Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
File:                     70b491ba-5507-36ed-97d1-864053a80150.roa (raw, json)
Hash identifier:          TcScvW/DTqEyx9mNGDxAnSL3vrKHx1Okn4bgu63ZwBc=
Subject key identifier:   7E:C3:BA:E5:09:71:56:5F:A8:40:04:5B:91:9A:7D:7C:82:17:F6:EA
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584A7A4B4DBA1B7563E7DDEACB80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     394437
IP address blocks:        66.249.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4d:ba:1b:75:63:e7:dd:ea:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=75a459b6-275b-4afe-861b-1e7fd54073df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:8e:9f:c2:6d:a3:99:7a:a9:47:53:c2:89:
                    1b:bd:b7:38:f6:70:20:3d:ef:bf:a1:ce:27:d0:e5:
                    5d:e8:25:45:6c:ef:c9:ea:dd:3d:d2:d4:d5:54:b3:
                    82:f2:c0:49:c6:54:ca:29:40:3c:bb:d6:5e:e4:f4:
                    f7:bc:c2:14:95:a6:4e:cd:f0:a5:25:4d:96:13:e9:
                    a5:bc:29:ed:a5:8c:73:d6:56:cb:06:e3:2b:97:c6:
                    01:c3:3e:b0:35:ad:29:03:7f:c8:3c:6c:30:ba:66:
                    c3:11:56:e6:1c:60:66:30:29:62:a3:3c:b9:6e:04:
                    f7:64:5a:d1:fa:dd:2f:fa:82:d4:da:5e:ef:db:1a:
                    f1:be:bf:6f:c5:7c:75:16:9b:54:5a:32:ac:ed:72:
                    4b:42:75:1b:59:68:a6:5e:8c:23:55:b9:ea:18:35:
                    85:93:52:b3:be:24:3b:96:ff:bd:c8:9b:f0:68:52:
                    90:de:fd:de:44:be:4f:03:6b:a9:30:7d:b1:2e:86:
                    03:31:fc:6a:65:bb:16:e0:51:c8:ae:cc:6c:3f:be:
                    4b:1c:d1:c0:8e:76:1c:0b:0b:4e:5b:4f:35:af:c6:
                    f3:08:7a:41:db:fe:c2:cd:e3:35:0d:dd:e8:65:24:
                    6e:00:fe:34:52:bf:9b:f7:cd:6c:a1:87:69:e9:80:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C3:BA:E5:09:71:56:5F:A8:40:04:5B:91:9A:7D:7C:82:17:F6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:5f:9c:ae:30:24:a7:04:0a:ef:9c:b9:71:80:b9:b9:ce:2f:
         16:7c:41:19:44:8a:10:cc:b6:f6:55:43:90:37:ae:73:9a:0c:
         61:b4:56:9b:92:3b:0a:4a:f5:0a:e7:de:a3:0e:de:03:a8:74:
         2b:02:09:90:96:19:93:68:b6:22:a7:ba:d4:f3:1f:46:43:e1:
         58:23:63:9c:b9:51:ea:65:36:f0:f8:05:c4:0d:4e:72:a6:cd:
         d6:f9:57:e2:81:56:4d:3b:b2:c9:30:d1:2b:d5:70:bd:a1:74:
         f7:0b:6a:8e:5c:d9:c3:2f:80:fc:be:07:8f:6e:4a:1e:30:9b:
         c9:06:d3:44:e8:4c:b3:14:a9:f8:05:07:35:f3:04:b6:7d:86:
         a3:c2:10:ce:7f:d0:29:81:1c:2c:d4:34:82:47:6a:82:38:3a:
         3e:8b:7e:6d:a7:20:ed:14:b8:08:26:f9:41:b7:3f:51:1b:16:
         0c:49:50:80:b3:3f:31:05:0a:e9:9f:db:e5:28:64:b2:8c:b5:
         18:05:9d:80:13:a9:d5:2e:1b:c7:8e:2f:d5:c9:31:64:77:e6:
         96:e1:cb:b6:92:c5:32:bc:bf:c9:5b:20:62:d2:70:37:e1:3b:
         15:37:90:66:f0:4e:b3:b0:16:ec:12:2e:f9:25:5e:40:9f:ec:
         87:d3:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:13 2025 by rpki-client