Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1924c5e3-fe29-3974-b342-23ed1087bc47.roa
File:                     1924c5e3-fe29-3974-b342-23ed1087bc47.roa (raw, json)
Hash identifier:          ePa0xZj+2mD+oWlDqX0sbAThX47TDsbzr9n4m3iNOKQ=
Subject key identifier:   5F:11:50:9E:A5:EC:EB:D8:D9:2E:E9:31:94:A9:4F:DC:2A:D5:5C:12
Certificate issuer:       /CN=0a609de0-040f-42a5-990f-417b65a086a6
Certificate serial:       010D0C9F4328584AB651057F5AA6EF2BD2716480
Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1924c5e3-fe29-3974-b342-23ed1087bc47.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     20347
IP address blocks:        66.22.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:05:7f:5a:a6:ef:2b:d2:71:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=e2919298-cd3f-4768-9d10-ed01f200e3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:05:3f:7f:5d:2e:46:47:d0:0d:ab:cf:f3:06:
                    18:0e:e9:f4:e0:fb:69:60:90:91:7d:65:0c:e1:85:
                    0b:9f:41:21:59:af:5c:85:02:a9:c4:02:76:5c:4e:
                    65:03:5a:8b:f3:29:54:bd:ed:39:9f:ce:e3:b0:61:
                    fc:41:a3:80:c1:69:ff:66:ef:a7:ab:44:94:96:64:
                    9f:a0:85:45:f4:e1:bc:cc:53:91:dd:7f:aa:63:44:
                    58:74:75:d4:7f:98:ff:3a:2c:c7:e4:4d:3b:95:48:
                    36:56:6a:c0:54:08:43:c7:fe:9f:a0:fb:d1:cb:cd:
                    91:2f:4a:78:a2:78:c0:c7:bd:8f:3e:4b:45:a4:66:
                    9b:39:f3:4c:1b:88:c8:1d:0c:a6:be:09:84:bc:84:
                    8a:25:17:f7:2c:24:87:d3:a2:3f:57:d7:43:52:3a:
                    ce:43:72:72:60:e1:0d:c5:3e:d6:a2:e1:40:90:23:
                    69:ff:0f:c3:e4:89:41:de:b1:c0:cd:a9:7d:35:9e:
                    fa:e3:8d:1e:10:7d:a6:ad:18:e7:17:77:63:85:2a:
                    06:f0:4e:7f:17:33:98:d5:da:47:cb:8a:a6:dd:a0:
                    ee:a9:ef:77:26:ce:63:12:6b:11:e5:9e:18:4d:e8:
                    19:21:6c:ee:3b:8c:c2:26:77:6d:f7:17:12:83:76:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:50:9E:A5:EC:EB:D8:D9:2E:E9:31:94:A9:4F:DC:2A:D5:5C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/1924c5e3-fe29-3974-b342-23ed1087bc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl

            X509v3 Authority Key Identifier:
                keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:37:4f:a2:59:53:bb:04:19:21:ec:10:29:62:db:4b:56:0a:
         e0:5c:c6:e3:a3:f3:42:27:e1:80:5d:66:f4:b7:a4:a1:cf:39:
         dc:08:45:18:ba:8c:7c:5d:53:6f:28:40:bb:61:c0:5d:d4:1d:
         38:49:12:40:5f:9d:7a:27:05:5f:12:41:95:6f:86:60:c9:b8:
         22:a1:20:72:54:2e:17:98:85:9c:01:ed:39:aa:9e:4f:31:f3:
         27:19:bd:38:65:11:54:ff:8e:98:fc:51:e2:f2:6c:7f:f9:b2:
         5b:56:e1:9f:72:03:92:57:6e:10:1f:49:63:0b:ab:a6:4a:83:
         f7:1a:0f:d1:6e:8e:e2:f3:a5:b3:1c:86:ac:63:54:8e:98:28:
         5d:51:31:87:4e:bf:5d:fd:b3:db:0c:1d:58:06:4b:33:3d:f4:
         b0:01:06:4f:e1:b4:c0:bc:44:85:a8:bb:bf:b4:e3:7f:14:4e:
         7d:0c:57:69:c9:11:fc:8f:31:01:68:27:b2:4f:4a:52:c9:bc:
         06:5e:6d:47:d3:ed:ae:f2:ed:f3:03:fa:a7:c2:84:a2:a4:f5:
         01:e1:6b:d8:3e:9b:64:fb:41:14:86:f3:7a:0b:7b:13:53:36:
         81:34:df:38:c4:e3:a1:d6:77:c6:d8:0f:f2:92:7e:06:f3:bc:
         81:57:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:29 2025 by rpki-client