Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa
File:                     a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa (raw, json)
Hash identifier:          0cfWAyVEt8nPcWqCXeT2bu5TOWY42U3e3ewbzxYUi/4=
Subject key identifier:   99:08:AF:E9:1E:77:C4:52:DC:A4:42:E5:77:86:89:E7:CF:D7:B4:5A
Certificate issuer:       /CN=2cf622f9-718a-4280-a116-72e2088c51e3
Certificate serial:       010D0C9F4328584A0C0570B69064A31E2E75C600
Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     394490
IP address blocks:        66.45.13.0/24 maxlen: 24
                          2620:dd:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:70:b6:90:64:a3:1e:2e:75:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b95eb701-3152-4d90-849f-5a65a5772f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:72:ab:6b:f4:9b:db:d7:93:1d:01:0b:3c:
                    03:f3:e0:fb:e3:78:35:ee:90:bf:ef:c8:20:4c:84:
                    5e:bf:73:80:75:01:78:bd:24:2f:ae:7e:90:c3:e7:
                    4f:d8:17:fb:38:23:68:5a:65:e9:35:76:77:51:26:
                    b7:d5:02:a3:7c:3e:9f:7e:87:75:1f:3a:6d:df:bd:
                    9e:36:cd:69:04:9f:50:d6:9e:e5:4f:2c:0a:ac:02:
                    0b:f6:6f:3b:97:66:92:31:2f:94:7c:a4:a0:66:20:
                    93:66:75:f5:d5:ec:d2:52:68:fd:b8:75:c7:e2:49:
                    75:fa:ab:2e:4e:e8:aa:17:22:af:97:0f:7a:97:b2:
                    88:0a:d6:8d:8e:a1:c1:79:2d:f0:29:3a:59:d0:8c:
                    94:af:91:d9:97:c3:25:97:e1:b1:31:ef:f5:12:db:
                    e7:d4:b8:f3:ec:45:e5:b3:9b:a6:0f:9c:24:2f:1e:
                    fc:cb:e1:cc:58:41:a8:ea:1d:cf:40:e6:4e:f8:00:
                    da:df:40:f2:c2:64:16:9a:d2:f9:e0:11:55:c5:aa:
                    97:b9:38:d0:64:b7:9d:96:91:65:d6:b2:4b:37:11:
                    ee:d9:ad:ad:5e:63:1d:22:5f:f4:29:fc:66:05:8d:
                    60:90:16:ff:a2:85:d7:a7:4d:d0:dc:f4:42:80:76:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:08:AF:E9:1E:77:C4:52:DC:A4:42:E5:77:86:89:E7:CF:D7:B4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl

            X509v3 Authority Key Identifier:
                keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.13.0/24
                IPv6:
                  2620:dd:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:95:b2:73:2d:c7:cd:dc:ca:fc:57:4c:08:1d:80:e1:6b:a0:
         2d:3c:04:ab:d6:40:43:af:3f:41:49:e1:f9:7c:18:08:81:05:
         8d:c7:72:27:a2:34:13:c0:99:b8:30:d8:8c:07:be:95:63:f0:
         95:8a:d4:20:23:02:51:a6:37:e5:06:d2:72:06:30:5a:a3:d6:
         cc:46:7d:02:82:c5:9d:11:e6:d3:db:91:dd:66:15:b1:68:b7:
         82:ae:5d:f1:d4:6d:09:08:9e:5f:a6:57:37:32:8a:d1:dd:7f:
         63:e9:b3:83:c1:72:9c:ac:63:ef:7d:04:42:79:d3:e9:bf:79:
         46:db:1b:8a:e7:da:7b:2f:f0:59:33:ff:49:73:4f:c9:f0:de:
         b2:3a:9c:24:3c:4b:4c:cd:41:45:12:7b:0d:11:54:0e:b7:1c:
         45:4b:36:e6:16:c8:b3:d5:36:e5:04:c2:de:bf:7e:d5:cc:1b:
         e2:3b:7a:78:55:29:5a:fe:d6:c9:1d:3c:6c:2c:54:b2:09:9f:
         43:af:93:bd:fa:26:16:8e:40:18:d4:f9:17:2f:a2:9b:83:08:
         41:7f:15:e4:df:68:a8:78:e9:de:4c:95:af:b0:cf:c1:4f:7d:
         57:8f:00:fb:90:66:69:c9:a4:43:4b:87:d0:48:f0:52:98:40:
         16:bc:2f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:18 2025 by rpki-client