Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa
File:                     9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa (raw, json)
Hash identifier:          SaSXHtFatXL/edceNJf2Qk/7dZjYKCyAbEIPtMfZvEg=
Subject key identifier:   D7:0A:E5:8B:AF:9C:5D:D0:5C:EA:9E:70:3A:37:61:7D:37:38:EF:E3
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F432858493C0941D01942AF812AAF8500
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     13576
IP address blocks:        66.6.0.0/20 maxlen: 20
                          66.6.0.0/21 maxlen: 21
                          66.6.0.0/24 maxlen: 24
                          66.6.1.0/24 maxlen: 24
                          66.6.2.0/24 maxlen: 24
                          66.6.3.0/24 maxlen: 24
                          66.6.4.0/24 maxlen: 24
                          66.6.5.0/24 maxlen: 24
                          66.6.6.0/24 maxlen: 24
                          66.6.7.0/24 maxlen: 24
                          66.6.8.0/21 maxlen: 21
                          66.6.8.0/24 maxlen: 24
                          66.6.9.0/24 maxlen: 24
                          66.6.10.0/24 maxlen: 24
                          66.6.11.0/24 maxlen: 24
                          66.6.12.0/24 maxlen: 24
                          66.6.13.0/24 maxlen: 24
                          66.6.14.0/24 maxlen: 24
                          66.6.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:41:d0:19:42:af:81:2a:af:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=c67931ee-e59f-491e-9109-40cf53a1019e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:1d:cf:27:c9:5c:01:ba:54:e1:f2:bb:99:
                    03:5e:8a:3b:8d:5c:b6:70:6f:87:f2:39:d0:be:81:
                    bc:fe:83:c3:6c:15:a5:70:12:ee:f7:0b:83:86:78:
                    53:f2:c2:68:99:0e:7f:ed:0c:21:03:5f:58:3e:8f:
                    cb:51:dd:e1:ff:4a:72:d9:4c:3e:f2:e3:b0:b1:a6:
                    6f:e9:21:67:ea:02:35:17:48:e0:9d:7d:83:7d:c3:
                    76:a0:d7:08:67:de:cc:fc:12:81:3b:59:8c:ff:65:
                    7d:3b:32:66:c4:41:1f:60:a5:94:c3:63:7d:60:5f:
                    0e:46:4d:a0:0a:12:42:a8:bc:78:8a:db:c4:e0:f7:
                    7b:f1:25:ae:a3:c6:68:af:5b:35:13:d5:f0:ff:06:
                    28:39:cc:6d:b8:af:78:8c:60:e8:96:bb:3f:c5:ed:
                    30:2c:82:98:1e:17:13:e5:fc:d1:e6:99:cc:98:1a:
                    85:a9:9b:e7:c5:04:d5:3d:cb:47:6f:e1:c0:39:4d:
                    94:eb:23:90:40:1b:cf:9a:cd:e1:96:13:b4:77:8f:
                    44:2f:3a:fb:d7:91:62:e7:ec:28:92:41:d7:98:28:
                    ca:fb:34:1b:b3:77:a1:fc:b4:12:76:2c:26:ec:48:
                    af:dc:49:c7:20:f6:66:5c:b4:af:91:dd:7c:d8:50:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0A:E5:8B:AF:9C:5D:D0:5C:EA:9E:70:3A:37:61:7D:37:38:EF:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1b:54:bb:10:ca:76:09:cb:0f:26:43:be:42:86:b3:bf:8d:
         26:25:7a:5a:29:e0:a7:71:d8:3f:1a:1e:35:32:52:8e:80:a6:
         95:26:ce:8d:90:86:50:34:17:ff:9f:c5:57:75:a6:2b:78:df:
         4b:44:12:dc:9b:d9:b8:17:d2:1f:50:60:29:71:9c:a9:35:f4:
         91:27:19:98:ae:3b:d6:3d:cf:ef:2f:43:58:3f:84:2e:ca:aa:
         65:91:c8:51:dd:bc:8f:61:f2:a6:0b:7b:14:00:91:ea:74:e7:
         22:4f:51:7e:51:bb:ed:20:06:3d:a3:f1:f9:88:34:9a:a8:61:
         80:86:ca:41:29:f2:b1:22:b5:c2:aa:16:91:9d:17:49:ee:86:
         0f:a6:3d:5d:b9:3a:fd:cb:44:6a:36:26:91:46:62:e0:70:9c:
         cd:ec:e2:1a:71:5c:4e:07:f2:98:ba:cc:7e:cf:c7:9d:22:62:
         45:97:82:d1:65:b0:03:55:51:93:26:89:a1:9f:29:45:7c:bb:
         c3:70:56:cb:78:4c:74:20:f8:f1:1e:c2:8a:f4:02:60:98:30:
         04:52:60:4c:6f:af:29:94:e1:d1:85:62:36:75:1e:3d:62:b5:
         e9:0d:f9:7e:78:05:de:d3:49:41:b1:7b:51:f5:57:5a:37:39:
         a7:ea:c3:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUHQGUKvgSqvhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4
MDM1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YzY3OTMxZWUtZTU5Zi00OTFlLTkxMDktNDBjZjUzYTEwMTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1cdzyfJXAG6VOHyu5kDXoo7jVy2cG+H8jnQ
voG8/oPDbBWlcBLu9wuDhnhT8sJomQ5/7QwhA19YPo/LUd3h/0py2Uw+8uOwsaZv
6SFn6gI1F0jgnX2DfcN2oNcIZ97M/BKBO1mM/2V9OzJmxEEfYKWUw2N9YF8ORk2g
ChJCqLx4itvE4Pd78SWuo8Zor1s1E9Xw/wYoOcxtuK94jGDolrs/xe0wLIKYHhcT
5fzR5pnMmBqFqZvnxQTVPctHb+HAOU2U6yOQQBvPms3hlhO0d49ELzr715Fi5+wo
kkHXmCjK+zQbs3eh/LQSdiwm7Eiv3EnHIPZmXLSvkd182FBRHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcK5YuvnF3QXOqecDo3YX03OO/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj
NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOWUwN2ViY2MtODhiMC0z
ZGViLWIyMTctZjEzZDkxMDg3YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz
YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk
ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4
ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4bVLsQynYJyw8mQ75ChrO/jSYlelop4Kdx2D8aHjUyUo6AppUmzo2Q
hlA0F/+fxVd1pit430tEEtyb2bgX0h9QYClxnKk19JEnGZiuO9Y9z+8vQ1g/hC7K
qmWRyFHdvI9h8qYLexQAkep05yJPUX5Ru+0gBj2j8fmINJqoYYCGykEp8rEitcKq
FpGdF0nuhg+mPV25Ov3LRGo2JpFGYuBwnM3s4hpxXE4H8pi6zH7Px50iYkWXgtFl
sANVUZMmiaGfKUV8u8NwVst4THQg+PEewor0AmCYMARSYExvrymU4dGFYjZ1Hj1i
tekN+X54Bd7TSUGxe1H1V1o3Oafqwz8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:48 2025 by rpki-client