Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d995c434-dc3b-3247-8521-00aabac0fddf.roa
File:                     d995c434-dc3b-3247-8521-00aabac0fddf.roa (raw, json)
Hash identifier:          Y/BcgUiy8hJqbWLBulvHLdixQ3u3APo6cn6F5XRoi7s=
Subject key identifier:   06:5F:E5:41:E2:8F:44:0A:88:15:6D:0B:3A:10:6E:79:BC:4F:CC:54
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161C5499CCA2F4F43AB1800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d995c434-dc3b-3247-8521-00aabac0fddf.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        66.168.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:c5:49:9c:ca:2f:4f:43:ab:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=72538065-deec-4873-b53f-09da9df93444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:e9:7b:1a:46:7e:08:5f:88:34:9b:24:81:
                    07:5f:dc:43:29:85:f2:89:aa:b7:7f:85:03:bc:f3:
                    ac:af:f8:d1:cc:ba:bf:10:37:24:60:d8:d3:f1:a6:
                    5f:79:00:e8:19:6d:fb:e6:76:37:9c:6b:92:85:a1:
                    00:bf:ae:c2:76:39:7d:bf:c5:7e:38:55:e3:d8:29:
                    7c:bc:8b:84:bc:2d:59:a1:f8:f7:4f:3a:d0:4b:8d:
                    61:a0:df:9a:47:bb:3e:af:e9:81:45:e5:20:56:ee:
                    e3:1c:73:99:ab:ab:04:44:62:99:90:4e:b1:54:83:
                    79:2c:01:03:d3:73:74:d5:3c:fb:cf:ca:63:af:9e:
                    22:93:c3:9d:3e:7d:e9:a0:99:34:1d:46:ea:f6:13:
                    08:d7:7f:0f:37:ab:82:b4:08:83:cd:6f:5e:9b:5f:
                    7f:09:37:c1:57:f6:24:fe:07:a0:d2:e5:d3:9f:36:
                    41:3f:ee:63:68:5d:d2:ed:87:2e:9e:80:09:cc:f3:
                    36:a9:4e:64:e0:2d:d9:cf:98:26:92:8c:4f:a5:bc:
                    91:55:8d:3d:d2:6d:ab:00:e3:ec:b7:3e:4e:49:60:
                    03:f1:ad:dc:c8:71:09:ee:57:68:ce:5f:9f:0f:92:
                    0e:36:15:c6:a3:43:94:d3:b0:24:01:63:35:ec:4e:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5F:E5:41:E2:8F:44:0A:88:15:6D:0B:3A:10:6E:79:BC:4F:CC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d995c434-dc3b-3247-8521-00aabac0fddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:05:22:99:39:c0:2e:60:99:1e:27:e1:03:10:21:a6:1c:
         4d:5c:f8:c4:08:f2:25:65:c4:61:6b:40:a4:58:4f:24:68:28:
         03:26:5c:c8:aa:1f:5f:44:17:6a:13:7b:40:c8:cb:cc:78:ff:
         a0:a0:bc:37:34:3b:4f:05:53:46:9c:56:9e:82:2f:08:54:dc:
         86:af:4c:a5:b8:ca:14:d7:07:f8:58:14:b9:5c:a0:9b:7d:73:
         91:d4:0e:eb:b1:31:65:28:54:47:05:ec:02:9e:05:d8:ef:20:
         da:8e:b8:d1:f5:27:87:a6:fb:4e:78:6b:92:c5:23:62:f3:5e:
         e9:38:58:78:d8:fd:01:6e:f2:cc:7d:e1:80:71:89:37:13:a3:
         99:10:95:b7:1e:6d:52:de:ba:62:85:9f:09:52:a8:45:d5:dc:
         ce:7f:c3:af:bc:b3:ff:7f:95:3c:a3:81:20:5b:44:51:df:5f:
         2c:66:9b:80:d6:96:bc:bb:57:48:e1:ef:67:de:84:30:41:3c:
         55:bb:61:00:2d:a3:dc:7a:64:27:53:32:15:3d:3b:60:be:20:
         b4:ae:a9:2d:69:19:96:b4:e6:4f:5c:82:87:ab:93:94:29:59:
         8a:14:cd:dd:0c:09:23:c8:0a:00:54:df:73:bf:59:53:d0:b1:
         1b:58:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:42 2025 by rpki-client