Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9d9635d-6b09-30e8-9ed5-8e0eb17ece13.roa
File:                     f9d9635d-6b09-30e8-9ed5-8e0eb17ece13.roa (raw, json)
Hash identifier:          THvtLRVk3x0TX9mj6IAGfUave0X/mbWdBnf/5y2vo8s=
Subject key identifier:   8A:C3:C1:09:A5:D6:B3:CD:77:1E:CD:4C:02:A5:75:3B:7E:7C:EB:65
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A5CFB34812A4C9A7E5C78DD80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9d9635d-6b09-30e8-9ed5-8e0eb17ece13.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        170.114.64.0/24 maxlen: 24
                          170.114.65.0/24 maxlen: 24
                          170.114.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:34:81:2a:4c:9a:7e:5c:78:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a2e47989-7346-4a21-bb46-1cc6bf70d7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:31:73:dc:44:9d:a3:87:69:61:dd:4a:c9:
                    41:fc:3c:7e:85:97:53:07:62:3c:9c:02:c8:d8:6a:
                    af:61:fb:bb:fe:ea:30:b5:24:49:7f:0f:42:a5:c3:
                    ae:48:43:13:e3:4f:b9:0e:c4:be:f6:6e:f4:28:81:
                    02:87:04:01:64:82:53:85:00:49:48:cb:e0:eb:02:
                    af:e2:b6:89:5a:2f:35:81:4f:8b:97:b3:4d:a4:32:
                    22:b7:03:ce:14:05:67:bc:0b:64:64:9b:e7:06:ff:
                    23:70:3b:91:e9:78:12:45:7d:da:fa:76:51:87:e8:
                    f2:8f:5a:70:69:ff:47:cd:23:0b:bd:6d:76:fc:65:
                    a0:14:95:17:61:fd:5a:39:59:79:79:38:54:f0:a4:
                    52:5c:32:fd:eb:01:db:9a:13:6a:ab:52:5c:93:44:
                    15:01:00:67:cf:d8:7d:fc:f4:ec:19:0f:a9:e7:ad:
                    52:bb:8c:dc:a2:4d:c2:99:2c:cf:87:bc:4e:0f:c2:
                    91:c3:dd:46:20:36:0c:60:1d:25:f2:b8:24:93:0d:
                    6b:17:16:d1:bb:34:4c:cf:a2:25:b3:61:e1:87:05:
                    ca:47:16:f6:8b:56:24:b1:2a:70:80:3e:97:eb:90:
                    27:75:0b:b3:b1:7e:c6:25:f6:bf:59:51:9a:aa:22:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:C1:09:A5:D6:B3:CD:77:1E:CD:4C:02:A5:75:3B:7E:7C:EB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f9d9635d-6b09-30e8-9ed5-8e0eb17ece13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.64.0-170.114.66.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:53:09:8f:ff:aa:1f:a8:1b:4c:a1:66:c1:21:21:32:67:ea:
         d7:d5:33:44:6a:eb:2b:5e:e8:5e:c4:68:36:f2:a2:9e:ab:5b:
         e4:3f:cb:f5:fc:a0:74:27:88:71:6d:77:ac:8c:d5:52:46:46:
         3e:85:3d:cb:f3:04:d8:dd:d9:ac:d1:b2:a4:0e:85:7d:65:47:
         60:82:4d:39:55:22:63:66:40:f0:2d:b3:af:02:0b:1e:52:b6:
         84:1e:23:4d:71:74:32:fd:b4:37:54:82:b0:15:6c:3a:cf:78:
         c7:24:e2:ed:52:14:d5:57:a4:58:87:87:f5:c7:01:31:22:e9:
         47:43:bf:d3:fd:75:63:29:7b:14:3b:08:ae:51:37:10:52:c0:
         68:07:d5:91:06:41:45:2d:d7:8c:cc:e7:03:7f:69:a1:7a:ae:
         24:68:c9:bc:60:c6:9c:5b:24:37:99:35:48:3c:5e:0b:0e:2c:
         d5:13:69:fb:21:23:fc:8d:8a:5d:95:b1:a5:97:7e:16:0b:84:
         90:df:de:50:11:df:b9:3d:59:27:e9:8a:bd:d7:77:41:e0:e1:
         25:f6:30:1c:78:b6:c4:f0:9f:e3:0b:d6:3d:05:47:bc:bf:78:
         f6:51:7f:e9:0c:61:11:36:bc:3b:6a:30:74:04:f5:16:83:51:
         a9:5f:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:36 2025 by rpki-client