Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/208a9be2-a5b5-3e33-99b0-5536bd9f048c.roa
File:                     208a9be2-a5b5-3e33-99b0-5536bd9f048c.roa (raw, json)
Hash identifier:          V1ZuE+jOUl9SrW23L6jsIPz7neVGOFydqeJFneZT5zM=
Subject key identifier:   F4:83:40:E0:6C:E3:E9:BD:6F:72:82:8D:85:AB:71:1A:DC:C4:AC:1A
Certificate issuer:       /CN=e02eda8d-679a-4d59-95c2-5097086d9468
Certificate serial:       010D0C9F4328584B36EC6E55260B6A5BAA1B41E8
Authority key identifier: EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/208a9be2-a5b5-3e33-99b0-5536bd9f048c.roa
Signing time:             Tue 16 Sep 2025 14:37:44 +0000
ROA not before:           Tue 16 Sep 2025 14:37:44 +0000
ROA not after:            Mon 15 Dec 2025 15:37:44 +0000
asID:                     33647
IP address blocks:        66.226.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:ec:6e:55:26:0b:6a:5b:aa:1b:41:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02eda8d-679a-4d59-95c2-5097086d9468
        Validity
            Not Before: Sep 16 14:37:44 2025 GMT
            Not After : Dec 15 15:37:44 2025 GMT
        Subject: CN=2c7b8acf-cab7-4b13-a32b-38398f5825c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:b3:22:cb:30:19:a3:bf:e7:30:4d:fe:56:
                    e4:00:43:d5:b8:ae:4a:03:ed:b3:02:b4:ad:2d:10:
                    b1:20:b3:f5:ee:e7:e7:92:25:de:bf:e9:58:8d:9b:
                    9d:49:0a:65:0c:47:80:fc:ea:95:d8:08:14:e5:8b:
                    18:65:6f:74:75:b5:20:ae:a6:f8:dc:98:59:ed:af:
                    ff:5a:f3:1e:86:b8:74:d4:5d:a5:9f:18:48:4c:5e:
                    d3:93:88:c3:6b:08:31:f3:dc:90:71:06:49:9b:6f:
                    e8:71:9d:f9:89:14:51:3c:9a:17:8b:e2:2f:1e:7c:
                    61:ed:ea:92:d3:00:c8:68:24:9f:4b:d9:89:20:95:
                    27:fe:be:6a:65:7d:b6:90:c3:10:8e:31:63:7b:67:
                    39:88:3c:c8:07:f0:fe:32:db:b2:46:d2:98:38:83:
                    68:1c:28:48:2e:40:fd:3a:06:24:75:8b:07:c9:04:
                    0d:90:41:ad:81:a8:79:d1:3c:37:19:91:af:9c:a6:
                    50:cd:34:28:9b:56:af:3b:36:1a:9e:00:dc:61:36:
                    5d:41:eb:6f:99:49:9c:bd:59:d7:dc:9f:06:40:90:
                    80:ec:8e:aa:3a:a0:1b:b0:b5:4b:c0:8d:91:dd:75:
                    61:7d:0c:2a:ef:2a:b0:75:b8:73:cd:6c:31:1a:26:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:40:E0:6C:E3:E9:BD:6F:72:82:8D:85:AB:71:1A:DC:C4:AC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/208a9be2-a5b5-3e33-99b0-5536bd9f048c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.crl

            X509v3 Authority Key Identifier:
                keyid:EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.226.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:df:28:43:bc:71:7d:95:e9:91:1d:1e:8e:6f:fb:d3:27:
         b1:22:55:a2:31:19:3d:7c:ae:d1:23:a3:38:48:db:cc:f9:b1:
         e0:f8:8a:ab:8c:ec:ab:37:bf:0b:84:86:48:0d:8d:e3:dd:5f:
         20:33:b9:46:bf:28:01:21:c7:01:62:fc:e9:66:67:f5:45:c9:
         d3:ec:14:b8:fe:36:68:4c:a3:56:25:5c:53:6b:d2:e7:76:16:
         fa:e1:45:e6:25:ea:ae:14:22:3f:3f:6d:17:1c:03:bf:4f:90:
         52:6c:b6:a9:ce:29:7b:b1:98:80:8d:b7:dd:6c:4f:83:f3:b0:
         f2:d2:cf:5b:63:e7:10:e9:f7:24:80:9b:3d:f1:1d:bf:84:9f:
         d7:bf:57:c7:f6:9f:7e:2f:fb:a5:ab:05:4a:67:5b:b3:94:f2:
         a8:f0:3d:df:f9:9e:7e:70:71:10:06:ca:c8:f0:91:e3:db:f2:
         22:d1:33:5f:34:a8:e0:e6:b9:39:81:82:6a:b4:f0:47:b1:5a:
         80:c5:e5:72:bf:03:32:ff:7b:30:ca:5b:58:07:df:7f:ed:b0:
         50:4a:db:af:db:e9:6c:cb:50:dd:b8:12:95:48:27:1b:65:65:
         b9:26:f8:71:1a:64:da:6e:f2:b6:62:98:d8:0f:17:f0:0c:23:
         b3:b1:09:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs27G5VJgtqW6obQegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZWRhOGQtNjc5YS00ZDU5LTk1YzItNTA5NzA4NmQ5
NDY4MB4XDTI1MDkxNjE0Mzc0NFoXDTI1MTIxNTE1Mzc0NFowLzEtMCsGA1UEAxMk
MmM3YjhhY2YtY2FiNy00YjEzLWEzMmItMzgzOThmNTgyNWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxGzIsswGaO/5zBN/lbkAEPVuK5KA+2zArSt
LRCxILP17ufnkiXev+lYjZudSQplDEeA/OqV2AgU5YsYZW90dbUgrqb43JhZ7a//
WvMehrh01F2lnxhITF7Tk4jDawgx89yQcQZJm2/ocZ35iRRRPJoXi+IvHnxh7eqS
0wDIaCSfS9mJIJUn/r5qZX22kMMQjjFje2c5iDzIB/D+MtuyRtKYOINoHChILkD9
OgYkdYsHyQQNkEGtgah50Tw3GZGvnKZQzTQom1avOzYangDcYTZdQetvmUmcvVnX
3J8GQJCA7I6qOqAbsLVLwI2R3XVhfQwq7yqwdbhzzWwxGiYJlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSDQOBs4+m9b3KCjYWrcRrcxKwaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDJl
ZGE4ZC02NzlhLTRkNTktOTVjMi01MDk3MDg2ZDk0NjgvMjA4YTliZTItYTViNS0z
ZTMzLTk5YjAtNTUzNmJkOWYwNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTAyZWRhOGQtNjc5YS00ZDU5LTk1
YzItNTA5NzA4NmQ5NDY4L2UwMmVkYThkLTY3OWEtNGQ1OS05NWMyLTUwOTcwODZk
OTQ2OC5jcmwwHwYDVR0jBBgwFoAU68ySBdfr7uKD0vNm9Gs1dEHW4G4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lMDJlZGE4ZC02NzlhLTRkNTktOTVjMi01MDk3
MDg2ZDk0NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxI3yhDvHF9lemRHR6Ob/vTJ7EiVaIxGT18rtEjozhI28z5seD4iquM
7Ks3vwuEhkgNjePdXyAzuUa/KAEhxwFi/OlmZ/VFydPsFLj+NmhMo1YlXFNr0ud2
FvrhReYl6q4UIj8/bRccA79PkFJstqnOKXuxmICNt91sT4PzsPLSz1tj5xDp9ySA
mz3xHb+En9e/V8f2n34v+6WrBUpnW7OU8qjwPd/5nn5wcRAGysjwkePb8iLRM180
qODmuTmBgmq08EexWoDF5XK/AzL/ezDKW1gH33/tsFBK26/b6WzLUN24EpVIJxtl
Zbkm+HEaZNpu8rZimNgPF/AMI7OxCcs=
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:59:50 2025 by rpki-client