Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa
File:                     514de8d8-0941-3b05-a299-031e2f9ef5a3.roa (raw, json)
Hash identifier:          rTAM+HJ9frn+kAfPg+Kz3XwK0h7bEN26Av8d6i9QOT4=
Subject key identifier:   65:15:E0:DD:FD:33:57:4D:36:EB:C9:E3:8E:E5:D7:31:BE:E2:D9:2B
Certificate issuer:       /CN=93c9071d-f6f2-44c2-9463-e96aef9a6188
Certificate serial:       010D0C9F4328584A74B5DECBE8714E68259CDC80
Authority key identifier: 17:1B:B1:D3:1C:0B:33:1A:2B:B8:15:A0:C9:62:09:17:DE:27:B5:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     20281
IP address blocks:        66.171.144.0/20 maxlen: 24
                          66.185.160.0/20 maxlen: 24
                          207.7.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:de:cb:e8:71:4e:68:25:9c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c9071d-f6f2-44c2-9463-e96aef9a6188
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=6ddf15f2-73ad-449f-9b52-c7e40a414f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:2a:1f:39:94:05:95:13:87:7f:0a:c9:e6:
                    94:c1:48:f0:34:0a:9f:52:14:92:16:52:ee:8b:4d:
                    e9:d3:18:4d:26:36:43:64:18:25:c4:4c:d5:d1:40:
                    4f:6f:32:ed:a5:82:ee:5c:97:5c:8c:7f:83:3a:b0:
                    2e:38:01:40:9c:9b:df:37:66:3f:de:99:00:5b:3d:
                    09:01:68:c7:89:72:0b:99:81:72:19:b7:20:46:e1:
                    e9:dd:f3:73:d1:9a:a9:52:e1:d0:fe:a1:8c:5a:4f:
                    90:9b:65:c0:09:0d:b4:f2:52:ab:8b:d4:38:41:ee:
                    66:70:d0:44:20:e7:c0:9d:23:81:c7:17:70:cd:b8:
                    ab:22:e5:b3:05:ee:69:5a:8d:91:38:a6:1d:62:21:
                    bc:5a:31:54:91:c5:7c:6e:99:8b:33:28:6e:47:9f:
                    79:1c:0a:bd:f1:2b:37:9d:29:b4:66:38:14:47:4c:
                    11:b2:11:00:47:c9:ce:62:e8:17:ed:89:97:f2:b5:
                    db:ea:7e:4f:9c:ec:62:31:b5:5c:f2:a2:53:68:73:
                    3d:40:20:9b:3a:b8:91:e5:2d:33:ca:c4:85:9c:58:
                    78:36:e1:28:fd:ff:fe:14:ba:e6:a4:6a:ce:51:95:
                    f5:c7:66:fe:dd:c5:e8:27:b3:8a:de:72:d8:ab:66:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:E0:DD:FD:33:57:4D:36:EB:C9:E3:8E:E5:D7:31:BE:E2:D9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.crl

            X509v3 Authority Key Identifier:
                keyid:17:1B:B1:D3:1C:0B:33:1A:2B:B8:15:A0:C9:62:09:17:DE:27:B5:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.144.0/20
                  66.185.160.0/20
                  207.7.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:84:63:8e:89:cf:ef:8b:98:44:16:fa:a7:0b:85:4f:d7:
         05:e4:fb:9a:03:c3:f5:27:74:3d:e4:eb:22:de:6e:b0:f9:25:
         78:96:fa:c7:18:a0:bd:c7:6d:96:b8:b9:7a:3d:ae:f9:c0:06:
         66:71:d1:21:46:dc:cb:29:16:29:66:ff:b2:2f:a4:8b:45:eb:
         45:06:4f:58:5c:7a:4a:5f:a8:6b:e8:db:ab:2e:d4:23:e6:6a:
         0a:11:fd:96:69:c8:3c:5d:90:c8:89:59:34:47:13:8a:b4:c9:
         58:f6:00:12:4d:e8:6a:39:5a:10:1d:da:c4:ca:ea:de:a1:d3:
         6d:d1:7d:50:45:af:21:75:a5:f1:f7:4b:0f:5d:52:0e:55:1e:
         06:1a:75:b3:fe:24:0a:4b:7b:a4:b2:92:84:ce:6d:12:14:b6:
         cf:4b:2f:16:34:7f:53:a1:e2:10:69:80:7f:4e:c8:55:bc:ce:
         46:ad:0f:e1:4a:6c:34:c3:ec:72:e3:57:b3:4c:b9:79:73:3d:
         69:7c:cc:f6:ca:73:ac:a0:d1:c2:cf:e6:6b:c2:8d:a3:a4:7e:
         95:30:5d:86:13:f5:91:e6:ea:66:06:7a:0f:25:f4:3e:59:12:
         b2:c3:1d:36:40:df:16:90:97:94:c3:38:89:7a:38:35:77:d5:
         ba:51:cf:84
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp0td7L6HFOaCWc3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNjOTA3MWQtZjZmMi00NGMyLTk0NjMtZTk2YWVmOWE2
MTg4MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
NmRkZjE1ZjItNzNhZC00NDlmLTliNTItYzdlNDBhNDE0ZjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVcqHzmUBZUTh38KyeaUwUjwNAqfUhSSFlLu
i03p0xhNJjZDZBglxEzV0UBPbzLtpYLuXJdcjH+DOrAuOAFAnJvfN2Y/3pkAWz0J
AWjHiXILmYFyGbcgRuHp3fNz0ZqpUuHQ/qGMWk+Qm2XACQ208lKri9Q4Qe5mcNBE
IOfAnSOBxxdwzbirIuWzBe5pWo2ROKYdYiG8WjFUkcV8bpmLMyhuR595HAq98Ss3
nSm0ZjgUR0wRshEAR8nOYugX7YmX8rXb6n5PnOxiMbVc8qJTaHM9QCCbOriR5S0z
ysSFnFh4NuEo/f/+FLrmpGrOUZX1x2b+3cXoJ7OK3nLYq2YhuQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGUV4N39M1dNNuvJ447l1zG+4tkrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85M2M5
MDcxZC1mNmYyLTQ0YzItOTQ2My1lOTZhZWY5YTYxODgvNTE0ZGU4ZDgtMDk0MS0z
YjA1LWEyOTktMDMxZTJmOWVmNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTNjOTA3MWQtZjZmMi00NGMyLTk0
NjMtZTk2YWVmOWE2MTg4LzkzYzkwNzFkLWY2ZjItNDRjMi05NDYzLWU5NmFlZjlh
NjE4OC5jcmwwHwYDVR0jBBgwFoAUFxux0xwLMxoruBWgyWIJF94ntbwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85M2M5MDcxZC1mNmYyLTQ0YzItOTQ2My1lOTZh
ZWY5YTYxODguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQquQAwQE
QrmgAwQFzwdgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAI2OhGOOic/vi5hEFvqnC4VP1wXk+5oDw/UndD3k
6yLebrD5JXiW+scYoL3HbZa4uXo9rvnABmZx0SFG3MspFilm/7IvpItF60UGT1hc
ekpfqGvo26su1CPmagoR/ZZpyDxdkMiJWTRHE4q0yVj2ABJN6Go5WhAd2sTK6t6h
023RfVBFryF1pfH3Sw9dUg5VHgYadbP+JApLe6SykoTObRIUts9LLxY0f1Oh4hBp
gH9OyFW8zkatD+FKbDTD7HLjV7NMuXlzPWl8zPbKc6yg0cLP5mvCjaOkfpUwXYYT
9ZHm6mYGeg8l9D5ZErLDHTZA3xaQl5TDOIl6ODV31bpRz4Q=
-----END CERTIFICATE-----
Generated at Wed Jul 9 15:10:48 2025 by rpki-client