Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa
File:                     f888de86-3463-3a63-8174-d3a0f5ba50a4.roa (raw, json)
Hash identifier:          T/ljyLHhslwipBqm34y1glPkzWXV2yFWiZNEpAavjpQ=
Subject key identifier:   D7:90:78:5B:8A:13:22:5F:2B:8E:5D:A3:35:A8:70:30:6A:F0:6B:2C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B33709618D1D5DB0616C65700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa
Signing time:             Mon 15 Sep 2025 08:40:46 +0000
ROA not before:           Mon 15 Sep 2025 08:40:46 +0000
ROA not after:            Sun 14 Dec 2025 09:40:46 +0000
asID:                     5065
IP address blocks:        68.166.191.0/24 maxlen: 24
                          68.167.66.0/24 maxlen: 24
                          68.167.147.0/24 maxlen: 24
                          68.167.181.0/24 maxlen: 24
                          68.167.199.0/24 maxlen: 24
                          68.167.250.0/24 maxlen: 24
                          68.167.252.0/24 maxlen: 24
                          68.167.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:70:96:18:d1:d5:db:06:16:c6:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 08:40:46 2025 GMT
            Not After : Dec 14 09:40:46 2025 GMT
        Subject: CN=361db6af-3fd5-4545-97f7-a67c63b057ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:f8:72:c1:9d:29:06:02:19:46:08:b3:bc:
                    66:40:04:99:40:fb:93:a6:a6:92:c9:62:c8:25:15:
                    1d:28:81:d2:de:de:c6:d8:7d:e6:76:8c:57:e6:8b:
                    ee:13:4b:e4:de:20:4f:b3:62:d0:5a:94:63:db:66:
                    68:67:67:97:7a:43:a2:60:e0:60:6a:26:f1:31:2f:
                    24:6b:ce:a7:c1:26:6f:6d:04:55:88:a2:cd:28:0e:
                    fe:9a:83:51:6c:22:70:fb:8a:7d:fe:19:e3:01:2b:
                    84:c8:4f:e9:06:cc:e0:1c:17:72:9e:d7:8e:b2:e3:
                    32:e5:14:64:7b:c5:cf:95:f4:f7:78:7f:82:6b:db:
                    51:67:a2:74:56:13:8c:42:e4:a3:28:d5:41:a1:55:
                    ce:47:22:6b:79:d5:a9:0f:ee:5d:d5:3e:2c:ed:dc:
                    81:17:4f:6e:6b:59:45:8c:61:3a:ab:33:ea:48:fd:
                    b6:f2:99:43:67:d2:81:d8:7a:86:c0:aa:33:53:36:
                    2c:83:bb:e5:23:45:3c:6e:d8:83:c9:8c:94:98:58:
                    18:57:9d:99:13:44:ec:4a:4b:53:dd:cb:3d:7c:e1:
                    71:ec:a7:4b:01:b1:2e:8f:45:24:97:4a:7b:dc:ab:
                    66:c2:95:26:65:2a:ed:79:80:1e:c0:f3:d9:f1:57:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:78:5B:8A:13:22:5F:2B:8E:5D:A3:35:A8:70:30:6A:F0:6B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.166.191.0/24
                  68.167.66.0/24
                  68.167.147.0/24
                  68.167.181.0/24
                  68.167.199.0/24
                  68.167.250.0/24
                  68.167.252.0/24
                  68.167.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:32:0a:17:68:f1:02:ff:05:00:80:49:12:b2:4c:0d:f1:
         04:60:1d:43:ac:9e:af:5e:e3:ea:55:09:d5:2e:49:8c:bc:f2:
         e3:39:32:70:cb:dd:70:6b:16:a1:91:84:12:7a:75:4f:51:63:
         90:8d:0a:1b:e5:b1:f3:7f:b5:0b:f2:01:24:52:7b:47:b1:00:
         9f:53:3c:a8:3f:44:05:29:96:b5:8e:3d:f5:b3:ce:ad:88:eb:
         eb:a1:72:fb:71:fe:b9:41:64:cd:14:ec:d4:c1:3d:b5:64:21:
         7b:78:44:1c:b5:33:6f:3c:16:a8:72:f5:88:63:6d:80:98:a2:
         ba:4f:ef:e6:d7:39:e1:d9:47:cf:f8:5a:2f:63:6a:57:7a:31:
         16:69:10:1e:b9:1f:54:11:39:85:32:e0:2e:1d:9a:57:37:87:
         1b:40:52:22:32:dc:14:5b:e0:8c:f1:37:ae:90:33:f4:bd:a8:
         0b:96:9c:13:66:9c:40:60:e6:fc:24:04:74:23:7c:7b:85:8a:
         34:2c:6a:35:52:f2:54:e3:1b:93:44:a7:9e:e3:24:f4:d2:03:
         34:08:a4:52:7f:86:5a:25:cc:3a:25:83:8d:45:c7:ed:85:d9:
         78:31:b6:a5:c6:e5:af:0e:78:d3:de:43:62:81:89:c8:b7:9b:
         fc:48:c0:40
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEszcJYY0dXbBhbGVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkxNTA4NDA0NloXDTI1MTIxNDA5NDA0NlowLzEtMCsGA1UEAxMk
MzYxZGI2YWYtM2ZkNS00NTQ1LTk3ZjctYTY3YzYzYjA1N2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc74csGdKQYCGUYIs7xmQASZQPuTpqaSyWLI
JRUdKIHS3t7G2H3mdoxX5ovuE0vk3iBPs2LQWpRj22ZoZ2eXekOiYOBgaibxMS8k
a86nwSZvbQRViKLNKA7+moNRbCJw+4p9/hnjASuEyE/pBszgHBdynteOsuMy5RRk
e8XPlfT3eH+Ca9tRZ6J0VhOMQuSjKNVBoVXORyJredWpD+5d1T4s7dyBF09ua1lF
jGE6qzPqSP228plDZ9KB2HqGwKozUzYsg7vlI0U8btiDyYyUmFgYV52ZE0TsSktT
3cs9fOFx7KdLAbEuj0Ukl0p73KtmwpUmZSrteYAewPPZ8VeKqQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFNeQeFuKEyJfK45dozWocDBq8GssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjg4OGRlODYtMzQ2My0z
YTYzLTgxNzQtZDNhMGY1YmE1MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQARKa/AwQA
RKdCAwQARKeTAwQARKe1AwQARKfHAwQARKf6AwQARKf8AwQARKf+MFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AHPgMgoXaPEC/wUAgEkSskwN8QRgHUOsnq9e4+pVCdUuSYy88uM5MnDL3XBrFqGR
hBJ6dU9RY5CNChvlsfN/tQvyASRSe0exAJ9TPKg/RAUplrWOPfWzzq2I6+uhcvtx
/rlBZM0U7NTBPbVkIXt4RBy1M288Fqhy9YhjbYCYorpP7+bXOeHZR8/4Wi9jald6
MRZpEB65H1QROYUy4C4dmlc3hxtAUiIy3BRb4IzxN66QM/S9qAuWnBNmnEBg5vwk
BHQjfHuFijQsajVS8lTjG5NEp57jJPTSAzQIpFJ/hlolzDolg41Fx+2F2XgxtqXG
5a8OeNPeQ2KBici3m/xIwEA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:57:35 2025 by rpki-client