Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa
File:                     975ebd21-00c4-32f7-baf2-53fa6ef43997.roa (raw, json)
Hash identifier:          MVeL6EWgkOq0WjuzvB4SqdPYGrk4Y/2Aeg8zawhvYyU=
Subject key identifier:   7E:C0:3A:38:FA:0D:2B:61:6A:14:99:57:A2:DF:37:FE:DC:70:67:2C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A8670CF5CD36D6B23F640
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     36222
IP address blocks:        66.62.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:86:70:cf:5c:d3:6d:6b:23:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=1870482f-c0d9-46fd-bace-710ad3d828bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:3a:3e:84:96:65:c7:05:86:0c:8c:3a:d3:
                    e4:4f:60:4f:2c:51:56:53:c4:df:02:65:3f:b9:72:
                    0a:0e:1b:e8:96:7b:1d:7d:52:80:a5:16:03:33:ed:
                    dd:df:f7:75:ca:ba:b8:54:31:81:c1:e3:64:d2:e7:
                    a8:e9:c1:f8:9b:99:28:74:1d:80:f5:43:31:be:ac:
                    8c:75:77:2d:a0:f4:e6:82:c9:d1:5c:59:bb:9a:ae:
                    42:f6:bb:ac:ff:38:de:dd:c8:f8:1e:ee:b5:88:11:
                    67:67:48:32:8d:d5:65:23:fb:29:ca:de:54:42:47:
                    00:98:01:5c:fd:1b:bc:00:e5:ea:f4:fb:46:d4:a6:
                    87:18:58:f8:3b:bf:b5:89:6d:cf:9b:de:b9:5f:28:
                    94:58:5f:ef:5a:b2:be:9a:e2:5a:9f:13:ef:e5:73:
                    1c:5b:c6:3c:6a:2d:61:18:02:5e:45:9b:d7:fe:55:
                    d5:79:48:be:9f:e3:24:c8:b0:c2:88:59:26:fd:bf:
                    6c:cf:da:a8:cb:7d:ff:2f:8a:04:c9:dd:82:74:fa:
                    83:4f:49:a1:70:d4:b6:73:27:42:fb:a7:55:f9:ba:
                    2c:63:2c:1c:22:b4:7e:08:a5:18:e3:39:a6:d6:00:
                    0b:e0:3f:f9:2e:db:64:ce:67:00:af:ff:41:22:4f:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:3A:38:FA:0D:2B:61:6A:14:99:57:A2:DF:37:FE:DC:70:67:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/975ebd21-00c4-32f7-baf2-53fa6ef43997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:36:f7:bd:b3:f1:bc:76:65:24:6e:c5:ab:2a:d6:59:89:68:
         df:04:c2:74:bf:d5:94:27:83:81:6a:9a:55:c4:33:1e:03:f8:
         c3:d0:11:87:2d:2d:50:66:eb:90:e4:f6:d7:93:48:2c:68:f3:
         48:cc:8f:19:04:ea:53:ec:10:ed:ef:c5:11:7f:cd:da:10:bd:
         52:2b:92:80:73:13:9f:b2:f0:2f:63:db:9d:2b:98:50:c3:50:
         be:d0:7d:80:82:f0:3c:79:0e:c0:49:b0:9b:60:51:00:6e:a5:
         b9:fa:0d:3e:4a:d0:b5:a6:e2:91:00:6f:e1:1f:37:e1:ab:f7:
         8b:94:aa:2f:6e:a9:66:01:72:e4:d4:e0:f9:f3:0c:a8:27:f0:
         53:a9:23:00:49:86:39:14:11:26:69:3a:ea:b5:03:97:60:ca:
         29:b0:6a:c5:7b:cd:57:7c:b1:90:45:a0:84:4b:e1:52:74:6c:
         a5:85:32:89:3f:67:e4:54:8a:bc:2f:ff:a1:46:5e:9d:c0:7c:
         b0:f3:4d:6f:42:cb:03:18:7b:14:e6:82:fa:06:27:22:4c:6f:
         87:66:99:26:bf:93:97:f5:94:83:06:d9:be:43:a9:e3:b3:67:
         9d:18:d9:12:59:f4:8f:d6:a0:dc:e4:0f:b0:13:a7:c4:04:fb:
         eb:96:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:41:33 2025 by rpki-client