Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa
File:                     fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa (raw, json)
Hash identifier:          1jZHEGRXQNxv6SK6gcK5lv2csURB1nYjJecyo695A+c=
Subject key identifier:   CB:4C:C0:17:A0:75:06:C0:F5:AE:99:7E:60:AF:E9:9A:44:D7:F5:13
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285849DF5A75E68E5349D4C631BB40
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     399439
IP address blocks:        66.115.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:75:e6:8e:53:49:d4:c6:31:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=d900ccfe-17d8-4965-9503-342d563442da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:33:28:1e:fe:f8:df:2a:23:16:1f:26:33:
                    df:e5:cf:58:99:4a:ac:80:a2:45:56:91:c4:8e:c0:
                    b6:08:f6:dc:db:f1:57:c5:90:ed:27:4b:c8:3d:68:
                    0f:2f:35:0e:9e:7c:4b:18:94:e9:b7:36:51:4c:11:
                    6e:32:7e:00:e4:33:31:b9:50:bc:b7:72:81:d0:f3:
                    4e:fd:ed:f6:9b:93:8a:63:49:c7:fc:b2:59:0e:06:
                    ac:44:82:2e:f7:58:a1:6f:da:af:9a:19:a0:42:6f:
                    a9:23:e9:49:f2:ba:04:59:69:9e:b6:8b:28:55:2a:
                    85:ec:e7:74:af:1a:9c:32:db:13:a4:3b:6e:60:35:
                    b0:aa:6c:fa:1e:32:59:48:dc:0d:1d:36:a3:af:43:
                    f4:53:be:44:7f:96:16:fb:41:f1:2f:4a:e9:54:95:
                    59:40:73:e8:e7:cf:7d:9a:8b:7f:86:54:b0:ef:4c:
                    e6:5c:82:d6:61:33:14:19:f8:0f:c7:c0:a2:48:09:
                    3c:f9:42:c8:7c:f6:15:53:c4:8e:5c:ed:cc:b3:f4:
                    58:ce:a0:97:3b:fd:5b:a9:4f:2c:49:f8:52:e6:6e:
                    f5:31:ea:27:09:25:25:ea:a7:95:6d:5d:2e:f3:cf:
                    a3:8a:e8:8d:85:93:2c:e3:69:92:de:fc:25:33:ea:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:C0:17:A0:75:06:C0:F5:AE:99:7E:60:AF:E9:9A:44:D7:F5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:12:6d:11:96:24:8d:7b:85:35:b6:95:b3:f0:f0:93:35:29:
         e5:de:b6:ab:b3:3b:87:d7:3c:da:af:75:e8:d0:04:07:e0:04:
         de:dc:30:69:06:e8:af:b8:cb:09:e8:0e:3e:50:3b:82:4d:c1:
         3e:cc:0c:70:a6:d1:7b:72:61:f0:7b:12:dc:67:61:21:56:be:
         ac:9b:a1:97:3b:6f:6b:be:b9:54:bb:dd:6e:2d:29:07:a3:cf:
         bf:41:32:6c:fa:98:5e:09:e2:59:07:5c:a3:bd:84:b0:15:89:
         a3:2c:a0:30:5b:10:da:21:f0:ab:7c:7b:48:77:5e:47:c4:1d:
         f0:c1:dc:97:75:9d:ce:81:37:e3:3b:4c:1b:82:b3:15:b5:36:
         9f:12:cb:74:a4:68:27:a7:92:17:da:cf:a9:c8:ef:75:eb:20:
         0b:dc:fb:97:95:5b:bb:42:73:9c:16:57:16:99:22:0f:0c:24:
         42:70:17:d6:15:d0:97:c0:2f:b7:91:20:8e:4f:73:d3:76:8a:
         59:1c:e9:19:cc:42:5b:7f:bf:2e:54:89:f3:33:75:52:e9:8f:
         bb:dd:22:45:70:c5:6f:8f:e6:80:97:bf:af:0a:a6:16:19:bb:
         51:c4:66:3d:25:e0:e7:b8:8c:d6:83:e8:aa:db:a3:a2:16:78:
         9f:5a:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:40:02 2025 by rpki-client