Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/ce2c2964-2764-320e-97f5-9c308c5df610.roa
File:                     ce2c2964-2764-320e-97f5-9c308c5df610.roa (raw, json)
Hash identifier:          gwezs6ywcJs6gIyE+PkFgZC7+34VXOYvHVLSzN04w7Q=
Subject key identifier:   07:A5:92:D4:E3:2D:56:5C:19:35:90:57:90:AD:7F:3E:25:B0:E5:54
Certificate issuer:       /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial:       010D0C9F4328584A0C05496217654E05F10EFA80
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/ce2c2964-2764-320e-97f5-9c308c5df610.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     53831
IP address blocks:        65.39.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:49:62:17:65:4e:05:f1:0e:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=697afb98-b78d-4b98-b41b-c1d0b215a94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:72:9b:f0:de:16:d6:67:6b:da:bb:5f:97:
                    2a:f3:d3:8b:a8:ac:83:fa:3e:49:89:ef:58:9e:61:
                    c2:09:36:81:d8:2f:3f:ae:25:25:2b:63:d6:9c:1e:
                    38:f1:c8:c9:9e:8e:8c:f6:f9:21:11:a3:a7:18:3e:
                    4c:6f:94:d7:85:b6:c9:4d:24:8e:4e:a3:73:64:7b:
                    ff:a0:8c:0a:62:0b:ca:9c:24:c2:7f:9e:a7:b3:81:
                    51:f3:dd:6c:0d:c2:93:7d:dd:82:d6:43:6c:0d:a6:
                    78:c8:50:88:cb:ef:06:93:7c:9d:54:c9:51:23:c2:
                    ea:90:57:44:42:49:ea:16:f0:92:72:85:5d:0f:9a:
                    a5:08:6c:6c:6a:81:8e:49:86:62:95:32:7e:7c:1d:
                    84:bc:da:f2:12:a8:7d:e0:32:ab:f1:57:e0:15:7e:
                    92:f5:d8:c1:d3:d0:27:d1:3f:0c:95:b4:68:db:25:
                    fe:3e:a3:7b:32:7c:c4:e5:47:ae:6e:e3:ea:0d:52:
                    58:c9:97:e2:7e:08:47:a1:af:88:92:ba:d0:a2:6c:
                    fb:0a:8c:1f:45:83:a1:00:8f:18:91:42:76:a4:8b:
                    a4:47:06:7d:ea:dc:96:a4:f5:3c:c8:b7:6f:33:e4:
                    7a:6d:7c:8e:a3:7c:ab:43:b5:d4:3b:7c:84:d7:b7:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:92:D4:E3:2D:56:5C:19:35:90:57:90:AD:7F:3E:25:B0:E5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/ce2c2964-2764-320e-97f5-9c308c5df610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl

            X509v3 Authority Key Identifier:
                keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:09:af:8c:b2:fc:b8:44:d0:f7:4c:1a:83:b1:6f:03:70:0f:
         8a:24:26:fe:38:bb:d7:39:c8:a5:7c:27:d0:8a:24:9a:97:6f:
         d2:90:31:19:53:d8:84:92:32:fb:b5:6d:d6:b9:91:70:5d:30:
         10:40:65:0d:02:88:cb:0f:35:cf:c8:37:c2:59:63:35:d2:ca:
         82:bc:96:0c:78:fb:ae:0d:60:40:2f:58:88:35:1a:ab:79:0f:
         bb:94:d4:50:7e:41:12:b8:59:c6:7b:5a:a2:9c:a8:e7:9b:1f:
         7a:b9:27:c3:38:87:25:fd:6d:13:b9:63:cf:2c:ab:80:26:6e:
         62:dc:bb:8f:6c:1e:c8:9a:b1:70:71:97:e3:76:72:b6:78:37:
         54:e0:77:c2:64:d4:b9:22:01:48:d1:25:7c:ec:5f:02:1f:78:
         0d:8f:a6:4a:1e:26:8a:3f:4b:4e:ba:a1:09:32:80:99:1c:47:
         a8:82:46:55:12:b5:9d:9d:71:d0:a4:ad:a3:d9:55:7d:b7:74:
         83:2b:02:9f:c6:37:49:ab:7b:4d:4d:d0:0a:07:eb:13:56:b3:
         b5:49:14:90:57:5f:90:89:36:59:a2:32:33:2f:fb:89:1f:69:
         70:b9:8d:55:8c:3f:50:0b:92:8e:b0:b8:6f:14:4c:dd:ac:cb:
         4a:fd:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:08:24 2025 by rpki-client