Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/92fda21c-9a2c-3c7e-88b8-54f70756f685.roa
File:                     92fda21c-9a2c-3c7e-88b8-54f70756f685.roa (raw, json)
Hash identifier:          wxeP6oEuGsECtVWhis25pePiDwAF3wt7923eBsUAtm0=
Subject key identifier:   D6:EF:5B:6B:1B:69:59:C5:1E:AC:4B:F0:C7:C1:F4:27:D1:21:2E:01
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584A9BCB6F06B21EF75DFB091500
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/92fda21c-9a2c-3c7e-88b8-54f70756f685.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     400610
IP address blocks:        66.219.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6f:06:b2:1e:f7:5d:fb:09:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=6dc02fbb-ce1e-43e9-9c48-f761481cc050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:96:f1:25:50:69:22:9c:30:5f:21:8c:30:
                    6d:be:ba:aa:34:5e:19:d0:9b:27:4a:7a:cf:a2:9f:
                    95:81:3d:73:17:7b:5e:7b:0a:14:59:dd:2f:fc:4f:
                    57:ee:61:29:bf:de:60:11:71:08:34:ad:61:32:02:
                    ca:f5:b1:fd:2d:50:4c:0c:c3:96:42:40:a1:b1:2c:
                    18:2b:2f:d0:6b:0c:ce:ad:7a:8f:d1:31:3b:f7:38:
                    d4:2c:21:ca:a6:8d:56:17:ae:03:88:03:02:a4:ca:
                    2d:32:41:ae:ae:0a:b4:20:7a:e5:df:f6:59:1f:de:
                    0a:c1:19:95:13:84:dc:13:5b:07:58:18:57:36:43:
                    fa:39:62:c4:46:18:f7:e8:ef:cd:b0:42:f7:75:2d:
                    a2:1d:48:8b:f3:b9:0e:ab:86:3a:f1:17:2c:e6:4c:
                    d0:07:ab:e5:50:ed:ac:75:64:66:19:b5:20:93:fe:
                    90:46:8b:6c:68:e7:82:0a:11:67:da:02:59:59:f7:
                    f3:66:28:e3:b9:41:0f:9b:d7:74:9d:26:cc:9e:5a:
                    b5:d2:c2:52:a9:20:c2:26:2e:f7:f2:d1:25:18:c9:
                    ec:aa:51:ff:be:fd:d8:53:4e:a6:e4:0b:61:07:c0:
                    ef:8b:1e:80:47:69:63:96:9f:69:06:d7:04:0a:74:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EF:5B:6B:1B:69:59:C5:1E:AC:4B:F0:C7:C1:F4:27:D1:21:2E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/92fda21c-9a2c-3c7e-88b8-54f70756f685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:e7:aa:54:bf:82:dc:c0:a4:de:8c:84:35:7d:93:ab:9f:
         b1:30:ee:51:8a:d8:af:d9:34:92:ea:e9:2d:45:b5:3b:92:ec:
         30:ab:db:f5:28:3d:26:e9:c7:77:13:a0:01:fb:82:61:71:6c:
         01:db:6e:cd:cd:f5:54:c4:0f:31:53:85:b8:1c:e6:ef:1e:52:
         3f:4c:1b:55:17:45:23:55:29:e3:af:56:1e:93:19:54:ac:2a:
         c9:75:68:36:2f:61:f2:5f:6b:6a:38:d6:74:64:56:1c:3b:09:
         31:19:e5:d3:fc:9a:35:e9:07:24:34:a6:fb:c4:08:41:c4:8c:
         a3:43:8a:2d:1d:c6:b7:be:fb:9d:ee:32:ae:da:e8:85:3b:b2:
         85:d5:5c:b6:01:b0:77:0b:76:c7:3c:20:b8:28:15:67:a2:97:
         d5:c7:f6:13:6c:18:0f:a2:df:be:e4:7a:6b:9a:f3:41:1c:67:
         2f:43:a8:4b:ce:2c:65:1f:4a:20:a3:4c:a5:e7:9a:b5:f4:ef:
         08:cf:fb:91:0b:ae:6e:df:01:02:30:b5:45:16:3f:6b:7d:ff:
         1f:ec:67:64:fe:9e:45:83:91:b5:3d:0a:20:c1:e9:9b:30:b6:
         e9:7a:49:7b:a5:18:ed:32:81:36:e9:c0:39:6d:60:6e:63:4a:
         f9:eb:f2:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby28Gsh73XfsJFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjMzNTc3ZGItYjUzNi00YWFmLWI5YTEtNWJjYmM1OThm
MmUzMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk
NmRjMDJmYmItY2UxZS00M2U5LTljNDgtZjc2MTQ4MWNjMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyViW8SVQaSKcMF8hjDBtvrqqNF4Z0JsnSnrP
op+VgT1zF3teewoUWd0v/E9X7mEpv95gEXEINK1hMgLK9bH9LVBMDMOWQkChsSwY
Ky/QawzOrXqP0TE79zjULCHKpo1WF64DiAMCpMotMkGurgq0IHrl3/ZZH94KwRmV
E4TcE1sHWBhXNkP6OWLERhj36O/NsEL3dS2iHUiL87kOq4Y68Rcs5kzQB6vlUO2s
dWRmGbUgk/6QRotsaOeCChFn2gJZWffzZijjuUEPm9d0nSbMnlq10sJSqSDCJi73
8tElGMnsqlH/vv3YU06m5AthB8Dvix6AR2ljlp9pBtcECnR4KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbvW2sbaVnFHqxL8MfB9CfRIS4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MzM1
NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNiYzU5OGYyZTMvOTJmZGEyMWMtOWEyYy0z
YzdlLTg4YjgtNTRmNzA3NTZmNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjMzNTc3ZGItYjUzNi00YWFmLWI5
YTEtNWJjYmM1OThmMmUzLzYzMzU3N2RiLWI1MzYtNGFhZi1iOWExLTViY2JjNTk4
ZjJlMy5jcmwwHwYDVR0jBBgwFoAU5vj77JhgiioREWa6kIHl53qrn50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MzM1NzdkYi1iNTM2LTRhYWYtYjlhMS01YmNi
YzU5OGYyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQtt4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEth56pUv4LcwKTejIQ1fZOrn7Ew7lGK2K/ZNJLq6S1FtTuS7DCr2/Uo
PSbpx3cToAH7gmFxbAHbbs3N9VTEDzFThbgc5u8eUj9MG1UXRSNVKeOvVh6TGVSs
Ksl1aDYvYfJfa2o41nRkVhw7CTEZ5dP8mjXpByQ0pvvECEHEjKNDii0dxre++53u
Mq7a6IU7soXVXLYBsHcLdsc8ILgoFWeil9XH9hNsGA+i377kemua80EcZy9DqEvO
LGUfSiCjTKXnmrX07wjP+5ELrm7fAQIwtUUWP2t9/x/sZ2T+nkWDkbU9CiDB6Zsw
tul6SXulGO0ygTbpwDltYG5jSvnr8vc=
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:44:05 2025 by rpki-client