Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa
File:                     2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa (raw, json)
Hash identifier:          tK/+o8SmF94sOhKxllpgqlrx+eF6LN85sA/M/zvPzCI=
Subject key identifier:   55:1F:40:78:88:FB:03:22:AC:34:71:99:BE:5C:BF:C5:3E:43:41:9E
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F43285849B14A0F10C75C6BF0BBD00800
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     401199
IP address blocks:        66.163.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0f:10:c7:5c:6b:f0:bb:d0:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=c2b5f4b1-5571-4cd1-ae15-fea24fab3aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:6c:16:28:b2:a1:fb:9b:8a:10:69:99:6f:
                    a4:33:da:65:6e:c5:64:bd:7f:05:58:e9:87:0f:b3:
                    8c:6f:20:c3:f8:65:89:3b:b5:b5:3c:98:a2:e7:c2:
                    40:c8:27:3c:ed:b3:f2:5a:ba:46:10:1b:e5:15:68:
                    70:64:1d:4f:0c:f4:d8:20:a5:eb:7a:fc:d9:e3:d2:
                    63:bf:76:44:f1:d8:2f:e8:4c:48:f6:13:59:85:a9:
                    5b:2c:07:cf:81:b7:bf:e3:75:6c:ff:39:ba:58:75:
                    b1:45:b8:d6:9a:65:3a:dd:cf:76:41:36:19:a3:71:
                    20:30:bf:66:72:16:d2:1a:51:37:e1:5a:ae:7e:dd:
                    0e:60:fe:59:36:79:21:8e:a2:76:db:4e:09:e8:c8:
                    64:8f:5c:16:cd:9d:d6:bc:57:bd:2c:24:16:4d:4c:
                    27:c3:98:ab:26:0f:da:93:60:6d:bf:af:c3:1e:75:
                    95:da:1c:03:9c:b2:e2:10:fc:59:41:43:1d:1d:2a:
                    5a:99:71:64:83:2c:dc:e6:8c:4d:bb:2c:c4:a3:43:
                    eb:41:c1:9e:3f:23:03:e3:7f:24:dd:ca:9f:f7:16:
                    ed:18:21:2e:df:f7:5d:86:2e:c5:62:3f:43:49:4f:
                    0f:59:ea:e5:6b:47:c4:58:91:8c:ab:ae:26:1e:3b:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:40:78:88:FB:03:22:AC:34:71:99:BE:5C:BF:C5:3E:43:41:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7f:b5:e8:01:a1:ac:1b:98:79:f0:f1:4b:a7:47:76:60:8e:
         41:32:06:70:46:43:2f:65:4e:0e:37:a3:92:29:29:13:c3:5b:
         74:9e:aa:90:26:cf:22:f9:35:7e:03:94:37:65:23:01:c2:fd:
         be:5d:df:92:f4:49:64:69:44:48:36:7d:c0:dc:39:71:3c:27:
         0f:8d:96:0b:b9:79:08:99:97:29:74:81:c6:ee:39:f5:ea:9a:
         60:0f:08:fa:df:e0:95:5d:e7:f2:7c:d2:81:1d:60:53:5f:8d:
         e0:93:1a:c1:7e:8d:9e:26:aa:a0:66:67:ef:7e:3d:e4:62:5c:
         5d:86:60:a0:d2:36:ec:d2:fc:a3:c0:1e:cf:f4:d9:f4:74:b1:
         78:51:58:26:30:b0:b6:c4:b0:fb:b3:1e:30:aa:c2:8a:87:0f:
         5d:b8:2c:6f:aa:ab:0e:7d:a7:58:18:df:b2:2c:d6:7a:3d:a3:
         08:2c:f1:f3:78:92:6c:d5:7a:01:65:d3:3d:2b:9b:6b:3c:bd:
         f8:5d:08:2c:a8:c2:a0:1c:1e:74:75:02:42:63:5d:0e:c3:de:
         bb:3e:80:a7:2b:1a:ba:ee:01:75:ba:17:7c:2c:d7:20:dd:81:
         8d:77:fd:c4:a6:30:cd:ef:85:f3:ba:ff:72:a1:2c:c6:64:30:
         e3:7c:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:48:42 2025 by rpki-client