Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/aea5eec7-cdaf-354f-833c-b85e9cb53ba7.roa
File:                     aea5eec7-cdaf-354f-833c-b85e9cb53ba7.roa (raw, json)
Hash identifier:          xhP/OuvTZyh74XnCFawxY8R4B69EhJ7Fxz8p7x+S5Y8=
Subject key identifier:   4D:53:3D:D8:C7:C3:02:96:0C:DF:D7:2A:0C:89:92:98:E9:C8:32:96
Certificate issuer:       /CN=66049fc9-3d05-426a-98ee-53b139a32165
Certificate serial:       010D0C9F4328584ABD4B7E44358D8C7A6524D280
Authority key identifier: CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/aea5eec7-cdaf-354f-833c-b85e9cb53ba7.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        207.45.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:7e:44:35:8d:8c:7a:65:24:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66049fc9-3d05-426a-98ee-53b139a32165
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=ffb34a02-5b58-4202-8511-af4dbda083bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:52:dc:a9:14:2d:17:ff:28:c3:fe:b1:92:
                    cc:3a:0b:30:a4:87:72:89:11:d4:61:fb:b3:d4:83:
                    4b:35:50:59:73:79:dc:bd:db:31:b0:59:91:1f:f7:
                    69:49:b7:ae:b9:3d:3a:5d:ec:ef:61:14:57:14:37:
                    4a:20:43:8f:df:ac:8b:02:d4:68:d1:92:ff:2e:00:
                    7f:89:2c:9d:aa:c0:7e:fe:d9:c5:20:fe:3b:29:f5:
                    ac:60:b4:37:ec:5d:0b:94:88:4a:bb:d3:a2:7d:b1:
                    e8:96:1e:56:58:d9:fb:70:95:64:a1:c5:ba:48:72:
                    52:49:ed:ea:d3:b6:90:90:20:5e:ef:5d:ed:cc:e1:
                    d5:80:8f:48:60:09:22:82:e3:87:45:2b:26:cd:77:
                    03:12:0a:01:64:ad:dc:02:1f:84:9f:52:f1:28:1a:
                    3e:dc:77:39:3f:09:fa:bd:d3:51:ea:0f:e7:ff:07:
                    9b:e7:c6:76:d5:84:23:24:b9:7c:13:0c:c9:9e:b6:
                    4f:b9:17:ca:a0:ce:74:9e:0f:e0:f9:7b:84:15:64:
                    57:7e:7e:14:3d:db:6f:8e:be:c4:da:17:b5:7c:0d:
                    41:ef:3c:e7:0b:b3:3c:52:df:1a:27:b5:34:d2:57:
                    5b:83:7e:ad:9a:e2:38:8c:5e:da:f0:1e:68:fa:bb:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:3D:D8:C7:C3:02:96:0C:DF:D7:2A:0C:89:92:98:E9:C8:32:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/aea5eec7-cdaf-354f-833c-b85e9cb53ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl

            X509v3 Authority Key Identifier:
                keyid:CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:29:7c:bf:3b:40:80:1b:38:8b:94:07:e1:fc:2c:8d:da:
         70:fc:28:39:e7:c9:52:f3:03:c4:e8:d6:00:83:50:a5:59:e1:
         7a:b1:f6:c1:ee:79:a6:45:06:03:98:bb:de:8d:75:4d:5d:e6:
         19:7a:fd:a1:07:98:26:7b:15:b5:2d:63:af:5a:56:ea:bd:d8:
         89:75:12:38:31:e4:4e:cb:a6:6c:12:96:9a:c9:e0:3b:9a:0a:
         94:b6:4e:04:7a:90:cf:de:6b:43:3b:35:7a:e1:6f:28:1e:41:
         93:3c:91:8d:32:aa:19:95:50:f5:c4:e0:20:cc:11:8e:6f:c6:
         bc:59:55:be:00:df:f1:1a:05:03:be:a5:ce:45:cb:a8:45:65:
         07:a1:41:f3:18:38:04:84:4c:d6:bc:de:1a:da:9d:e6:c9:a1:
         9e:be:d9:0e:f1:17:f7:3e:42:b1:e5:65:8d:f9:cc:f9:dd:e3:
         11:fa:76:60:10:e2:bf:07:3b:86:1e:f4:c0:e8:ca:f4:32:64:
         6f:72:b7:fb:bd:ef:84:fb:7b:30:cd:e0:68:96:75:f5:0e:fe:
         c8:a2:33:9f:ad:11:37:06:ce:dc:89:47:3a:7b:34:65:6e:3a:
         89:99:34:0a:fd:18:51:6d:07:04:85:6a:71:01:4b:b4:87:ca:
         53:b7:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:44 2025 by rpki-client