Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c9d32c22-6d27-3d1c-b409-84c31f794551.roa
File:                     c9d32c22-6d27-3d1c-b409-84c31f794551.roa (raw, json)
Hash identifier:          GmvzkTJF8gdmYJLp1GhwxnkO4RICWSdjWKnY0w9DxWk=
Subject key identifier:   F3:5A:47:A4:B8:3B:23:8C:D8:60:30:73:45:E0:66:15:0C:5B:17:F7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F43285849D9FC092E520E626DF5AB7F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c9d32c22-6d27-3d1c-b409-84c31f794551.roa
Signing time:             Wed 14 May 2025 14:52:03 +0000
ROA not before:           Wed 14 May 2025 14:52:03 +0000
ROA not after:            Tue 12 Aug 2025 14:52:03 +0000
asID:                     134489
IP address blocks:        66.102.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:fc:09:2e:52:0e:62:6d:f5:ab:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 14 14:52:03 2025 GMT
            Not After : Aug 12 14:52:03 2025 GMT
        Subject: CN=f30f47f4-27f3-491c-8c95-85ce1aebe178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:72:b2:c3:a6:5e:e9:9d:50:cf:4e:c0:ba:
                    df:21:df:1f:49:c1:60:b7:79:2e:d5:3f:99:2a:b6:
                    b3:62:48:04:2c:02:09:e1:5d:f7:19:99:b4:6f:cc:
                    bf:9a:01:73:cd:81:30:ae:73:c3:a7:da:a2:3d:f3:
                    8e:fd:fc:64:a2:90:9f:9c:88:c6:3f:48:92:10:c3:
                    26:85:8f:05:f0:64:18:34:6a:fa:d2:6f:10:87:a2:
                    62:ac:f1:88:d7:22:63:e8:03:13:f0:09:20:4f:9a:
                    4e:71:48:6e:57:9d:00:88:ee:59:dd:9d:cb:5f:20:
                    e5:7a:1f:39:ea:7c:19:96:79:0e:64:9f:dd:54:c0:
                    97:65:8e:25:e2:1e:51:d3:26:60:75:f9:e2:5c:39:
                    d0:cd:4e:2f:9c:a1:43:09:f3:bd:b8:b9:47:da:c4:
                    4a:7f:01:07:53:2c:a4:a7:ae:c6:5d:21:7c:65:f4:
                    24:ad:be:bd:de:27:b9:a6:2f:62:2b:1a:87:ee:23:
                    08:87:da:bd:cb:f4:15:8e:05:df:15:20:16:d4:90:
                    a5:4c:97:ba:a8:02:fa:09:45:9e:13:92:94:86:02:
                    ad:fd:4f:07:ba:0c:9b:31:65:13:f7:96:8d:24:db:
                    f0:02:e9:85:b7:90:84:2d:a4:4a:5a:d5:67:02:85:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5A:47:A4:B8:3B:23:8C:D8:60:30:73:45:E0:66:15:0C:5B:17:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c9d32c22-6d27-3d1c-b409-84c31f794551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:c1:08:3e:ff:1b:ee:0b:65:a8:72:5f:c4:c3:9a:01:ee:4a:
         81:a6:20:86:55:db:93:9a:d5:0c:e9:69:b8:37:a7:87:60:45:
         e3:a0:62:e4:13:31:ec:22:e7:11:b9:26:53:12:9a:ff:87:6c:
         27:36:7f:95:a4:e4:f4:23:92:8a:bd:de:72:81:26:a2:bc:70:
         79:20:ad:ac:1a:7d:a8:bd:c0:00:f4:c2:88:c0:ae:26:b5:8f:
         63:98:bd:ac:a2:c6:8c:57:ed:c3:9a:fe:83:ca:3a:14:c8:51:
         78:7e:8d:77:e2:62:7e:8b:dc:2c:4b:a3:5d:02:dc:c4:34:bd:
         2e:49:1c:13:c1:96:6d:4b:c8:7f:6c:93:03:33:43:c0:e2:4d:
         64:49:26:b1:04:7b:2e:58:fe:01:8b:df:0c:23:b1:8a:23:97:
         37:2c:3d:20:ef:4c:87:e1:0b:c6:69:e2:d1:1a:a6:c0:75:0e:
         a7:15:54:86:aa:79:c2:62:82:ee:02:8d:8b:a9:b5:4b:64:77:
         47:e2:4b:f2:ea:8c:97:60:20:83:af:0a:43:c2:ab:9f:72:f8:
         dd:fd:3e:35:03:a5:7d:60:ad:27:2e:1b:db:a7:62:cf:d3:83:
         be:1a:e6:1d:96:74:9a:0b:fb:c9:ef:fa:ed:af:90:e5:e3:9f:
         b0:c7:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:38:51 2025 by rpki-client