Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa
File:                     66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa (raw, json)
Hash identifier:          tC31MuUjLj1mNr/yWab4deamAy9ChL6OvJ6IRpmb+jk=
Subject key identifier:   DD:65:A6:5A:39:8D:1C:30:8A:6D:7D:90:47:31:2E:1A:70:E3:90:C3
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F43285849D85F8B326DB5B273B4D02FC0
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        162.253.3.0/24 maxlen: 24
                          162.253.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8b:32:6d:b5:b2:73:b4:d0:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7db6fb6c-dccb-48c3-9e1d-ed13cd5f39dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:96:f4:42:29:06:23:df:b8:8e:d8:e2:33:
                    da:f2:d5:54:89:6a:48:6f:da:f6:36:71:22:62:13:
                    59:9c:85:ed:d8:5d:b8:47:8b:70:ca:a6:db:70:1c:
                    78:d3:44:e4:86:57:7c:cc:4e:3e:36:2f:d3:89:8e:
                    0f:2c:65:25:29:df:49:8e:12:56:bb:9e:65:3e:87:
                    fb:21:45:ab:34:eb:bd:4c:c8:96:10:0d:ae:0e:96:
                    43:12:ff:f0:6b:32:4d:1c:13:2f:f9:9e:8a:98:62:
                    52:90:38:16:91:59:42:9a:1d:62:32:88:b8:62:ee:
                    57:d0:fc:52:22:89:e2:d2:42:50:b5:d6:05:24:86:
                    ad:66:87:cc:67:69:d0:c7:5b:7a:1f:e5:3b:08:2d:
                    ef:fa:cd:c0:a9:9d:f0:27:3d:d1:3b:28:33:3b:92:
                    e2:2b:23:b8:10:05:53:c1:a9:48:3f:2d:df:2b:7e:
                    38:cc:5f:d4:e5:16:e3:60:6e:77:11:79:19:16:c7:
                    d3:d2:b7:5a:da:e5:6a:49:be:91:84:6a:e4:55:d6:
                    d6:0b:2e:12:c0:7a:09:e1:b1:53:d5:8f:42:ec:d0:
                    3e:ca:55:2d:92:51:97:17:be:67:d1:c4:dc:9d:d9:
                    9d:7b:47:f7:cd:bb:b4:f7:a8:6c:0d:64:5d:23:78:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:65:A6:5A:39:8D:1C:30:8A:6D:7D:90:47:31:2E:1A:70:E3:90:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.3.0-162.253.4.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:b0:e2:85:82:a0:b5:ab:64:3a:fe:b7:f9:a8:06:e5:dc:
         46:cd:26:a4:4f:3b:29:7b:e4:78:1e:b2:0e:c9:46:2b:33:28:
         6e:f9:83:5a:95:09:64:9e:10:54:e4:08:8b:c0:32:49:b3:d4:
         64:06:7a:4c:65:57:ea:ce:14:38:75:a3:82:38:e5:00:9a:a0:
         17:93:31:ff:f4:6f:80:43:93:93:4d:ef:2f:11:c7:c8:27:73:
         89:26:b3:cd:19:50:39:2b:7c:31:3c:e0:80:13:ee:0b:08:c1:
         a4:b9:d2:0d:9d:01:7f:25:5e:a7:a5:6d:9a:8b:63:48:17:c3:
         89:66:23:d2:28:ef:ee:d8:a6:01:e7:27:03:d4:7a:40:c1:24:
         99:cf:5a:32:74:26:45:17:7c:e9:a9:ca:ec:97:2f:97:6e:40:
         23:88:21:b6:82:9b:e3:5a:f6:66:25:a5:06:3f:e3:1d:fc:7c:
         ec:1f:51:c3:3c:52:3b:20:d2:a0:77:4d:37:11:91:ed:d9:97:
         38:53:f3:d1:80:2d:8d:c8:85:a9:c0:e1:20:78:00:3e:c7:03:
         b1:eb:6d:7d:10:97:d2:dc:88:9f:3d:c9:35:1a:9d:86:c2:63:
         1a:55:a6:f2:74:56:96:cd:c9:d8:3a:b7:94:21:91:4a:52:8f:
         96:fb:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:01 2025 by rpki-client