Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa
File:                     f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa (raw, json)
Hash identifier:          /7k2VtOR3pinfb9TvS26XW9aQI/8ZuyvPXLK+1xEsjo=
Subject key identifier:   F2:0E:4A:83:B6:71:02:80:AC:A1:21:1B:A8:05:8C:07:B4:42:58:2F
Certificate issuer:       /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
Certificate serial:       010D0C9F4328584A07D52962523EE1A598ACFA1C
Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        66.187.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:29:62:52:3e:e1:a5:98:ac:fa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=3c566499-59f9-479f-875f-aa2f74cbd33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:10:26:f9:84:22:7f:f9:f2:e7:6a:e2:35:
                    60:5d:0f:23:2b:7a:5b:27:bf:30:82:ad:76:2d:ef:
                    71:91:b1:d8:64:0a:e7:92:ac:24:87:81:1f:4c:2f:
                    6a:c9:c1:88:62:95:6e:31:0a:e8:7d:72:3e:be:99:
                    25:49:cb:78:44:25:a4:75:01:f0:4a:4f:32:61:b2:
                    e5:d4:04:9b:38:65:08:a3:d1:dc:a3:31:4d:2b:a4:
                    0e:8c:e7:e6:68:83:46:b4:f4:b2:54:a6:1b:ec:1f:
                    55:7b:06:5e:22:af:ea:a7:7f:93:6b:55:50:9b:5e:
                    a4:0d:05:7f:6b:fa:cc:f8:62:ad:60:d3:04:f2:cc:
                    71:e5:92:16:48:23:90:18:20:37:cf:3e:24:43:c6:
                    f3:1e:11:63:3e:3c:61:2a:08:89:ff:d0:d6:7d:3c:
                    53:5d:c5:26:b2:95:38:5f:b4:66:07:cc:23:ee:4f:
                    4c:e0:56:a9:75:99:b8:26:06:f5:c3:83:9d:51:dc:
                    f5:68:ad:df:af:3a:8b:2a:f2:11:fc:90:e8:e7:1e:
                    77:ee:0d:14:72:94:9c:20:29:7b:f3:bb:c4:43:f0:
                    de:d2:78:ee:53:ef:82:e3:f7:ad:4d:73:26:2d:af:
                    71:20:a9:0e:4f:e2:6a:97:92:a7:0e:51:5d:ef:5f:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0E:4A:83:B6:71:02:80:AC:A1:21:1B:A8:05:8C:07:B4:42:58:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl

            X509v3 Authority Key Identifier:
                keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:e1:6e:33:3f:c9:4d:fa:ee:a9:cb:70:c1:c3:67:c4:8e:
         82:e0:9f:58:d0:be:ca:ef:75:47:ba:3f:16:94:69:4e:15:fd:
         05:a7:b8:20:98:92:4e:3e:6a:fb:da:56:85:d3:d2:1a:83:df:
         1d:bb:33:07:e4:4e:6e:1e:16:f4:20:84:0c:6d:8c:c6:06:63:
         14:44:a4:b3:e5:ea:fc:40:92:85:b5:a7:0b:22:7e:53:ba:2a:
         72:cc:d0:1a:4d:57:57:29:5c:3f:84:a4:03:a5:9e:51:6b:47:
         6e:c4:23:f3:b9:f5:3e:ce:c6:75:2b:c4:05:2e:9f:b9:bc:8e:
         78:41:3b:19:7a:55:07:39:c7:9a:dd:db:27:d2:cb:c4:75:27:
         55:41:c3:a9:f9:fe:c0:2f:1a:42:ce:38:6e:db:fd:95:d1:0c:
         00:e8:33:22:66:2f:87:a1:d5:a8:c9:7b:dd:d2:64:a0:2c:60:
         dd:ba:c5:5d:2a:7d:ec:d7:31:27:20:3d:b5:a1:a2:ad:32:65:
         18:e0:b6:1e:e0:64:e6:f8:f1:46:27:2d:00:30:9a:49:f9:98:
         14:e6:de:3c:d3:2e:99:63:6b:93:3c:4f:ad:ae:0e:e0:35:14:
         7e:33:25:29:40:d2:5d:d6:40:e9:2d:38:fe:76:4f:43:09:de:
         7e:4c:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:27 2025 by rpki-client