Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/501204f1-9c82-36a0-9013-d5ffbfc01804.roa
File:                     501204f1-9c82-36a0-9013-d5ffbfc01804.roa (raw, json)
Hash identifier:          ZE/WOLkTB2p3+L580xe5u3eyFF/gvh7gqz1J5p3lct8=
Subject key identifier:   5E:9E:36:D4:13:36:FA:73:F3:3E:13:83:55:D8:56:47:19:45:3A:85
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584A936B6158083F7CC7B3DA0080
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/501204f1-9c82-36a0-9013-d5ffbfc01804.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     11620
IP address blocks:        64.57.96.0/21 maxlen: 24
                          64.57.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:61:58:08:3f:7c:c7:b3:da:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=d30bc388-d23a-4da9-95d5-27c09b806f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:71:82:9b:ef:ca:39:5e:5b:a9:1a:eb:bf:48:
                    d5:4e:68:bf:7b:fc:ac:e3:0d:54:1a:7f:b1:36:56:
                    a1:a8:43:43:99:9e:f0:35:ba:2a:6a:9a:3c:c1:2e:
                    07:f2:85:ae:81:91:15:dd:80:3e:6b:89:ed:4e:c4:
                    68:ab:2f:72:76:06:22:49:26:2a:08:50:c8:37:94:
                    89:b9:d7:8b:7a:57:25:f0:35:b8:28:0e:6c:f7:43:
                    72:7c:52:08:22:9d:30:e0:0a:4f:0e:3a:34:ef:d5:
                    5b:be:d7:f9:df:e2:bf:29:a7:a1:27:39:0d:81:91:
                    17:c3:33:ce:60:33:4a:a2:6b:c4:bd:63:9b:fb:05:
                    12:18:97:3f:be:4d:b8:66:a8:6c:fe:ce:7c:ee:af:
                    32:69:8c:5f:73:f4:33:bd:24:fa:37:66:68:da:ae:
                    97:92:56:2a:c0:3b:d5:d2:5e:dd:51:07:e2:f7:a0:
                    23:a0:20:9c:66:ea:01:23:26:fc:54:8a:16:6a:54:
                    24:30:69:06:ea:6e:dd:c2:c3:ce:b5:bb:f0:7b:7a:
                    7a:95:1b:88:7e:9f:9c:93:cd:5b:73:e8:0b:bc:eb:
                    27:b6:fb:0b:72:e6:dd:ce:a0:c6:10:8a:74:9b:e4:
                    e2:b7:15:44:48:ed:19:3e:66:e8:52:cf:fb:1e:ca:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9E:36:D4:13:36:FA:73:F3:3E:13:83:55:D8:56:47:19:45:3A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/501204f1-9c82-36a0-9013-d5ffbfc01804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:81:ca:c8:c8:00:98:b2:7d:27:b4:96:3b:d3:c0:50:93:
         60:97:09:36:99:57:e6:d1:80:d2:12:00:88:e2:00:6b:8a:71:
         c3:5d:da:0b:4a:10:16:98:f5:e0:94:69:54:10:38:36:e2:78:
         7f:19:18:01:93:10:b8:04:c9:69:10:31:16:1b:e7:ce:08:78:
         1a:9c:22:c3:b2:1b:a6:63:1c:0c:a1:6e:3b:ac:75:0c:f8:76:
         07:4d:86:5c:e9:0b:3a:6c:a8:c8:d5:70:7b:27:5e:f1:9d:0b:
         58:74:5a:c1:a8:2a:a0:18:30:d4:da:df:fd:97:b6:b7:79:7f:
         3c:ab:f4:ec:64:55:4f:dc:f6:39:d0:bf:bd:3a:4e:43:00:73:
         ee:91:3b:4c:16:56:21:6e:88:78:1e:a6:f4:7f:8b:6c:56:17:
         29:27:cd:af:c4:95:54:23:d9:84:63:ec:41:81:61:48:d5:da:
         be:f2:70:e2:d7:39:82:55:f2:b6:0a:55:b9:a2:c0:16:c9:db:
         bd:77:09:80:ba:de:96:d0:7f:43:c2:72:7d:6c:a6:65:83:96:
         2f:7a:a4:4b:e5:86:8c:08:5f:20:5b:1d:01:e4:67:96:bb:a8:
         30:6a:20:3e:f8:ee:a0:50:fc:5c:ca:58:14:82:1e:92:0b:f3:
         6a:d6:54:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa2FYCD98x7PaAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzJjMmIyMDUtY2JmNy00NTZmLWIxODUtMGFmZDI2M2M1
Mjc2MB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
ZDMwYmMzODgtZDIzYS00ZGE5LTk1ZDUtMjdjMDliODA2ZjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nGCm+/KOV5bqRrrv0jVTmi/e/ys4w1UGn+x
NlahqENDmZ7wNboqapo8wS4H8oWugZEV3YA+a4ntTsRoqy9ydgYiSSYqCFDIN5SJ
udeLelcl8DW4KA5s90NyfFIIIp0w4ApPDjo079Vbvtf53+K/KaehJzkNgZEXwzPO
YDNKomvEvWOb+wUSGJc/vk24Zqhs/s587q8yaYxfc/QzvST6N2Zo2q6XklYqwDvV
0l7dUQfi96AjoCCcZuoBIyb8VIoWalQkMGkG6m7dwsPOtbvwe3p6lRuIfp+ck81b
c+gLvOsntvsLcubdzqDGEIp0m+TitxVESO0ZPmboUs/7HsrVRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6eNtQTNvpz8z4Tg1XYVkcZRTqFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jMmMy
YjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZkMjYzYzUyNzYvNTAxMjA0ZjEtOWM4Mi0z
NmEwLTkwMTMtZDVmZmJmYzAxODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzJjMmIyMDUtY2JmNy00NTZmLWIx
ODUtMGFmZDI2M2M1Mjc2L2MyYzJiMjA1LWNiZjctNDU2Zi1iMTg1LTBhZmQyNjNj
NTI3Ni5jcmwwHwYDVR0jBBgwFoAU1RmuFMvsJGpbukvkt9Q2FDNBUh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jMmMyYjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZk
MjYzYzUyNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLOgcrIyACYsn0ntJY708BQk2CXCTaZV+bRgNISAIjiAGuKccNd2gtK
EBaY9eCUaVQQODbieH8ZGAGTELgEyWkQMRYb584IeBqcIsOyG6ZjHAyhbjusdQz4
dgdNhlzpCzpsqMjVcHsnXvGdC1h0WsGoKqAYMNTa3/2Xtrd5fzyr9OxkVU/c9jnQ
v706TkMAc+6RO0wWViFuiHgepvR/i2xWFyknza/ElVQj2YRj7EGBYUjV2r7ycOLX
OYJV8rYKVbmiwBbJ2713CYC63pbQf0PCcn1spmWDli96pEvlhowIXyBbHQHkZ5a7
qDBqID747qBQ/FzKWBSCHpIL82rWVDg=
-----END CERTIFICATE-----
Generated at Sun Aug 3 00:45:10 2025 by rpki-client