Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/8bf441d6-22ed-3313-ba83-d19e61b48deb.roa
File:                     8bf441d6-22ed-3313-ba83-d19e61b48deb.roa (raw, json)
Hash identifier:          WY2WrLywfBlfE/IFiSPmfjND+CKS2NDOdhJzUL1AbRA=
Subject key identifier:   09:D9:AC:22:F3:DA:B8:8B:0C:04:94:FC:C7:8A:5C:D9:BC:EE:3D:FE
Certificate issuer:       /CN=607fb4c7-9b54-4d7e-9099-986be3553d20
Certificate serial:       010D0C9F4328584A9FFBAD3505366CACB2CBF400
Authority key identifier: 67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/8bf441d6-22ed-3313-ba83-d19e61b48deb.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     54549
IP address blocks:        66.223.104.0/22 maxlen: 24
                          2606:ff40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ad:35:05:36:6c:ac:b2:cb:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607fb4c7-9b54-4d7e-9099-986be3553d20
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=dedebc45-e888-4f5c-97c6-5daf721f6f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:86:12:dc:37:f3:c9:85:e5:1b:22:e6:8b:
                    3f:0f:fb:f1:c2:8a:e6:75:d4:9a:62:da:13:15:65:
                    a5:73:0b:50:32:8f:8c:2f:b3:64:0e:87:45:d4:0c:
                    a8:70:9c:b1:29:46:d1:c6:3d:ff:bd:e7:2d:a0:41:
                    dd:5a:8e:f3:87:4f:86:82:cf:bd:ec:34:6f:ce:69:
                    b4:8f:9d:9d:a3:4e:32:e9:d9:fa:e9:00:ba:f3:d5:
                    08:7f:4e:48:9c:15:57:d8:49:a3:05:1b:42:e1:40:
                    15:2a:0e:f3:c7:05:21:cb:55:c2:cd:92:62:1c:c8:
                    10:77:01:4c:6c:3e:86:0a:99:5e:62:ad:87:79:3e:
                    55:ba:cb:c4:24:0d:dc:6b:40:8d:47:48:9e:20:53:
                    f4:16:41:a7:61:12:e3:2c:32:67:18:04:a6:07:6b:
                    95:3a:ba:f7:f9:75:ba:1e:bf:5c:46:81:25:09:63:
                    72:12:83:92:40:92:e5:fa:a3:19:0d:cd:0d:83:b7:
                    fe:76:45:c5:6e:46:53:42:dc:35:56:e2:38:37:1c:
                    c2:60:8b:a7:6e:d7:62:af:0c:ad:f2:00:33:4e:ca:
                    f5:ad:28:e8:27:89:c9:02:4c:6f:76:6d:fa:ed:70:
                    c5:6b:77:bd:9c:ad:86:04:8a:87:6b:24:21:50:0a:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:AC:22:F3:DA:B8:8B:0C:04:94:FC:C7:8A:5C:D9:BC:EE:3D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/8bf441d6-22ed-3313-ba83-d19e61b48deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20/607fb4c7-9b54-4d7e-9099-986be3553d20.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BE:41:56:11:B2:6C:50:E2:36:B0:F1:A2:97:38:EB:52:E4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/607fb4c7-9b54-4d7e-9099-986be3553d20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.104.0/22
                IPv6:
                  2606:ff40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:5b:f7:a0:ea:70:4e:78:c0:71:46:52:ff:3c:ca:00:16:
         09:08:e6:2d:f0:34:72:15:0c:ec:f7:05:2f:e2:34:5c:4c:aa:
         1f:57:3c:e9:9c:80:08:d0:3e:a3:7d:fe:74:b7:a5:db:94:22:
         03:0b:14:30:ae:4a:49:0f:5d:9e:33:46:59:e9:a2:e6:a4:ac:
         d0:6c:0a:19:bf:11:c4:5e:00:f8:47:a3:c1:92:55:c0:3d:8e:
         dd:88:0d:f7:ad:e5:66:7c:c8:f5:12:4b:d4:76:78:0e:06:24:
         8a:94:12:98:72:b0:12:27:d1:eb:70:b3:8c:6a:1a:7e:91:f9:
         3c:c8:f0:81:33:46:ca:fc:ab:35:14:33:df:9d:6d:fb:0c:4f:
         59:95:1a:27:60:19:46:70:91:9c:31:08:f2:86:a9:89:58:3c:
         b9:06:43:ec:b2:3a:6f:80:49:e5:56:a3:be:d5:c1:3c:0a:07:
         a4:78:3a:64:e0:b0:26:05:73:7e:1f:70:f2:ae:b8:2e:b0:23:
         d3:69:1f:65:59:97:02:b5:d5:c9:6e:5f:f2:c5:c3:e0:30:4b:
         42:fd:38:5c:b3:b3:c2:fc:04:27:45:a4:2a:26:9e:4d:d7:9a:
         ea:9e:23:12:6e:f8:51:19:c4:e5:d7:fc:33:42:3a:da:2c:1c:
         fd:2b:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:45:49 2025 by rpki-client