Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa
File:                     39c23487-b420-379f-91d9-56c821c0182c.roa (raw, json)
Hash identifier:          f8vVLeS9nDWhSXa3GloPM6liUkXBUMqv7sD6eZ5vF9o=
Subject key identifier:   28:38:EB:FE:7E:38:78:92:B0:FC:72:A9:66:7C:29:D5:9A:3F:DE:87
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0F9721884DC42B17F2CC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        69.66.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f9:72:18:84:dc:42:b1:7f:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=7b870c3b-a2e5-4196-b088-cd217979cedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:97:3d:b9:21:c3:2e:f9:ef:f0:54:54:29:
                    f7:3a:3f:8d:e3:3e:4a:81:c9:1e:73:11:2c:81:e7:
                    c5:28:07:aa:e4:63:a8:ca:cc:e1:03:ef:a7:16:b6:
                    d0:8e:ef:d2:42:d4:16:b6:ef:83:27:81:09:96:33:
                    a2:0b:18:fd:d7:92:7c:6a:f8:1c:e0:d0:a0:24:f0:
                    fc:a9:d6:5f:4a:be:83:30:b6:c4:12:38:92:3a:cd:
                    cd:82:20:d0:e4:7c:88:cd:cd:aa:9f:46:72:75:29:
                    16:e4:12:b1:eb:56:72:91:71:c5:06:55:89:c6:a6:
                    71:06:9e:0e:ae:6d:6d:94:f7:72:51:7a:e9:00:75:
                    a5:a5:23:ed:f0:90:17:27:8e:7f:d9:1d:e5:8d:56:
                    96:d6:8c:92:cd:21:07:72:97:9e:64:7d:13:4a:b0:
                    6b:29:6f:30:7e:70:bf:fc:43:30:f1:37:3a:11:3a:
                    f9:03:42:16:73:a6:8e:91:be:49:9c:57:cb:4e:43:
                    19:9a:ce:61:81:16:e2:38:7c:0b:57:a8:b1:8b:03:
                    26:57:d2:58:00:be:95:61:04:2b:5c:e9:16:3e:36:
                    f2:c4:83:2a:cd:98:d2:10:e5:6e:89:06:8b:81:1f:
                    81:49:a1:41:e5:c7:0b:3d:f5:a8:ad:a6:af:36:5d:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:38:EB:FE:7E:38:78:92:B0:FC:72:A9:66:7C:29:D5:9A:3F:DE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:68:3b:0c:3a:9b:22:ec:b0:4d:78:1c:01:2f:fc:d5:cc:
         d7:43:11:c1:15:79:4d:19:82:ff:37:93:18:13:c1:a9:79:9e:
         79:1f:c6:8a:79:ee:0f:ff:f7:c7:d7:4c:fb:84:e5:cf:f6:eb:
         93:73:a3:47:7c:b4:15:6f:77:8a:2e:86:87:74:e0:d2:22:ae:
         79:eb:f8:e0:6a:67:17:3f:a0:5b:ed:27:2c:fb:0e:25:2f:48:
         86:e4:d1:b3:75:2b:e1:4b:4f:d1:3e:f1:e0:68:ba:5b:7c:f7:
         3d:cd:18:1c:ce:11:67:a6:e9:fb:6d:ad:33:b2:d8:b9:d8:25:
         c6:88:01:f1:2c:6d:76:46:42:32:2e:d5:4e:4b:22:8d:3a:3e:
         f2:b2:ca:3d:c0:18:ea:0d:6b:15:c8:1d:ff:a7:9a:6d:e7:d5:
         56:b0:12:23:ec:cd:d1:5f:ee:27:b9:c6:83:da:fd:01:fc:2f:
         66:a5:77:ec:dc:2e:19:18:ec:10:e2:22:47:85:15:18:d4:e0:
         94:68:b7:00:0e:3f:7b:98:b3:1f:61:99:4b:54:e4:99:d1:89:
         67:30:e0:12:40:8e:ff:18:9f:e1:02:37:4b:8d:4d:00:8a:fa:
         8a:4b:96:73:84:df:cc:98:21:b6:ce:f9:88:60:51:fc:ab:fb:
         f8:78:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:17 2025 by rpki-client