Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa
File:                     7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa (raw, json)
Hash identifier:          pBd7+NHf1HM3P8BmGvSNMKDvm784fYm5/q1z9rM+FXQ=
Subject key identifier:   29:C3:AD:D1:16:58:7B:20:C5:35:5B:66:6D:E2:DF:C1:36:92:8F:F1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16112940B3465536CECB1A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     19115
IP address blocks:        66.56.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:12:94:0b:34:65:53:6c:ec:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=62379932-734a-454f-8304-53c8c24707a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:64:35:b5:7b:24:3b:7b:d8:d3:0a:6d:e6:
                    23:15:8f:e2:23:3e:e4:ce:b2:4b:34:86:00:a9:0c:
                    80:56:2c:42:d6:1b:d1:f6:96:10:fe:73:bc:cc:11:
                    3e:e6:06:2a:53:c9:9d:42:99:10:d1:81:61:fa:38:
                    d9:64:46:be:ad:18:eb:7e:28:91:5d:68:d1:43:fa:
                    11:8c:07:1a:f4:af:40:5b:66:c3:04:fb:5d:54:a6:
                    1e:a4:e6:7a:2d:96:89:48:79:ea:b9:7a:c0:ff:28:
                    c3:db:da:e6:24:3b:8e:37:08:3d:08:0b:be:88:05:
                    71:d4:c1:4d:14:f5:53:5e:4b:46:ce:48:ba:06:d1:
                    6a:65:73:41:0f:59:12:5c:b8:90:c9:8c:10:61:f8:
                    ff:fe:ab:ba:0f:c3:bf:62:00:f6:50:71:da:53:38:
                    38:52:85:0c:a7:3a:b6:b5:51:6b:0f:f6:d4:78:d9:
                    a1:54:8c:b5:60:14:b1:e3:f0:ef:7e:90:dc:d4:c0:
                    09:ce:e9:f2:4d:a3:73:26:9d:8b:d0:3a:61:38:40:
                    71:35:d9:b6:db:32:72:9b:16:cd:61:c4:41:05:db:
                    55:f9:f3:e6:70:ad:3f:ee:6a:a6:9c:a5:6c:3d:0d:
                    d8:fd:a4:ce:35:ed:15:82:00:a6:a2:59:fe:e8:13:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:AD:D1:16:58:7B:20:C5:35:5B:66:6D:E2:DF:C1:36:92:8F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.56.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:82:cc:f7:1e:19:03:a4:a4:73:e9:bf:76:bf:e1:d1:f3:b3:
         74:92:35:70:c2:db:80:89:95:30:e4:81:b9:23:55:cd:98:37:
         6b:dc:a6:82:3b:8d:ef:25:93:3d:d3:f9:f3:ad:7c:7e:bb:e0:
         62:75:0d:2c:cf:09:15:1f:4d:6c:43:34:0c:22:91:ba:85:c1:
         cf:f2:5d:c6:c6:a9:51:5a:ec:e8:8b:ae:bb:82:d9:eb:c4:2b:
         54:0c:24:d7:03:c1:ce:8a:77:a5:09:aa:3c:1d:35:6a:52:91:
         40:ef:2b:7c:89:dc:2e:67:6e:ac:f6:34:91:88:76:29:f9:b2:
         72:b2:ab:cd:83:b3:ba:7d:f4:97:8c:0c:a8:4a:c1:0f:13:79:
         97:89:93:22:fe:6a:6c:ff:42:17:0c:9e:8d:e9:dd:71:5f:5a:
         80:e2:86:a8:cf:97:b9:82:70:ca:f7:e3:f1:4a:1a:45:c7:22:
         df:19:1f:3d:5c:4d:be:7e:c7:c5:f5:7b:81:80:03:50:28:b7:
         c8:27:9e:86:9a:8d:e8:c4:9d:5f:29:02:85:cd:3d:34:90:e0:
         1a:88:cf:1c:a4:09:33:79:cb:47:56:1e:2c:57:32:64:ec:4e:
         57:10:5b:76:9e:01:64:46:45:d3:52:98:19:93:85:5e:34:59:
         ec:27:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:19 2025 by rpki-client