Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/abf9af20-9d38-3951-babb-abb6e6b4ca9e.roa
File:                     abf9af20-9d38-3951-babb-abb6e6b4ca9e.roa (raw, json)
Hash identifier:          vGcJ7EqpXzf6hZaTaoKclU7u24Jszc4BQwm8FgGNLIA=
Subject key identifier:   CD:80:03:B4:39:8C:EE:44:D1:70:8F:DF:6C:4E:7F:04:CD:9E:BB:80
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584AAB265CBEDCD660B2B8307528
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/abf9af20-9d38-3951-babb-abb6e6b4ca9e.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     36678
IP address blocks:        66.102.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5c:be:dc:d6:60:b2:b8:30:75:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=4dac2b8f-cee4-408c-8628-708b8027eb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:41:13:ba:77:32:99:43:08:6c:35:82:6d:
                    76:26:d5:fa:79:2a:b3:66:e1:45:67:c0:1b:1b:af:
                    e3:b9:c6:62:91:a6:80:cb:3c:da:56:c3:e8:6c:03:
                    b2:93:56:ee:fb:db:25:05:9e:8c:13:0b:8a:28:78:
                    1f:38:97:cd:19:6b:14:3a:21:6b:6d:32:bd:b3:35:
                    12:79:a9:1e:80:b8:b1:d6:f1:75:1b:fd:d8:12:5d:
                    55:da:1d:f4:cd:52:8b:5f:82:8c:7c:ac:1f:83:78:
                    e4:c8:f4:f9:0e:e8:71:4a:b0:39:9f:99:8a:57:9c:
                    f4:3d:aa:5f:c6:36:8c:65:4c:41:d7:b9:13:25:63:
                    aa:40:9d:3e:31:0a:d2:1e:6c:38:87:50:70:dd:d5:
                    ee:b3:04:06:b2:1b:b4:74:92:e7:02:1b:f5:a2:2b:
                    3f:7b:51:e3:96:0a:22:44:d3:57:65:7d:91:a8:e2:
                    df:8a:02:b5:c9:c3:1b:b1:0b:6b:d5:46:6b:d4:86:
                    eb:a5:93:78:a2:44:a2:fc:27:98:4e:47:e2:56:e9:
                    72:03:ad:21:e0:49:60:4e:f2:9b:c0:56:c0:47:a4:
                    28:47:4d:ac:d7:e3:df:2b:bd:72:59:7b:c1:04:45:
                    7f:59:3a:13:25:35:ed:37:05:d4:17:ce:22:dc:00:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:03:B4:39:8C:EE:44:D1:70:8F:DF:6C:4E:7F:04:CD:9E:BB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/abf9af20-9d38-3951-babb-abb6e6b4ca9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ed:57:77:73:2e:dd:fb:39:eb:9f:41:75:5c:2a:9a:44:b4:ff:
         f6:5c:1d:f9:58:75:e6:9c:11:9f:b1:21:f2:47:66:23:ce:fc:
         35:43:c6:e7:82:92:b7:d6:6b:e9:a7:33:32:a6:6c:55:c1:18:
         db:d7:3b:b3:2f:24:f0:c6:ce:08:ec:24:33:f1:14:3a:39:2f:
         25:dd:f4:86:cc:16:41:76:6b:b9:e2:f4:a3:69:ca:29:00:b3:
         44:95:16:a0:8f:2c:06:28:6a:87:4b:db:c4:6c:34:a7:24:df:
         92:ef:1a:96:af:c0:20:4c:c8:63:fa:52:65:b8:88:cf:69:70:
         90:ec:e3:73:4b:91:9b:03:ab:0d:a7:03:8b:4d:e1:9b:f1:98:
         b4:f2:90:7e:e0:0b:88:e6:3c:98:25:43:ef:1e:69:d7:2b:c2:
         da:93:d8:e2:13:9f:74:99:78:6e:f8:d9:74:c5:1b:29:4a:a2:
         24:05:1e:e7:8f:e7:bc:16:41:8f:ea:54:4b:45:3c:9e:f0:54:
         be:c1:d9:89:48:cf:bb:a2:17:49:c0:27:1b:19:29:c3:6d:5c:
         64:4d:fa:8b:b2:43:6b:21:0b:44:9d:24:87:6d:8d:98:cf:16:
         0d:d5:3b:c3:1d:a0:54:33:5d:3c:6d:42:3d:c8:30:33:88:ac:
         f8:c4:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:59:42 2025 by rpki-client