Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e8defdff-084f-3156-8c16-8cf8a39dfeba.roa
File:                     e8defdff-084f-3156-8c16-8cf8a39dfeba.roa (raw, json)
Hash identifier:          9RudVVSt1vHfY1O5+tMKYb9Z7xEG9DZIZrY+u1LBvvs=
Subject key identifier:   3A:71:80:9E:30:5A:29:0E:5D:CA:99:50:98:CE:68:2A:1E:A7:B8:09
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584A0C054BAFF101BFAA06FD1600
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e8defdff-084f-3156-8c16-8cf8a39dfeba.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        66.159.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4b:af:f1:01:bf:aa:06:fd:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1b430574-0217-49b0-bdfd-0276a2fe72b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8d:66:e8:33:f4:41:c6:1c:ce:b3:c6:46:f4:
                    67:44:57:9b:f0:81:9a:18:49:52:90:e2:5d:b4:02:
                    8e:e8:c8:b1:04:f9:46:f0:c4:b6:6c:14:91:a6:dc:
                    3e:80:49:c5:46:a2:ca:fa:80:93:e1:3d:02:37:e7:
                    77:a6:6d:04:46:9f:b8:43:8d:92:f1:6a:3f:e2:e9:
                    05:8d:bb:62:46:28:38:9f:ca:b3:5b:7e:f9:1a:7d:
                    b9:9e:83:fc:17:a2:ef:b7:d4:ff:ee:e8:8e:ab:3d:
                    25:bd:52:2e:24:88:cc:a3:a8:c9:e6:ae:c9:cc:30:
                    43:c7:66:1e:ed:3c:26:f7:e0:fc:5a:df:93:87:0d:
                    54:7a:f7:c6:c3:b7:fa:4c:42:12:a2:3b:77:ba:a1:
                    b6:12:7d:da:68:87:f9:4a:79:ed:4e:7a:06:98:c1:
                    13:a6:be:94:0d:81:90:f0:9e:67:05:c9:2b:55:3d:
                    f3:67:7a:4b:ff:99:2a:6c:5b:b0:2e:d6:21:2e:c0:
                    0d:ed:cb:18:61:50:f7:fc:2c:8e:84:92:51:76:33:
                    2d:00:b4:0f:fa:c0:6b:33:79:b6:30:08:66:3e:c7:
                    79:90:b6:d5:ca:1b:76:58:84:c3:78:ba:7d:8c:dc:
                    5b:b7:76:6b:09:32:e4:27:35:2c:a7:30:50:4f:10:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:80:9E:30:5A:29:0E:5D:CA:99:50:98:CE:68:2A:1E:A7:B8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e8defdff-084f-3156-8c16-8cf8a39dfeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:38:8e:31:05:ff:1c:b6:ef:63:6e:1f:69:2d:31:24:40:ea:
         58:1d:4b:1e:36:d4:c4:e4:1d:ce:de:db:ae:23:96:06:b2:37:
         99:59:0a:da:99:81:35:2f:81:d2:0d:b7:ce:9e:f3:d6:cf:77:
         10:61:db:68:2f:ad:d7:73:eb:57:94:43:aa:9b:fa:37:4a:3b:
         bb:d3:43:92:e3:f7:58:dc:3d:79:12:2c:33:4c:dd:93:f4:a2:
         ee:ed:d1:13:b2:a3:16:90:d5:d9:b1:65:39:df:62:57:af:f5:
         c5:a4:db:6f:9a:5a:be:d4:d0:c4:b6:04:a2:d9:72:b6:17:f9:
         df:2a:f5:35:ad:bf:18:63:85:74:b8:59:6e:d8:a1:1f:1e:e0:
         71:cd:7c:2e:10:4a:49:d9:46:b2:40:03:0e:3e:a9:f3:4e:96:
         62:00:42:16:ca:fb:6b:1f:75:7a:fb:b5:89:b8:02:ca:c9:5d:
         73:fc:32:c6:5b:85:0c:bf:62:04:cd:58:73:70:f0:84:89:3e:
         4b:71:aa:dc:8a:53:64:be:bf:69:fb:1f:46:17:8b:7f:d7:fb:
         f2:9d:32:66:f0:c5:7e:07:5d:41:ed:83:f9:4b:2c:7b:a7:c9:
         74:60:97:ca:a7:1a:36:0b:68:87:e4:2e:b1:cf:cb:32:d4:37:
         02:9a:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:34 2025 by rpki-client