Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/01529e09-9594-3dd0-b7da-092fd6d1c742.roa
File:                     01529e09-9594-3dd0-b7da-092fd6d1c742.roa (raw, json)
Hash identifier:          SLtCS6BhlKTajoLXlz8W8dHu5bgAw359CNm+6HQkaCI=
Subject key identifier:   69:6D:85:6F:46:82:DB:85:01:95:D4:F5:72:00:66:44:A1:62:0B:ED
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858498CFF1CFF3DEA4E6DFFD12480
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/01529e09-9594-3dd0-b7da-092fd6d1c742.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     401415
IP address blocks:        66.115.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1c:ff:3d:ea:4e:6d:ff:d1:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=28a712c4-4e02-4e68-b0a9-de7a7673ad91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:f6:a5:13:07:de:e7:65:63:b2:9e:f1:e7:
                    c6:4f:a5:ee:56:eb:e0:73:46:eb:11:29:c2:f8:e7:
                    c3:1b:e7:fb:1a:05:f9:af:cb:b2:46:b7:9e:aa:b1:
                    9e:cb:65:7b:9d:52:21:1b:97:74:72:3c:e5:92:4c:
                    3d:0f:bf:a2:18:7d:ef:88:34:15:db:24:c4:ea:67:
                    7f:6c:51:eb:55:7f:11:79:b9:fd:fe:51:c6:42:e5:
                    68:c2:86:a1:94:96:30:6e:13:93:91:78:b3:2f:0e:
                    62:51:a7:f5:60:79:ba:61:36:90:8f:6c:c6:26:f9:
                    ed:ff:39:bb:2c:30:12:89:40:5f:90:f0:2d:1e:36:
                    ea:27:38:97:9d:2f:f9:3b:6d:9e:54:21:52:eb:17:
                    f0:70:e9:6b:52:32:cd:d7:72:da:ea:29:c8:81:b0:
                    1d:37:58:29:0d:d5:0b:96:43:3e:4b:da:29:0b:4e:
                    48:f9:f1:2f:b8:f6:e1:70:9b:24:ad:2a:c8:b0:e1:
                    a7:5a:f8:84:21:37:f1:26:ce:7b:3d:65:a1:19:0b:
                    54:85:4e:59:a5:ff:d6:95:e8:86:d2:17:ec:ac:6b:
                    81:07:d5:34:4e:05:35:a6:a8:30:38:0f:9a:36:9b:
                    89:37:93:aa:56:2a:c6:b5:a5:0a:42:da:79:8e:f4:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:85:6F:46:82:DB:85:01:95:D4:F5:72:00:66:44:A1:62:0B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/01529e09-9594-3dd0-b7da-092fd6d1c742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:b4:9b:00:0a:e8:e5:58:3d:75:6e:ee:2d:32:57:68:91:24:
         69:59:8a:7b:5c:df:57:a1:93:6d:d2:66:64:c6:21:d7:b0:13:
         3e:c6:95:bb:f7:60:85:df:26:55:86:7b:ef:92:e9:20:7d:7e:
         fb:a8:7f:44:b1:47:da:40:12:51:d1:1d:29:4a:32:82:11:34:
         4f:e5:3c:85:8f:cb:08:70:ee:1f:75:1a:16:02:8b:45:ee:41:
         ff:14:64:8e:4b:d8:dd:43:a8:87:30:87:72:ac:ee:ce:69:2c:
         6d:f8:5e:7d:15:b4:eb:3b:1c:2c:27:ab:91:d9:8f:ae:46:6f:
         32:e3:87:23:59:86:01:59:09:31:6e:ce:bf:06:8c:e8:55:89:
         4e:1e:de:ba:81:e7:e0:87:eb:a4:30:b6:12:33:a4:ff:04:f6:
         b2:26:7d:70:b3:48:7d:9d:b9:e6:d0:9e:c6:56:02:04:24:87:
         2b:3e:aa:6c:88:cd:e6:da:1d:50:6e:b5:12:02:d3:c4:01:1c:
         16:ee:2d:e4:fa:31:9e:cb:52:19:09:c0:dc:3b:43:24:13:7e:
         27:da:18:86:ea:f6:2b:fe:34:fb:85:2c:9f:1b:7b:f9:37:5c:
         92:91:10:ba:b6:e6:3c:d8:7c:fa:65:48:11:c2:a0:92:68:09:
         5f:4d:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:28 2025 by rpki-client