W8r
h0uYcklDO7NGmuq98LUXNEhYDs+KUGI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 10:28:45 2025 by rpki-client