Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa
File:                     fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa (raw, json)
Hash identifier:          gVEv0E52F2v/2DbIQIVbcxvMBvrUIq5rTKpvHWOZVCM=
Subject key identifier:   B0:C2:19:F3:B2:A8:81:94:1D:D1:79:18:A0:7A:AE:C9:1C:D8:CD:74
Certificate issuer:       /CN=5012fdc3-55c8-4825-af14-cdf211570229
Certificate serial:       010D0C9F4328584A89A6222E8268C99EC8354C00
Authority key identifier: B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     32697
IP address blocks:        66.132.145.0/24 maxlen: 24
                          2607:84c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:22:2e:82:68:c9:9e:c8:35:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5012fdc3-55c8-4825-af14-cdf211570229
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=31d08fe2-c419-491b-88d5-6d1728a360ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:9d:1e:82:99:92:52:e3:15:71:b0:51:f2:
                    87:d2:04:b0:6e:ab:7b:09:40:68:9e:55:4c:65:4c:
                    1d:af:f9:74:c4:9a:94:50:e1:50:13:c6:2e:52:10:
                    d5:0e:a0:e4:dc:a2:4a:f3:c7:14:96:20:d9:72:3a:
                    39:42:f5:d1:e6:89:f7:27:ff:cb:20:80:c4:49:e2:
                    83:78:53:3c:1a:3c:c5:d6:ad:de:9f:66:94:14:c1:
                    90:88:21:c3:41:62:a2:f8:6b:9a:ce:73:6e:e9:4e:
                    ce:93:81:5f:98:b7:09:a6:06:5a:3f:61:be:7a:8e:
                    65:dc:09:83:2a:3a:f9:3c:c7:cc:91:83:24:96:e0:
                    5a:e8:99:cd:6e:61:1f:3b:5c:66:3c:04:f1:cb:e9:
                    31:68:21:32:f0:9b:35:3e:a5:e6:7d:60:9b:21:cf:
                    60:da:5f:22:30:6d:c6:2e:dd:d0:17:bb:6d:23:d0:
                    0d:ee:c5:16:11:5c:4a:69:c5:db:63:51:b3:a2:fb:
                    51:48:85:50:69:cd:08:e2:1e:23:a2:c7:a0:1f:6e:
                    fa:ff:aa:7d:60:84:6e:22:c6:93:ee:58:37:32:82:
                    4e:71:25:c0:4b:92:c7:39:25:b3:ca:a5:d8:3e:c5:
                    c1:e2:35:53:e2:f1:51:51:21:ca:80:f3:3e:ad:fb:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C2:19:F3:B2:A8:81:94:1D:D1:79:18:A0:7A:AE:C9:1C:D8:CD:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.145.0/24
                IPv6:
                  2607:84c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:89:63:26:da:fa:4f:15:d6:40:ba:1b:f1:b7:db:5e:b6:43:
         b2:da:0b:fe:8b:08:3e:26:e9:7b:bc:32:44:a4:e5:12:cf:34:
         f0:6a:c1:05:e2:7f:2d:f4:1c:8b:6d:0f:41:c4:54:c5:0a:ba:
         60:ff:af:e9:7e:8f:32:89:c1:ea:58:7e:56:49:87:62:7a:a1:
         e4:c9:53:7f:c9:2c:f1:86:46:55:95:f0:45:6f:86:44:03:45:
         d2:ac:1c:7d:b6:f0:95:ed:ac:9e:24:73:c5:6c:45:ef:6f:50:
         0d:9e:17:8c:57:72:e9:73:78:b8:cf:c5:c3:f0:8c:50:14:2b:
         d7:9e:fa:45:e1:c3:6e:4a:29:f1:aa:5a:6d:64:f0:38:8a:60:
         a3:4c:aa:a8:10:d0:16:60:5d:0f:c9:8b:e0:11:ee:5b:64:a9:
         11:4f:fc:4e:17:7a:3d:99:17:db:d9:9e:26:e9:fe:14:90:6a:
         60:84:37:21:c5:ab:2f:a4:00:3c:18:d6:9b:23:4c:72:40:c3:
         5b:f5:40:ef:ab:3c:ae:7f:9e:ac:3d:b7:03:f9:35:ee:34:9f:
         c0:f3:ea:54:10:ea:97:1a:11:82:6e:59:fb:fe:8a:7a:84:ac:
         67:1e:dd:88:12:b3:21:5e:1c:ed:40:c6:5a:84:8e:e8:c4:b3:
         fa:b2:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:03 2025 by rpki-client