Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
File:                     06241e00-7903-3050-9775-e4425bd2b4d5.roa (raw, json)
Hash identifier:          u7x5yi+FuT+YoSAmzU7PvC/qV2b+E0WVhWn8i3orVo0=
Subject key identifier:   86:1A:E3:E7:3F:B8:71:9D:14:76:95:2C:9D:6B:A5:84:B8:2A:E6:1F
Certificate issuer:       /CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
Certificate serial:       010D0C9F4328584A331AE4B098B0A9F8F7B303C0
Authority key identifier: 90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     27823
IP address blocks:        66.97.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e4:b0:98:b0:a9:f8:f7:b3:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05ae39f-c5c5-44bf-9771-c4a013b7c9d4
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=8f26094e-e7a9-498a-b7c4-86881a7df4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:83:52:05:bd:d0:00:d7:aa:ca:1b:b2:61:
                    36:62:a8:e7:30:64:16:ee:fc:aa:92:dd:af:69:ac:
                    5c:30:05:13:15:63:10:d5:60:7e:18:eb:e2:e3:08:
                    fc:77:0f:42:9b:77:28:2d:49:68:d5:61:d1:2d:e0:
                    b4:19:f1:6c:bf:6f:b1:41:37:2b:f9:aa:e3:4b:73:
                    2d:d8:46:3e:fa:69:db:04:44:6b:31:fc:63:20:9c:
                    ae:b2:03:41:91:ca:75:7f:00:2e:82:9a:6d:4a:c0:
                    b8:7f:8b:20:d4:bb:49:a8:05:cb:a4:0b:70:1d:1c:
                    46:c6:3d:54:d1:3d:39:68:a8:cb:af:ef:97:68:2d:
                    1f:a0:f6:a2:df:cb:9e:64:c7:e4:b1:37:a4:ef:6b:
                    33:99:4f:30:05:69:e8:1f:71:e4:71:88:c9:4c:48:
                    6a:36:1b:4c:79:a0:ae:60:3c:25:69:62:e2:12:90:
                    5c:2f:7b:d6:ff:31:ec:3d:56:98:4c:24:9b:2d:67:
                    c0:05:ba:89:49:ba:d3:bf:f2:57:13:d7:7e:13:39:
                    ed:fa:90:df:1b:1e:b0:06:c4:8f:bc:05:8d:08:96:
                    77:9c:a4:ff:0c:e4:0f:a2:cc:88:2c:f5:22:37:dc:
                    4f:42:61:36:d2:51:ea:5c:e2:0f:c7:73:4b:1f:58:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1A:E3:E7:3F:B8:71:9D:14:76:95:2C:9D:6B:A5:84:B8:2A:E6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/06241e00-7903-3050-9775-e4425bd2b4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.crl

            X509v3 Authority Key Identifier:
                keyid:90:6A:45:5D:2A:18:39:95:D3:36:2A:9C:07:2B:B3:4A:4E:52:37:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c05ae39f-c5c5-44bf-9771-c4a013b7c9d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:34:aa:cf:02:59:3b:d4:b3:05:67:11:6e:2b:da:15:53:5a:
         ea:5e:2f:f4:ff:c3:f7:af:b6:2e:c9:be:10:41:76:f3:bf:42:
         e0:c3:9f:a4:55:46:7c:54:9e:ea:61:71:76:f2:ef:b0:04:f9:
         c1:85:56:15:c6:8a:45:fc:5c:58:78:57:9c:aa:35:ad:9d:1f:
         f8:c1:d8:77:72:26:7c:e7:f3:c5:7b:1e:76:55:77:f4:e9:5f:
         f8:f9:38:c7:49:ca:a7:1b:03:e5:9e:02:43:b1:28:f3:51:e5:
         bb:3e:86:7b:b3:87:3f:d7:44:e8:aa:56:07:23:77:f6:fc:58:
         4c:4e:07:fa:e1:11:b9:cd:95:1d:7c:c7:1c:76:25:ea:40:66:
         1d:62:91:1f:eb:e1:77:bc:76:f2:08:c2:34:ca:cf:e5:e2:4c:
         7b:b0:dc:fc:4a:82:37:2b:51:fa:03:0f:98:ae:cb:ad:5c:40:
         20:5c:f2:ab:29:68:10:a6:d0:bc:3a:5e:55:b8:ff:b7:86:b9:
         53:97:68:64:46:08:b2:a0:1b:04:02:a3:61:36:6d:d3:ed:c3:
         4c:7d:dc:54:f7:28:7b:7d:7b:84:38:21:3f:92:2a:fe:f5:14:
         41:4a:85:9e:c4:0e:66:e7:ac:36:28:06:60:5e:7d:f4:b9:35:
         4f:2e:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:14:39 2025 by rpki-client