Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa
File:                     507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa (raw, json)
Hash identifier:          9AFTBFE6AekCZ4R+VcqU4eMaELVSHJevvOfoAMHHGnY=
Subject key identifier:   A2:74:21:C1:EF:F9:FB:B5:BA:9C:A0:CD:A5:99:FF:BC:AA:38:D3:A3
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F432858498769BA7D987CDD1F67583180
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     10753
IP address blocks:        66.128.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ba:7d:98:7c:dd:1f:67:58:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=944d6aaf-e5e6-442b-9310-0cb19fa7dc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:50:12:5a:1b:49:bc:e7:9e:ff:46:71:4b:
                    5f:c1:ff:e8:df:39:28:b1:52:d5:9b:67:84:25:2a:
                    72:76:7b:43:1d:a2:00:d5:32:f5:46:72:d7:f4:6a:
                    5a:63:32:57:2f:9c:2d:50:61:fe:2c:93:51:20:5b:
                    74:31:18:4f:36:96:81:a4:db:51:e1:e2:c1:e5:64:
                    c1:7e:7f:42:e3:7b:96:22:8c:8a:f6:18:c2:a6:b5:
                    c6:b9:2b:57:1b:0b:a7:ae:50:6b:9b:8f:02:0d:bd:
                    f2:f8:0c:3d:47:ac:c7:75:54:1a:3e:1b:a6:5c:2c:
                    eb:43:0a:90:09:58:6c:12:08:3e:0b:cb:4d:c2:64:
                    7a:ff:6c:b1:02:33:49:7b:aa:5e:ef:2c:57:65:f4:
                    48:3d:ab:c2:7a:cd:a5:a7:63:30:47:0f:0f:88:3f:
                    13:13:aa:4d:f3:48:b1:e0:62:46:06:11:be:e2:3e:
                    ac:0c:62:17:d4:0c:74:41:9e:76:38:4c:4d:2b:4c:
                    25:48:8f:8d:48:4e:9f:8a:f9:85:d4:49:a1:ac:53:
                    f0:37:46:92:9c:83:09:cc:3a:55:3b:af:9a:c2:06:
                    3b:91:e9:1b:b4:68:50:81:9d:c9:0c:58:e5:90:49:
                    c8:cb:bd:0f:bc:e0:31:dd:21:90:0c:ca:57:b5:ea:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:21:C1:EF:F9:FB:B5:BA:9C:A0:CD:A5:99:FF:BC:AA:38:D3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:e4:46:12:93:4c:98:60:83:02:c7:3e:56:70:68:1a:da:
         9c:71:ee:fb:b2:98:40:87:85:d8:f6:53:1f:89:fc:7f:2d:30:
         b9:4e:23:bb:ba:db:5c:ae:03:aa:fa:31:f8:27:c0:64:c4:e0:
         e4:d8:b8:b5:03:9a:4a:23:e4:41:50:4c:a2:63:0a:dc:8d:a1:
         ec:ec:50:ca:55:de:b1:0f:20:18:8e:d8:cb:4e:45:5c:d4:bd:
         3a:e4:bf:0b:ea:d8:96:ff:f7:3f:3a:5e:78:2c:7a:4b:4e:dd:
         f9:e4:d5:55:4b:67:6c:6b:d1:e1:4a:24:12:cc:d5:0d:c9:b1:
         eb:23:49:63:29:4f:f2:9a:a4:9e:30:6b:ab:e1:4a:65:07:39:
         13:a9:0f:f3:db:36:d6:64:a7:69:ca:fe:c5:de:fd:6c:58:73:
         86:37:d8:c7:cd:86:38:5d:97:ee:4d:e2:f2:94:ce:ca:fa:ca:
         d5:a1:60:4c:9d:a6:7a:64:9b:96:9d:ff:fd:6e:73:86:66:96:
         25:e8:16:93:17:9e:72:e2:e8:7e:cd:23:89:ab:f2:8e:4d:d8:
         8e:c6:87:d3:24:e0:d6:db:93:2f:c5:04:dc:23:0b:a8:12:89:
         23:43:82:d2:04:bd:cb:c6:32:4e:07:94:e3:ea:a3:5b:96:1b:
         ef:5f:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:12:51 2025 by rpki-client