Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa
File:                     cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa (raw, json)
Hash identifier:          dZDG4UuEuuDkMKJ7xVunFLb37uToPUzcDBezd+lh1uk=
Subject key identifier:   17:09:8F:33:E9:38:E0:26:9C:B1:44:54:CC:20:04:2F:B2:B5:2E:AA
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584B153C27BF415B56C382645C80
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     18594
IP address blocks:        64.57.146.0/24 maxlen: 24
                          64.57.146.64/26 maxlen: 26
                          64.57.146.128/26 maxlen: 26
                          64.57.146.192/29 maxlen: 29
                          208.74.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:27:bf:41:5b:56:c3:82:64:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=59518dda-2daf-415c-85ce-aa3e37b20359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:3c:f4:24:ed:69:c5:6c:f8:4c:6e:0a:60:
                    56:0b:77:05:bd:bf:97:b5:ce:d6:a1:ec:04:29:ca:
                    f7:17:90:31:f2:a4:5a:5e:61:02:3c:4d:1a:3d:14:
                    bd:a0:19:5c:13:9e:d3:73:9b:a0:29:6c:c1:af:06:
                    bb:de:c3:d7:f4:cb:aa:05:94:79:26:0c:5c:64:d4:
                    c0:eb:78:9b:ba:25:59:b3:02:a1:1b:ec:2f:36:60:
                    03:a7:cd:da:58:1a:19:bd:2a:30:3e:49:62:87:61:
                    29:43:0f:79:8e:c6:87:f5:f2:7d:c4:4e:5a:d0:f9:
                    63:73:d6:0a:27:75:25:02:a4:b9:f4:41:00:2e:f2:
                    d6:e9:ab:69:06:9f:26:97:45:bf:cc:88:98:b4:c9:
                    b3:36:2c:8b:10:da:24:fa:31:56:cc:c6:a1:1c:a0:
                    c3:bc:8f:61:05:e2:90:4a:72:5f:69:62:9d:cf:81:
                    00:f7:ed:48:1c:6d:31:bb:dd:61:bb:f1:8a:bf:36:
                    62:8e:c0:af:d3:1b:2a:d4:a4:e5:bb:30:c7:3f:bf:
                    7f:18:c8:0f:36:73:cb:4c:42:59:d2:70:c9:0b:33:
                    58:3f:6c:cf:94:9e:91:fd:4b:46:7c:93:96:e3:78:
                    3e:a3:69:7d:17:cc:b2:47:1d:06:99:be:88:1c:15:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:09:8F:33:E9:38:E0:26:9C:B1:44:54:CC:20:04:2F:B2:B5:2E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/cc3bfbbb-8fc4-3ea0-94ab-80de15011e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.146.0/24
                  208.74.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:54:b8:cc:1e:af:88:32:4b:c8:ff:b9:b3:e1:a9:d0:74:
         e2:28:57:bc:db:6b:21:b9:ad:5e:e5:63:13:e5:3c:a8:5b:1a:
         df:f8:1e:9e:65:9f:d2:8c:d0:78:ca:03:6a:d1:60:e8:ed:67:
         6d:50:80:99:bd:ce:ef:84:4d:fb:8a:18:59:fd:62:4f:1e:5b:
         a2:84:6e:ab:89:06:bb:c9:4b:58:c6:6c:07:fe:80:a7:de:7e:
         02:a1:07:f6:eb:2b:d3:ae:bb:b7:3a:33:0c:ae:2e:46:d5:f8:
         75:22:12:e2:8e:1b:3b:5a:82:82:ee:1b:ee:16:69:3b:9c:6e:
         e9:81:ca:54:e0:ac:59:fe:07:6f:82:eb:24:8a:2c:60:b9:f7:
         34:97:97:7f:28:2f:b4:ec:94:13:14:97:57:6f:b0:0a:43:21:
         58:c9:05:e6:bd:68:6a:fb:a7:db:8a:d6:ad:3a:cd:3e:68:b5:
         9f:c3:17:e0:46:03:db:42:f7:71:ae:b1:c9:f2:59:53:92:30:
         df:b2:44:c3:a0:2e:16:c8:5a:66:2f:99:d6:84:a1:20:2c:d6:
         88:01:ca:dc:8c:ae:51:15:51:30:8a:74:f9:8e:c5:ca:74:6b:
         92:b4:79:7a:4d:92:81:7c:03:78:a3:71:b8:88:b3:c0:51:ad:
         c1:33:0f:81
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsVPCe/QVtWw4JkXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiNDExOWYtMzRmYy00ZmNlLThkYmYtYjY5YWUzM2E0
OTNhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
NTk1MThkZGEtMmRhZi00MTVjLTg1Y2UtYWEzZTM3YjIwMzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9A89CTtacVs+ExuCmBWC3cFvb+Xtc7WoewE
Kcr3F5Ax8qRaXmECPE0aPRS9oBlcE57Tc5ugKWzBrwa73sPX9MuqBZR5JgxcZNTA
63ibuiVZswKhG+wvNmADp83aWBoZvSowPklih2EpQw95jsaH9fJ9xE5a0Pljc9YK
J3UlAqS59EEALvLW6atpBp8ml0W/zIiYtMmzNiyLENok+jFWzMahHKDDvI9hBeKQ
SnJfaWKdz4EA9+1IHG0xu91hu/GKvzZijsCv0xsq1KTluzDHP79/GMgPNnPLTEJZ
0nDJCzNYP2zPlJ6R/UtGfJOW43g+o2l9F8yyRx0Gmb6IHBXGIQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBcJjzPpOOAmnLFEVMwgBC+ytS6qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NGI0
MTE5Zi0zNGZjLTRmY2UtOGRiZi1iNjlhZTMzYTQ5M2EvY2MzYmZiYmItOGZjNC0z
ZWEwLTk0YWItODBkZTE1MDExZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDRiNDExOWYtMzRmYy00ZmNlLThk
YmYtYjY5YWUzM2E0OTNhLzQ0YjQxMTlmLTM0ZmMtNGZjZS04ZGJmLWI2OWFlMzNh
NDkzYS5jcmwwHwYDVR0jBBgwFoAUkhzQDf4HPGnnVgNSvWxdESmlE+wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NGI0MTE5Zi0zNGZjLTRmY2UtOGRiZi1iNjlh
ZTMzYTQ5M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDmSAwQA
0EqmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGP1VLjMHq+IMkvI/7mz4anQdOIoV7zbayG5rV7lYxPlPKhb
Gt/4Hp5ln9KM0HjKA2rRYOjtZ21QgJm9zu+ETfuKGFn9Yk8eW6KEbquJBrvJS1jG
bAf+gKfefgKhB/brK9Ouu7c6MwyuLkbV+HUiEuKOGztagoLuG+4WaTucbumBylTg
rFn+B2+C6ySKLGC59zSXl38oL7TslBMUl1dvsApDIVjJBea9aGr7p9uK1q06zT5o
tZ/DF+BGA9tC93GuscnyWVOSMN+yRMOgLhbIWmYvmdaEoSAs1ogBytyMrlEVUTCK
dPmOxcp0a5K0eXpNkoF8A3ijcbiIs8BRrcEzD4E=
-----END CERTIFICATE-----
Generated at Fri Oct 10 16:12:58 2025 by rpki-client