Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/758c5488-022f-39ff-b331-c337902078fc.roa
File:                     758c5488-022f-39ff-b331-c337902078fc.roa (raw, json)
Hash identifier:          lIRjEr3VuzVreSqseHV7FGZ/d1Urq+z28D0aTf9iODQ=
Subject key identifier:   A1:D1:DE:4A:AE:B2:9B:59:28:D3:4E:0A:8D:8A:CA:63:B3:B8:D1:6B
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584A0ECFF38238D3E0418DF7E140
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/758c5488-022f-39ff-b331-c337902078fc.roa
Signing time:             Mon 02 Jun 2025 13:01:03 +0000
ROA not before:           Mon 02 Jun 2025 13:01:03 +0000
ROA not after:            Sun 31 Aug 2025 13:01:03 +0000
asID:                     22351
IP address blocks:        66.205.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:cf:f3:82:38:d3:e0:41:8d:f7:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Jun  2 13:01:03 2025 GMT
            Not After : Aug 31 13:01:03 2025 GMT
        Subject: CN=d211f6d0-2192-464c-a27f-264136953550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:ab:37:1d:77:a5:2c:4a:5d:8e:35:00:0d:
                    c2:3e:21:d8:9c:ae:9e:23:5e:9e:54:93:f4:8a:1d:
                    83:af:7d:2d:2e:89:83:a1:53:d2:d5:e7:76:7a:02:
                    98:2a:87:3f:02:3c:5c:5d:b1:3e:bf:52:46:ca:19:
                    6b:60:05:21:af:63:1a:d3:71:21:89:d6:4f:68:fc:
                    7a:32:78:e3:37:d4:bd:b2:9b:09:57:14:66:3b:8c:
                    e5:e1:81:2b:1d:70:f6:a8:02:98:1e:37:13:a8:c9:
                    4e:24:49:77:43:eb:86:7c:e6:ab:5c:e7:55:43:26:
                    b1:1c:d5:5f:ff:9a:85:fd:42:27:48:52:f2:4d:50:
                    5d:ff:eb:5f:93:44:2c:dd:cd:89:fc:af:d6:8a:54:
                    e0:de:45:8c:78:7e:91:12:fc:83:45:9a:5c:7e:57:
                    e3:c0:8f:da:54:39:ca:b8:70:b7:e9:7f:12:ed:c5:
                    1c:19:b2:9a:57:d0:f9:d2:f5:d1:d3:49:47:7a:a6:
                    81:17:9b:48:c6:3d:b5:04:fc:c9:2a:a0:73:ef:69:
                    48:08:af:09:18:de:5d:74:c4:d9:ea:03:f3:b3:2b:
                    b0:f5:fb:c9:4a:5a:32:45:76:b8:b2:0b:06:b1:4c:
                    5a:55:8b:d3:56:86:fa:e0:c2:1c:97:b5:4e:26:d2:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:DE:4A:AE:B2:9B:59:28:D3:4E:0A:8D:8A:CA:63:B3:B8:D1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/758c5488-022f-39ff-b331-c337902078fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:c2:41:e4:d1:5a:57:92:0d:23:21:57:43:18:10:82:cc:
         0d:4b:20:e6:3b:2b:bf:5c:a2:2e:e8:de:41:63:cb:7f:b8:fb:
         f2:33:ba:f7:99:0d:52:8c:65:cf:68:e1:1e:b0:a0:5f:a6:61:
         31:e5:4d:fa:43:ad:09:70:60:36:5c:4a:a9:b9:6f:5c:93:fc:
         11:9e:b6:32:e9:f1:7f:d7:e2:6a:d0:cc:6c:5e:16:82:2f:05:
         be:98:cf:ad:26:c1:26:fe:b9:a7:80:9a:b7:55:6d:96:8d:25:
         b3:0d:33:ad:be:0f:0c:c4:99:d1:ad:f2:0a:1e:a2:3a:dc:02:
         16:34:e7:04:ea:91:16:2f:96:5e:26:6d:bb:6e:65:e1:b7:20:
         75:41:f0:71:71:78:f8:a7:1b:ec:45:9e:8f:c0:2e:9b:b0:88:
         1d:41:30:b5:8c:1e:5d:a9:dd:1d:32:66:ac:2f:03:43:a5:61:
         af:23:27:d4:69:d0:44:46:9b:30:88:e4:84:b7:2b:66:df:11:
         d7:82:93:da:37:8d:af:22:1a:95:52:ca:86:41:d8:c9:42:ab:
         3e:93:3e:78:05:cf:21:ec:88:16:da:3d:51:f5:40:f4:bb:f3:
         67:70:7b:e5:ef:df:d1:75:6a:ca:9e:fc:fb:91:1b:02:8b:4e:
         6d:94:f2:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoOz/OCONPgQY334UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm
YTUzMB4XDTI1MDYwMjEzMDEwM1oXDTI1MDgzMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZDIxMWY2ZDAtMjE5Mi00NjRjLWEyN2YtMjY0MTM2OTUzNTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23urNx13pSxKXY41AA3CPiHYnK6eI16eVJP0
ih2Dr30tLomDoVPS1ed2egKYKoc/AjxcXbE+v1JGyhlrYAUhr2Ma03EhidZPaPx6
MnjjN9S9spsJVxRmO4zl4YErHXD2qAKYHjcTqMlOJEl3Q+uGfOarXOdVQyaxHNVf
/5qF/UInSFLyTVBd/+tfk0Qs3c2J/K/WilTg3kWMeH6REvyDRZpcflfjwI/aVDnK
uHC36X8S7cUcGbKaV9D50vXR00lHeqaBF5tIxj21BPzJKqBz72lICK8JGN5ddMTZ
6gPzsyuw9fvJSloyRXa4sgsGsUxaVYvTVob64MIcl7VOJtJ5rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHR3kqusptZKNNOCo2KymOzuNFrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0
YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvNzU4YzU0ODgtMDIyZi0z
OWZmLWIzMzEtYzMzNzkwMjA3OGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3
NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5
ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm
Y2QyOWZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs0HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD0wkHk0VpXkg0jIVdDGBCCzA1LIOY7K79coi7o3kFjy3+4+/IzuveZ
DVKMZc9o4R6woF+mYTHlTfpDrQlwYDZcSqm5b1yT/BGetjLp8X/X4mrQzGxeFoIv
Bb6Yz60mwSb+uaeAmrdVbZaNJbMNM62+DwzEmdGt8goeojrcAhY05wTqkRYvll4m
bbtuZeG3IHVB8HFxePinG+xFno/ALpuwiB1BMLWMHl2p3R0yZqwvA0OlYa8jJ9Rp
0ERGmzCI5IS3K2bfEdeCk9o3ja8iGpVSyoZB2MlCqz6TPngFzyHsiBbaPVH1QPS7
82dwe+Xv39F1asqe/PuRGwKLTm2U8tk=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:42 2025 by rpki-client