Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa
File:                     07550265-1a17-33a0-8a00-5b0ff24950d3.roa (raw, json)
Hash identifier:          +BI1rdGmsNmFIuILBb2UirnztAmCc+JNHXZCpJpsatk=
Subject key identifier:   76:08:EB:76:0E:15:A1:E8:6C:05:E8:7D:76:FD:70:14:73:AF:18:01
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584AA160DF3426234C6E31034680
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     52468
IP address blocks:        67.73.164.0/24 maxlen: 24
                          67.73.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:df:34:26:23:4c:6e:31:03:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=6dd4e74f-4d6b-4d3e-902a-94b3ba83142c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:a0:5c:9b:f6:56:28:bd:2f:db:e3:d4:45:
                    2a:94:83:ea:de:9c:51:90:88:bc:24:79:de:45:ef:
                    e9:6a:42:f9:d9:4c:88:70:72:62:b5:5a:31:cc:1d:
                    c7:f0:9d:32:15:de:df:0d:ce:34:2d:c4:1d:81:ba:
                    34:d8:83:c1:ce:a4:fd:b2:15:b9:e6:41:ff:7c:3b:
                    23:27:6c:df:00:56:b6:b1:6e:84:24:df:e0:76:b3:
                    aa:13:5c:ed:fc:1e:4d:03:34:f7:cc:e6:2d:ca:ed:
                    3a:38:f9:34:f7:3f:6c:1b:a6:90:b5:86:cc:9a:9c:
                    2b:8e:fc:d3:c3:80:3e:0f:e4:d5:fb:e0:88:74:bf:
                    f5:42:60:15:a2:6e:85:e9:3c:b4:78:44:15:e9:e1:
                    e9:61:53:f4:a9:99:c6:c1:9a:a2:96:7d:dd:76:9e:
                    07:33:70:26:64:9d:a2:0f:c0:df:d2:54:8b:97:b3:
                    8d:39:58:b0:03:c9:f4:65:1b:14:97:7e:73:98:75:
                    07:ea:dc:b6:94:3f:a4:6d:9a:0b:03:9a:e1:e9:72:
                    60:26:ed:ba:e0:3d:ad:28:53:dc:04:ba:12:ab:88:
                    99:05:dc:27:34:ca:e5:32:09:96:e0:08:62:fb:22:
                    f5:a4:a1:67:c2:ee:f4:30:37:68:69:65:b3:ca:8f:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:EB:76:0E:15:A1:E8:6C:05:E8:7D:76:FD:70:14:73:AF:18:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.73.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:25:dd:8e:18:39:be:d7:e3:4e:44:8f:4b:24:68:4b:9e:f3:
         39:78:cf:b1:35:68:be:62:d4:9c:3f:19:b1:f4:26:a7:12:7b:
         da:49:26:fc:16:bf:35:86:98:41:be:43:e9:5d:c9:76:b0:aa:
         e5:80:78:34:8b:f1:93:49:1a:7d:66:94:b8:c9:b8:0f:ac:ac:
         78:78:96:c7:21:dd:d5:a6:bf:b4:db:d9:a2:ea:6f:67:e8:2f:
         d8:15:6e:e3:70:81:b3:b3:ea:49:2a:97:61:b1:00:2a:56:7a:
         7c:57:b9:c1:ea:a9:de:0c:34:23:4e:8e:36:ed:65:09:ff:96:
         96:ac:e6:69:94:b3:1f:a7:8e:df:9a:09:18:b5:85:57:96:e5:
         fa:59:ed:c6:3a:a2:f1:66:8d:08:46:52:db:31:df:14:1a:05:
         b3:2d:f3:92:29:41:74:2f:5f:14:47:4c:ab:c5:4e:4d:0a:e1:
         a4:3a:13:9b:fd:51:43:34:ed:13:6c:09:51:d2:2c:32:26:76:
         97:2e:33:be:10:fa:01:32:b0:b1:8e:53:76:08:6f:2d:63:f6:
         53:61:81:18:53:e6:bb:e2:58:4d:96:7f:76:00:73:fa:d5:fa:
         dd:23:ee:15:32:e7:dc:2f:84:24:b4:0d:d1:2b:f3:1b:10:54:
         69:1e:3c:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN80JiNMbjEDRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj
OTBlMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
NmRkNGU3NGYtNGQ2Yi00ZDNlLTkwMmEtOTRiM2JhODMxNDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx6gXJv2Vii9L9vj1EUqlIPq3pxRkIi8JHne
Re/pakL52UyIcHJitVoxzB3H8J0yFd7fDc40LcQdgbo02IPBzqT9shW55kH/fDsj
J2zfAFa2sW6EJN/gdrOqE1zt/B5NAzT3zOYtyu06OPk09z9sG6aQtYbMmpwrjvzT
w4A+D+TV++CIdL/1QmAVom6F6Ty0eEQV6eHpYVP0qZnGwZqiln3ddp4HM3AmZJ2i
D8Df0lSLl7ONOViwA8n0ZRsUl35zmHUH6ty2lD+kbZoLA5rh6XJgJu264D2tKFPc
BLoSq4iZBdwnNMrlMgmW4Ahi+yL1pKFnwu70MDdoaWWzyo/dXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYI63YOFaHobAXofXb9cBRzrxgBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi
NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvMDc1NTAyNjUtMWExNy0z
M2EwLThhMDAtNWIwZmYyNDk1MGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0
NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1
YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx
MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ0mkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAl3Y4YOb7X405Ej0skaEue8zl4z7E1aL5i1Jw/GbH0JqcSe9pJJvwW
vzWGmEG+Q+ldyXawquWAeDSL8ZNJGn1mlLjJuA+srHh4lsch3dWmv7Tb2aLqb2fo
L9gVbuNwgbOz6kkql2GxACpWenxXucHqqd4MNCNOjjbtZQn/lpas5mmUsx+njt+a
CRi1hVeW5fpZ7cY6ovFmjQhGUtsx3xQaBbMt85IpQXQvXxRHTKvFTk0K4aQ6E5v9
UUM07RNsCVHSLDImdpcuM74Q+gEysLGOU3YIby1j9lNhgRhT5rviWE2Wf3YAc/rV
+t0j7hUy59wvhCS0DdEr8xsQVGkePB0=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:33:57 2025 by rpki-client