Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
File:                     cca54213-030a-3b3d-90f9-2b547482f0e0.roa (raw, json)
Hash identifier:          zZsjDYDBwpzCzQJLhan/qTWn0rp8DxUczk5qsMi+AWA=
Subject key identifier:   55:A8:A2:2C:71:50:C2:5E:B4:EE:EB:0D:9B:69:71:B3:4D:CF:E3:D6
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584A2D858111CF4969C5AE59BE00
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        66.43.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:81:11:cf:49:69:c5:ae:59:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=eed96c22-bb21-4d9d-aaba-0894f8d24d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:36:b6:1c:1d:b2:4d:cb:d8:af:50:80:58:
                    24:64:a8:92:c2:9a:46:3f:06:57:fe:9c:ad:c0:e2:
                    5d:fd:87:5d:35:41:31:5a:f6:7c:88:6b:74:1c:92:
                    92:a2:be:83:dc:00:dc:5f:ea:c6:db:c2:cc:fd:27:
                    92:b3:32:b0:72:8a:ff:18:d5:59:96:92:d9:19:a9:
                    89:63:89:dc:02:33:4b:f9:2d:ca:59:8f:a7:a7:15:
                    6b:75:c6:f8:89:23:e6:ee:9f:6a:d6:c8:20:d3:f1:
                    41:52:99:2f:48:9b:11:ec:13:db:9c:6a:55:25:a5:
                    0a:1e:a9:64:53:cb:f3:71:db:83:4a:8d:25:5d:9b:
                    e8:85:f2:96:22:a5:09:5d:e7:2e:5d:ea:a7:cd:e5:
                    5a:33:1e:49:02:29:1a:25:fb:76:51:27:d8:f6:8f:
                    91:f3:ff:c9:fe:47:e2:e4:0b:f5:7d:b1:27:6a:be:
                    a1:86:ad:3a:66:e6:46:ff:a7:6e:dd:32:98:0b:5b:
                    e0:1b:a2:89:32:8f:d8:27:5c:a6:a0:f3:59:4e:a7:
                    76:0f:65:98:20:78:32:09:a7:16:5d:20:58:1b:e0:
                    1c:b4:00:26:90:a4:c6:e8:f5:f7:f1:ee:4e:a3:3b:
                    ed:c2:b2:0e:e2:33:f3:b2:f1:66:3d:f9:2a:71:33:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:A2:2C:71:50:C2:5E:B4:EE:EB:0D:9B:69:71:B3:4D:CF:E3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:60:01:8c:9a:82:4e:f6:18:17:6d:a3:5c:96:08:42:f4:
         87:5f:e0:a1:62:44:a5:96:42:ef:74:e2:18:77:ab:f6:a7:02:
         f1:49:a7:a3:c9:7b:c4:70:fd:4b:14:d5:e9:a3:fd:b3:93:b0:
         45:be:87:3e:2a:03:92:33:af:5a:a0:65:a0:b8:70:c6:3a:85:
         75:81:74:d7:2e:99:5e:f7:cd:41:c9:d2:db:13:5b:35:6a:f3:
         e6:cc:79:2d:5f:52:36:d3:17:46:ed:3c:4a:9a:3b:06:b0:44:
         e6:4f:c5:d6:03:b0:b1:34:e3:4b:e4:53:37:c4:9c:41:55:ed:
         b8:d4:bf:8f:72:59:83:2f:8f:d8:45:78:65:21:d5:3b:e4:9d:
         26:95:a6:d8:7c:68:77:43:8a:b2:82:c7:e4:4e:f3:2c:26:81:
         da:f6:8a:1f:2a:27:54:52:1d:88:ec:20:af:e0:5c:3a:b1:86:
         cf:f6:e5:bf:3f:51:d7:b4:ec:69:d5:8f:70:01:f1:7d:9f:d5:
         7d:34:00:f5:9c:d5:25:31:6d:c6:20:b6:4f:e9:ee:fa:84:c1:
         e3:d7:52:c0:f3:5a:bd:4a:f1:d8:59:9d:1c:cd:3d:a3:d6:b9:
         3c:17:61:3a:0e:56:b5:14:84:96:31:11:b2:15:9e:b3:25:f3:
         7f:79:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:05:53 2025 by rpki-client