Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa
File:                     003d76f7-bbc4-3be9-b47c-533d41cce145.roa (raw, json)
Hash identifier:          z4W+yYPgCWbmPFSnWHI17harPHQTmCn5c23Hqt3fN4k=
Subject key identifier:   C0:04:BF:A1:B9:6E:5A:CB:FF:D8:57:60:8B:13:0C:F3:98:52:BA:50
Certificate issuer:       /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial:       010D0C9F4328584A2E8EB510FC163879EBE32880
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa
Signing time:             Fri 13 Jun 2025 21:55:29 +0000
ROA not before:           Fri 13 Jun 2025 21:55:29 +0000
ROA not after:            Thu 11 Sep 2025 21:55:29 +0000
asID:                     393816
IP address blocks:        66.219.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:8e:b5:10:fc:16:38:79:eb:e3:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
        Validity
            Not Before: Jun 13 21:55:29 2025 GMT
            Not After : Sep 11 21:55:29 2025 GMT
        Subject: CN=faf6db8d-f5db-4684-836b-0750b497f07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:7d:b8:0b:ce:2f:ad:12:a9:d0:a1:31:cb:
                    ac:bd:ad:24:79:43:5a:d6:95:e5:2d:dd:30:90:80:
                    97:83:7d:ae:3f:e7:75:23:3c:c3:e8:7a:23:76:b3:
                    ee:72:0b:21:51:e0:e5:d2:81:4d:d2:b5:fe:06:08:
                    df:2b:09:b5:8a:d5:11:6d:9c:90:e1:a4:1f:85:8e:
                    10:c4:54:96:2d:c9:c7:58:fb:05:db:a2:6d:a7:2d:
                    9a:4c:ea:28:49:cc:ee:79:af:c3:cf:95:6b:d0:7e:
                    b7:da:a5:f2:80:f4:ef:c3:f2:fb:71:6f:d5:cb:b8:
                    87:fe:99:02:82:3f:f4:31:14:11:75:63:9d:29:22:
                    89:9a:0a:c1:c2:83:71:cf:ed:81:92:cc:b9:17:72:
                    17:4c:c0:da:3c:e3:5a:a8:81:11:e3:b7:09:5d:1a:
                    34:58:5c:66:84:18:7e:e2:0e:c0:17:ef:c3:89:f5:
                    66:a7:2b:a7:b2:49:7f:5c:55:56:75:93:ac:62:e9:
                    73:c4:15:d4:f9:a6:33:f4:74:9f:40:11:45:b8:64:
                    75:1b:6c:08:72:d6:84:01:c8:ce:81:b9:23:01:0d:
                    75:e8:e5:a7:d9:e1:b1:ba:ad:6f:20:a8:c0:5a:6d:
                    9b:21:74:33:77:77:ae:a0:5f:ae:af:b2:19:78:d6:
                    54:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:04:BF:A1:B9:6E:5A:CB:FF:D8:57:60:8B:13:0C:F3:98:52:BA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/003d76f7-bbc4-3be9-b47c-533d41cce145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:10:ca:7f:7b:0d:e4:99:25:38:c4:58:9c:2c:5a:50:8f:85:
         a4:d1:a2:25:4f:c8:58:71:23:3f:c6:ee:66:a5:c7:18:15:88:
         cf:28:60:b3:55:7f:9e:da:e6:ff:b5:be:20:f7:f4:3b:4f:49:
         22:c2:5f:9f:64:d9:ff:17:60:0a:be:22:33:5d:38:09:de:88:
         a8:b4:18:22:b2:4a:bc:9e:ef:b1:10:a5:da:47:65:5e:fe:7d:
         b0:8d:95:d1:0f:f5:98:c0:3f:1a:75:e8:47:bc:78:44:01:38:
         ce:61:6d:23:c9:8d:cf:fe:e5:8c:27:6d:ed:f8:33:e0:aa:bb:
         de:e0:ef:94:54:8a:95:00:6d:81:17:13:30:ed:69:c4:ef:74:
         7d:b2:5d:21:5b:85:be:ff:00:bc:c1:09:c2:cb:7c:a6:0a:fa:
         2e:b5:ab:43:04:12:f0:c0:d0:bf:65:c6:57:5b:87:c2:fd:fe:
         af:f4:bc:05:e3:77:86:45:94:0a:20:30:31:b7:ca:9a:aa:03:
         1d:90:3c:0a:81:0c:bc:28:a8:fa:07:e3:95:06:2b:51:1b:e5:
         59:81:5f:2a:53:04:6d:cb:3d:96:2d:69:d3:f6:0f:a9:9c:01:
         d8:ac:da:74:8a:58:72:65:18:1c:0f:3b:4a:f0:92:00:ec:e1:
         00:58:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:58:11 2025 by rpki-client