Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa
File:                     a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa (raw, json)
Hash identifier:          PB6ujO2Bf/XeVm9Ug5CLnEaBRBB4bORsewQp+JCrsMM=
Subject key identifier:   54:ED:99:F3:4F:8A:62:8B:A5:01:35:01:4D:53:CB:68:1C:56:F0:FE
Certificate issuer:       /CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74
Certificate serial:       010D0C9F4328584A268AC5B681D09A365C53EF80
Authority key identifier: 64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     14409
IP address blocks:        199.66.136.0/24 maxlen: 24
                          199.66.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c5:b6:81:d0:9a:36:5c:53:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=58aad9da-fa4b-45e7-a1be-afbfb384fce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:34:77:19:55:55:4c:00:e6:da:1d:d5:bd:
                    ee:63:4f:51:0b:15:80:17:9d:3a:ab:b3:30:8a:67:
                    d2:2d:8e:30:54:f7:f3:99:89:3a:4c:60:dd:ba:b3:
                    bc:d0:92:e8:a2:83:d4:92:7b:d7:26:0f:cc:f4:b0:
                    e8:a9:cd:7c:c4:12:78:1f:00:6e:0a:19:16:a0:2a:
                    a5:1e:2c:86:17:31:f7:0a:81:80:88:25:09:8c:cb:
                    02:5b:80:59:49:eb:b7:a9:93:36:88:e1:38:5d:4e:
                    17:2b:b6:4a:ea:ff:ed:6b:b0:2d:d9:bb:3d:74:c8:
                    79:f7:f6:bd:c8:1a:fd:95:9f:09:e7:cf:41:db:8d:
                    11:6e:fa:37:83:dd:0c:99:fb:e7:35:a8:40:7a:86:
                    dd:ba:d6:64:b6:e7:92:61:b2:31:7b:07:c8:f5:9e:
                    3e:72:73:ff:27:83:f9:14:76:93:70:d4:41:07:89:
                    86:af:07:a4:c2:64:37:0e:da:b7:f0:2e:3e:95:ab:
                    46:26:d1:a1:33:fe:3e:9e:69:bc:1c:82:10:fc:7f:
                    41:76:71:1d:29:0b:2e:86:99:05:48:bd:3f:e3:7e:
                    d9:53:41:c5:4a:42:6e:54:2c:0d:a6:a3:89:7e:8a:
                    7a:e5:0c:6b:ce:f1:2e:ed:e8:05:fa:6d:d5:de:c6:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:99:F3:4F:8A:62:8B:A5:01:35:01:4D:53:CB:68:1C:56:F0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl

            X509v3 Authority Key Identifier:
                keyid:64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:64:f0:71:f1:56:34:56:a1:c7:36:46:77:03:cc:63:d0:6e:
         4e:04:1e:9e:c4:1c:65:b6:cf:f4:6f:85:57:0a:9b:1b:e8:d8:
         ed:fe:81:34:e5:4d:6e:a5:eb:93:79:6b:de:f3:0d:19:7b:35:
         c9:35:1a:cf:37:1e:56:dd:41:c1:98:97:2c:17:ae:43:68:da:
         05:d0:4a:a7:64:4d:3a:68:f2:84:97:e8:9e:5a:6a:59:df:48:
         93:f5:92:c6:6d:22:06:e2:6a:af:20:07:16:fc:47:4c:17:62:
         e0:71:9c:e1:31:54:46:62:da:17:ae:a8:19:5f:ff:8b:f8:04:
         42:68:df:96:5b:12:1e:2f:89:ca:d5:af:fe:a8:70:8a:41:0b:
         b1:1a:63:fd:51:a5:5d:d2:7d:3c:68:e5:74:36:49:d0:f4:22:
         74:62:7c:79:ba:db:f4:45:28:28:99:28:06:51:8f:b7:06:cd:
         7c:88:56:e7:2a:6d:30:99:18:ca:4c:ad:8d:90:37:98:8c:a9:
         fb:6e:f6:ba:34:81:2f:1e:78:a6:41:91:d7:f8:60:65:9b:fd:
         10:2f:9a:c4:32:49:b6:28:a6:68:c4:2c:7e:27:e7:c7:65:dd:
         a4:4a:d1:1d:59:30:7d:65:7a:03:93:d0:86:70:83:70:bd:de:
         c8:b3:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:35:49 2025 by rpki-client