Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa
File:                     46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa (raw, json)
Hash identifier:          dZIzQ9VpQI+JuyLw8L3AbQyKsFIKpSRLi7GmdUYhTck=
Subject key identifier:   B6:74:6F:B7:FB:57:4F:1F:43:33:3B:1D:F1:05:D6:9C:C9:CD:C3:FF
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F43285849FCAA87B95F7155245F808EE5
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        66.114.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:87:b9:5f:71:55:24:5f:80:8e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=d4c57cd3-31ce-4c33-9eae-71c7c1f1bd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:f3:71:30:00:ae:66:7e:d7:6e:fc:90:a2:
                    5f:b6:4e:35:cb:40:d3:5f:30:ba:11:2f:9f:39:41:
                    af:88:fe:3a:d4:ec:4f:64:7f:7e:37:0a:fe:45:e9:
                    1c:2d:ea:df:9d:13:f3:93:c4:23:5d:58:b9:e3:0a:
                    1d:91:7b:cd:1f:f9:4a:41:4f:3a:89:77:3c:d8:29:
                    5e:a5:e9:62:50:af:a3:4c:65:fb:84:72:11:bc:4e:
                    f2:28:50:4b:bb:42:01:7d:67:2d:df:9b:eb:7d:cf:
                    87:92:13:0e:6a:1b:51:f4:7c:72:42:54:a5:9e:2b:
                    0e:f8:92:8f:79:f8:91:10:f5:15:03:e2:58:ca:5f:
                    0b:35:be:2e:22:4e:31:21:23:f4:81:46:82:40:2f:
                    89:e8:99:5f:71:f4:45:72:6a:c7:95:6c:a1:d6:fe:
                    31:50:74:53:13:da:4e:8b:b3:c8:bf:d5:ad:2f:3c:
                    58:af:04:c8:e7:95:ba:f0:09:71:6d:7d:90:81:34:
                    09:98:bc:8f:20:c0:f9:b2:49:39:1f:e8:c8:fe:05:
                    9c:cf:07:7e:6b:22:ee:96:53:4e:63:5f:b6:ff:36:
                    0a:90:e9:3e:9e:f7:d3:2d:e8:cf:b3:ff:a6:c7:fc:
                    dc:08:bf:47:fd:2a:88:2c:98:bb:20:3c:1d:da:fa:
                    8d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:74:6F:B7:FB:57:4F:1F:43:33:3B:1D:F1:05:D6:9C:C9:CD:C3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:da:e3:d3:96:49:fd:7d:f1:61:6b:50:c3:56:d7:8f:21:7e:
         33:ce:83:95:c5:2b:b4:48:38:6f:42:ba:e1:72:b4:12:e3:9e:
         f6:da:d1:fd:6a:7c:ec:df:e8:89:81:05:93:a7:55:c9:3d:f4:
         70:28:0d:a6:f0:b4:15:3e:3c:ac:e0:4c:d4:02:c7:11:57:f3:
         b0:c9:b9:1f:f6:d9:28:26:29:57:9c:2c:fc:f1:ea:d9:36:9d:
         d3:03:98:5d:f2:ab:bd:ee:8f:9d:14:9d:58:34:73:42:c6:8f:
         61:39:41:40:52:11:5d:3d:78:36:63:93:cf:50:01:b8:1d:39:
         bb:4d:ec:3a:83:48:12:f6:56:2c:75:16:e4:a8:4e:a2:4f:af:
         07:fa:49:4f:6e:74:98:2d:a7:88:c4:43:18:36:89:c2:18:55:
         cd:0c:84:1d:6a:bb:6b:19:7d:24:94:bb:07:a4:6b:0d:f5:ee:
         c3:11:5e:35:7d:0d:49:d4:c4:44:88:30:b6:7e:87:16:f1:b7:
         8e:49:7d:53:50:0f:42:29:a0:a3:95:6e:f0:dd:01:5c:da:45:
         74:c4:93:f5:c7:71:77:09:fe:c0:57:92:bc:cb:6d:bf:e8:fd:
         28:62:54:66:87:36:c5:cf:94:fa:78:a3:81:a8:21:19:d8:13:
         2a:48:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:49 2025 by rpki-client