Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa
File:                     0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa (raw, json)
Hash identifier:          WYaqpdeStJWQLNE1pvsb1UB7xSZR7Y8VZhXuw1kbVSo=
Subject key identifier:   A5:46:15:DD:6E:63:14:58:EA:C8:E7:99:4F:B9:51:37:60:AE:3F:7C
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F43285849FCAA732B391EF0CF58EF7940
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        66.179.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:73:2b:39:1e:f0:cf:58:ef:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=e02891d0-8e80-41d1-b431-9a004ef57d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:3e:18:ee:79:47:fe:14:bf:64:bb:bb:ad:
                    77:1b:76:c0:31:e6:84:ce:7b:7e:8e:9b:cb:04:1e:
                    66:a7:03:80:73:d8:d1:48:9e:08:5d:a2:54:9e:39:
                    fd:69:11:86:8f:ca:ee:ed:37:d2:2f:03:c1:a9:5b:
                    36:16:fb:77:c3:56:76:68:7b:82:4b:04:66:1a:e6:
                    e0:e3:c2:cd:03:7e:d9:51:cc:77:7e:6b:82:52:ae:
                    2d:f3:f4:44:31:c4:4a:09:c6:0f:47:79:41:56:7e:
                    f5:91:ca:db:e8:60:48:df:97:4e:37:a6:fe:13:0f:
                    85:31:01:0c:73:3c:b9:96:3b:de:cf:f3:65:ed:c0:
                    c2:15:f6:54:66:c9:5c:af:f4:23:17:a9:5e:69:ee:
                    6e:0d:c3:66:1e:23:d5:1a:f2:b7:cc:e4:f9:5b:25:
                    f9:8e:b0:f0:d1:f8:19:12:10:73:3c:51:5e:da:ba:
                    cd:0d:ea:82:05:ad:95:0d:1d:b3:8d:6e:4e:79:26:
                    2c:27:02:d9:81:40:28:d8:1a:b7:4d:fb:ad:f8:b8:
                    81:42:ac:af:ed:67:dc:a0:a9:69:60:50:0c:0e:14:
                    d7:e9:db:55:ab:ff:f1:f2:52:71:ee:23:87:3f:26:
                    70:9f:55:da:6b:3e:ed:43:03:2f:38:8d:95:a2:49:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:46:15:DD:6E:63:14:58:EA:C8:E7:99:4F:B9:51:37:60:AE:3F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:e0:0d:2c:ad:5e:ad:35:b7:79:2e:28:d3:58:50:af:fa:
         28:00:7c:b4:48:71:9d:6c:b2:95:f8:f9:11:de:b2:be:1a:89:
         18:32:d5:a6:02:74:f4:d7:15:77:e6:48:65:ee:9a:bb:10:e2:
         00:7d:5f:23:7f:29:ff:44:d0:b9:73:cc:eb:f0:60:6b:6f:2c:
         bf:2d:97:b5:5c:28:7d:bb:ff:cf:af:96:ab:00:fd:81:13:91:
         4f:f3:f2:e2:64:05:44:4e:4f:6f:2b:78:65:7b:2d:19:e0:df:
         21:b9:b3:27:c8:28:f8:12:da:48:2d:5c:68:92:05:c5:0f:1e:
         0e:9d:9d:0c:4b:f7:78:e7:e9:93:92:d4:19:bf:75:69:fe:b1:
         8a:a5:cd:7f:36:78:10:a3:78:09:c5:50:3f:a4:ed:17:e1:21:
         5e:f7:c0:39:4d:86:b3:51:7c:a2:94:fd:81:9f:0d:f1:1a:39:
         1f:dc:f9:6e:87:57:56:e4:ae:49:9b:31:33:1f:04:c0:63:f4:
         c3:1a:4b:02:ed:0f:60:76:b4:43:42:1d:01:be:68:e4:69:23:
         02:7f:cf:4d:e0:90:5a:07:75:03:5b:ef:58:b9:59:52:fa:7a:
         43:42:32:cf:01:b5:2b:8d:41:87:1c:87:b0:1f:57:39:73:c7:
         8c:15:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:45:20 2025 by rpki-client