Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81277d99-b848-3bb8-becc-88ad19483184.roa
File:                     81277d99-b848-3bb8-becc-88ad19483184.roa (raw, json)
Hash identifier:          bpyCW8nJ6VbZyTDue8ZEi3QzhlzfaL7rLNCrE2SphOE=
Subject key identifier:   54:D5:58:7D:97:4E:0D:4D:4B:20:1D:01:0E:AC:F0:25:2D:F5:C0:36
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849ABB4938B40901433330DBF40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81277d99-b848-3bb8-becc-88ad19483184.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        75.117.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:93:8b:40:90:14:33:33:0d:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=ee98123f-5b30-4483-b158-6db128aa5339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:5b:b5:dd:b8:40:05:ee:fa:e8:b9:4d:85:
                    7d:4d:72:bf:fe:8e:b0:65:25:d8:3c:4b:40:44:fc:
                    52:5a:5d:93:23:29:a6:f3:44:6d:f1:b7:72:6e:7c:
                    24:4c:76:38:ab:a1:51:4d:ea:cf:68:4c:7c:5b:32:
                    f0:3f:d9:e9:38:7e:25:db:11:44:2d:04:a0:da:da:
                    28:5d:ef:64:e7:da:9c:96:e4:9d:47:f1:75:a0:bb:
                    f8:3b:9d:c9:27:83:0f:53:40:4f:76:59:eb:5b:bb:
                    ce:6f:ca:47:50:ec:83:9a:5e:2f:91:28:48:31:44:
                    1c:20:ff:ec:76:c7:50:ba:47:d8:ab:49:06:ab:56:
                    e2:ad:1a:fb:e6:cb:eb:f6:0a:4f:0a:cc:fe:a7:ac:
                    69:6c:75:7d:56:d4:55:20:76:87:ba:b4:9d:40:d8:
                    3e:1e:8c:cc:a5:fb:ef:1a:dd:51:53:5a:fd:64:3b:
                    29:56:70:4e:e3:aa:ea:a0:07:cb:f4:0e:86:c7:28:
                    fb:04:89:54:f7:9d:54:9f:d0:4d:f9:8e:aa:90:cc:
                    e4:7b:a7:10:44:8c:a0:20:61:45:2b:7e:88:84:37:
                    ca:88:e8:18:36:ee:37:78:48:b1:25:c9:3f:86:04:
                    f5:90:a3:7e:ae:47:98:2d:01:98:03:18:d9:36:d9:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:58:7D:97:4E:0D:4D:4B:20:1D:01:0E:AC:F0:25:2D:F5:C0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81277d99-b848-3bb8-becc-88ad19483184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d1:ba:59:96:a4:17:5e:b9:a5:21:56:6e:b9:11:e5:c3:0c:
         e9:67:9b:8f:5b:1c:e2:bf:2c:af:17:40:00:d3:4d:ba:ee:c7:
         10:2b:44:2e:8b:2b:73:91:39:af:f7:a8:8a:f5:05:36:91:e8:
         13:59:ed:3e:17:be:81:92:9b:a3:67:1d:8d:fd:3b:b0:61:ac:
         93:82:8b:de:7f:13:9f:76:d3:ea:15:50:43:99:b1:b2:c4:1e:
         ef:cf:09:ff:3d:52:92:e7:40:c0:9a:da:b0:6a:4a:a4:cd:31:
         94:34:28:89:1c:78:f0:2a:25:d5:68:5f:af:18:f8:0d:65:f9:
         11:e2:a9:8d:a6:06:2d:70:75:01:a1:9d:18:1a:db:58:2d:c9:
         08:49:a3:48:a9:20:0e:31:bc:06:3f:f1:0b:67:bd:3e:d0:03:
         1c:9f:90:5e:5c:b3:58:df:77:e6:72:29:f8:dd:90:47:4a:70:
         50:3e:73:85:2e:04:37:ce:6f:f8:c9:f5:fd:e3:f1:bb:79:87:
         31:96:95:d0:b0:d6:7e:65:ae:3f:d8:c1:f6:e2:9a:3b:a7:4e:
         85:39:4a:6a:05:96:3b:b5:0e:1b:91:24:2c:93:fe:c7:09:5e:
         ff:03:e4:06:65:99:57:80:06:9a:d5:90:c4:09:75:e9:6e:80:
         ac:fb:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:46:32 2025 by rpki-client