Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24c49681-355f-333c-9673-3c45a194f0c2.roa
File:                     24c49681-355f-333c-9673-3c45a194f0c2.roa (raw, json)
Hash identifier:          CayeWUSZ6gTtzbbPoCip0ZFBhrl1wFyI4hSabsSEsPU=
Subject key identifier:   8A:32:E0:D2:9D:8A:75:4F:BE:7D:DF:80:B0:F0:01:01:C7:AC:60:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43172979A420A555C755F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24c49681-355f-333c-9673-3c45a194f0c2.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        66.30.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:72:97:9a:42:0a:55:5c:75:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ccbfa1d8-edc3-4011-b032-538a047ac6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:82:f3:38:30:d3:c8:d0:46:f2:ea:25:67:
                    16:d2:17:4a:1e:9a:fb:d7:4b:4f:95:f8:5d:8e:8f:
                    99:54:3c:18:b3:da:82:f2:5e:d8:4c:b8:f2:8d:f6:
                    d3:86:d8:e6:ec:1c:c2:5e:b1:34:51:74:7a:53:88:
                    c5:56:c6:bf:39:7f:4d:74:3e:4b:61:51:30:cd:9c:
                    3a:9d:48:44:74:b0:12:3d:e6:43:58:ea:71:67:f5:
                    1a:a3:58:b5:fd:12:0c:64:8d:eb:ab:ab:f8:9a:f1:
                    24:60:90:d6:e1:a9:e1:43:e1:13:7e:b9:bb:af:75:
                    c5:1a:3f:31:62:8f:fc:55:92:cb:47:5e:8c:15:d9:
                    ad:59:e1:36:4f:90:13:c8:2b:f6:f2:2d:8d:b0:a0:
                    50:bd:1e:94:ae:0c:1d:e5:60:37:fa:17:1a:9c:32:
                    e7:06:73:d3:fe:17:10:a5:c1:f2:55:58:ca:b4:a1:
                    d4:50:83:cb:b5:ce:34:5e:5f:3a:d0:fa:fb:d2:bc:
                    b3:2b:79:32:b0:f1:67:05:88:a2:53:a5:33:2a:ae:
                    8b:3c:23:33:5e:85:92:20:ca:f7:ed:a3:c5:8e:67:
                    53:0c:53:c9:b1:4e:4f:e8:01:df:3b:fb:74:e7:08:
                    55:c2:47:67:f8:8e:a1:45:3e:a0:9f:34:ca:c4:b9:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:32:E0:D2:9D:8A:75:4F:BE:7D:DF:80:B0:F0:01:01:C7:AC:60:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24c49681-355f-333c-9673-3c45a194f0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:5f:5a:a0:3f:41:b0:55:5d:ad:ea:84:dc:99:a3:4f:21:
         ed:14:d1:b8:ce:4c:bf:f6:01:22:0f:5f:83:35:c1:a2:86:37:
         21:84:04:7c:90:75:5b:a5:7b:74:be:63:f5:fd:26:9e:25:cf:
         80:fe:d9:35:0b:f4:7d:fe:a0:87:e1:86:61:14:3f:9a:5c:1e:
         91:b8:22:bf:cf:3c:34:b5:33:8a:47:36:df:04:a1:4a:1b:5d:
         27:e4:21:18:77:6b:c1:f1:33:da:a5:71:6a:78:ad:7c:a8:58:
         e6:fd:13:b8:0f:16:b6:33:9b:03:79:a1:7c:d1:92:e1:67:df:
         00:0b:ec:09:f0:6b:a8:30:ce:f2:b8:46:16:14:a1:e2:25:f9:
         74:cd:ac:f9:37:b1:e0:87:34:0c:c5:4c:2d:9d:e3:f8:61:ef:
         cd:4b:af:0b:f4:b0:a7:60:35:28:c9:89:32:37:28:72:09:d0:
         9c:dd:ed:80:7b:2e:95:36:81:97:32:48:50:bc:6a:73:b4:5a:
         ce:b4:2c:ca:62:5e:08:f1:78:e6:87:e1:96:5b:3c:37:7a:d0:
         f6:f9:89:1d:0a:25:ba:e0:bd:dd:15:c2:55:aa:58:10:00:99:
         39:ed:54:81:f9:9d:a6:1c:19:ad:1e:85:03:1d:a7:53:b6:86:
         88:34:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:11:09 2025 by rpki-client