Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/5facf344-c08d-3a90-b0b2-8dc2e2e3602a.roa
File:                     5facf344-c08d-3a90-b0b2-8dc2e2e3602a.roa (raw, json)
Hash identifier:          ces+NDCDJf1DH/6wk4cN5iD47k97O9W1BUHGNmI+NAk=
Subject key identifier:   CD:2B:D1:7C:73:14:73:F7:21:65:E5:3E:C4:0E:51:B0:BA:BC:97:D4
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F43285849F17FAD888865308FC29BE600
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/5facf344-c08d-3a90-b0b2-8dc2e2e3602a.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     8047
IP address blocks:        66.223.128.0/17 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ad:88:88:65:30:8f:c2:9b:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=4b7aa18e-9d2f-4e7e-8481-63fe5b50a8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:55:de:c1:a7:37:5d:7c:ba:e5:1e:ae:85:
                    95:6b:15:e4:a4:a2:a3:c9:81:b7:e8:06:a2:22:c9:
                    09:8e:45:63:0e:6c:22:38:71:b4:ce:bb:03:5d:f1:
                    b6:3e:91:ce:29:2d:82:c6:8e:3c:90:9d:6e:84:55:
                    3a:b2:cb:8e:09:58:31:b2:c7:1d:25:b7:90:a8:74:
                    e0:22:20:07:6f:8b:fd:9e:51:2d:2b:cd:b1:e9:2a:
                    fb:44:f2:18:61:a1:92:ba:a3:50:fd:2d:5b:64:c8:
                    de:a1:d1:96:6d:b4:f3:41:72:7e:0b:f6:d9:1d:ef:
                    62:e9:54:9c:22:3c:f2:f2:10:fd:4e:af:65:0a:4d:
                    b5:ed:2f:99:9e:be:0c:83:4e:0a:11:aa:23:1b:90:
                    49:e6:c5:30:58:c2:92:1b:81:fb:18:69:38:ad:b6:
                    9c:91:37:91:62:61:b3:74:71:9d:3e:49:5c:8c:21:
                    1b:29:b2:24:02:3e:66:ad:dc:e8:79:f5:2f:b7:7b:
                    7e:5e:54:da:85:53:11:62:d8:85:c0:93:87:80:63:
                    da:95:33:41:c3:fb:08:c2:30:63:52:63:2d:01:88:
                    52:a1:ae:9b:1e:8b:ec:c9:6d:cf:e0:e8:14:cf:3d:
                    45:c2:0e:b9:08:a0:9c:55:f3:58:02:bf:8c:10:b5:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2B:D1:7C:73:14:73:F7:21:65:E5:3E:C4:0E:51:B0:BA:BC:97:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/5facf344-c08d-3a90-b0b2-8dc2e2e3602a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:dd:29:61:01:6f:fd:f7:0c:de:ec:ec:57:c1:7d:01:17:
         e2:96:09:90:38:a0:c0:10:00:0c:32:86:cd:f7:41:98:16:b3:
         d0:68:70:ab:90:37:97:7d:67:e0:fd:01:77:4f:8d:a0:45:41:
         c9:98:ea:7c:cd:46:f8:79:94:d9:66:9b:74:fc:80:a8:25:0e:
         42:3b:51:5b:d3:af:2f:7c:c9:7f:fa:a3:40:d7:9b:27:39:fb:
         b5:38:24:5b:0c:7f:48:ca:b1:f2:57:ad:1a:62:c3:ef:ef:ea:
         98:65:11:d4:a6:aa:02:f2:8b:29:0b:c3:1a:22:6f:1b:a4:5e:
         52:73:69:13:9d:86:b8:87:02:93:86:a4:e6:e4:49:a1:97:9a:
         ab:1c:2e:c5:2e:97:66:1c:a3:69:05:ad:a6:49:b6:8f:0e:c8:
         98:e3:f3:19:8f:c2:35:34:6e:80:0d:f5:0b:a7:bc:1c:27:96:
         60:df:84:8b:b9:2e:25:00:ad:52:4d:a9:3e:dd:7c:02:46:5e:
         de:2f:54:a8:b6:b0:d0:14:08:72:ed:32:4a:3f:8f:2f:45:20:
         e3:70:7a:e1:32:df:39:f1:14:fa:c6:ba:e4:55:99:53:30:8d:
         89:1e:8a:45:83:2f:38:f7:c2:8d:48:67:03:cd:44:f9:32:85:
         fc:4c:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:54:25 2025 by rpki-client