Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
File:                     f9776a7f-225e-3ef8-9666-75077fc17b3e.roa (raw, json)
Hash identifier:          kYug3AZ5AL3rj/GcXMpaBrlkIAOGcEKGB0VRR5sfedg=
Subject key identifier:   D3:17:A2:07:88:58:81:7A:88:0A:D8:06:9C:B1:08:E0:44:9A:0E:41
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A331AF00568ECBE59FD4AE080
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     0
IP address blocks:        192.42.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f0:05:68:ec:be:59:fd:4a:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=97163f0f-ccfd-49be-99e5-8ac255306a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:c9:34:f3:bf:13:81:3c:86:25:fb:12:cf:
                    1d:2c:76:9b:11:47:c4:a2:c0:48:73:a6:c9:f1:44:
                    b6:75:2f:f8:ed:48:e7:b1:36:72:0a:d2:22:30:b0:
                    c0:45:52:73:73:fb:3e:74:f8:fc:63:95:92:73:27:
                    cb:b0:1f:ee:48:74:b8:23:97:e3:a6:4c:47:80:c8:
                    e3:2c:4b:54:5c:11:7b:d8:8f:69:cf:7e:30:54:7f:
                    ce:5a:52:ae:53:00:f3:bc:d1:b0:01:57:70:77:18:
                    c8:bc:26:e2:80:e6:15:fc:89:87:e4:25:81:5a:a2:
                    74:69:9c:cf:07:d0:fc:b2:3c:47:56:9b:28:06:e4:
                    50:7c:b2:fe:7e:bd:30:6c:b6:2a:e4:95:ef:59:10:
                    e7:16:0e:37:56:cd:a2:c7:75:a9:54:db:7b:e4:87:
                    5f:33:e9:54:d1:13:fd:1f:b5:61:77:9e:e7:0d:04:
                    5d:24:a4:43:92:59:65:97:a8:e2:04:d0:38:d0:47:
                    05:74:bc:c9:5b:61:6d:6a:b2:1d:4f:2f:37:44:e1:
                    c1:dc:8b:a0:d0:81:33:b0:41:3d:37:a8:56:2c:45:
                    2a:ca:88:4a:5e:6b:03:57:9f:31:2a:91:a3:84:30:
                    ab:e5:86:da:51:4d:40:b5:50:2f:14:e2:06:58:3c:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:A2:07:88:58:81:7A:88:0A:D8:06:9C:B1:08:E0:44:9A:0E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a5:19:94:e9:23:76:0d:3e:b3:08:54:48:fb:e5:5a:2f:a6:
         93:29:1b:be:98:4b:28:38:41:87:fa:b1:2a:69:75:da:28:52:
         bf:b6:15:d9:0a:23:22:01:27:5d:c5:a4:20:de:80:7b:73:18:
         2a:4a:ba:83:38:ed:92:f9:8d:c8:65:f7:89:ae:26:70:a8:c3:
         c1:68:62:13:90:da:f2:27:94:be:83:86:d3:44:bc:af:b7:5e:
         a6:f1:78:cc:1e:ac:06:d1:85:bf:91:29:92:9d:da:8e:db:4b:
         27:44:42:60:c6:4c:4b:bc:2a:cd:dd:09:e2:8f:ff:89:be:a3:
         be:5a:29:ec:30:cb:7f:bf:9e:c2:fe:f3:e4:64:45:fd:e2:a0:
         21:94:9c:23:97:11:70:53:0a:54:66:79:c2:a0:7f:0d:5f:df:
         32:77:20:5f:6b:5e:94:a9:91:3a:b2:77:8c:f5:60:6e:0a:ac:
         67:55:00:31:44:26:4d:f5:e6:f2:a2:e7:72:68:14:61:76:61:
         36:59:08:0d:8f:57:1a:8b:94:7b:6d:04:3c:9e:6e:80:c6:a3:
         34:de:10:aa:94:a4:00:43:20:f6:a8:e6:24:19:f2:82:15:9b:
         7e:c8:7b:88:c7:25:88:b9:73:8a:02:1f:a4:24:a7:f0:ad:e9:
         ed:79:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:48:48 2025 by rpki-client