Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b8a015ea-ca88-3fdc-8b9b-d920b7f246e2.roa
File:                     b8a015ea-ca88-3fdc-8b9b-d920b7f246e2.roa (raw, json)
Hash identifier:          T++5SSNoix1k1nnG2guiRkMdYi41ifIN4QC+qgc6Thg=
Subject key identifier:   D0:8B:99:8E:12:04:1E:F6:0D:5E:F2:1F:12:8A:2E:82:B7:22:D8:0D
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584AAB265CB1E540265982E34680
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b8a015ea-ca88-3fdc-8b9b-d920b7f246e2.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     4809
IP address blocks:        66.102.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5c:b1:e5:40:26:59:82:e3:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=3fb9500f-0f90-4a44-afe7-b2afa7624e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:68:40:6f:1d:23:7f:33:ba:ad:f0:4d:93:
                    6c:8e:dd:5a:4b:7e:8f:94:29:6c:6e:37:e5:41:b8:
                    50:47:b9:46:bb:fe:5d:14:77:b8:09:04:b2:2d:cf:
                    7d:e1:6a:31:d2:1f:8b:1e:4a:00:dd:74:f1:71:2b:
                    31:3f:0b:e5:f3:db:1b:0c:9b:8c:93:54:e5:dd:b3:
                    9c:de:c3:36:51:ef:b7:14:16:ce:e3:3e:21:f3:a3:
                    72:12:78:d7:e5:29:c3:50:84:d2:ee:e9:4b:f8:6d:
                    8f:8a:b2:98:71:39:ee:4d:d1:46:57:00:36:0d:16:
                    fc:55:1b:05:f8:e9:22:ce:07:bc:cb:3a:a4:14:d6:
                    9b:b9:ad:2d:ed:d9:3c:48:76:da:18:8a:f8:1e:bc:
                    9e:c0:5a:85:f2:46:55:81:1b:34:d8:39:37:5a:bf:
                    22:ab:b0:c0:79:41:43:93:cb:89:ea:8a:21:f6:cf:
                    37:4e:2a:4b:89:17:8f:e9:ec:cb:bd:03:33:d9:c1:
                    aa:63:f4:5f:a9:e1:00:cd:fa:a6:26:5b:4b:11:f5:
                    c1:9f:cc:7a:9a:86:20:bc:75:5a:f8:8b:fb:d2:62:
                    bd:c1:6a:62:1d:0c:ed:07:41:ca:41:2c:d5:6c:71:
                    90:ad:a6:ea:6d:e9:e5:6b:55:54:97:51:7e:d2:93:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:99:8E:12:04:1E:F6:0D:5E:F2:1F:12:8A:2E:82:B7:22:D8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b8a015ea-ca88-3fdc-8b9b-d920b7f246e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:25:80:e3:6d:bf:ac:57:d1:21:6a:35:77:a7:13:f2:2b:
         cc:2c:ec:d5:b6:25:a8:d6:41:ac:2e:92:44:db:6c:c9:0c:1d:
         c8:bc:1c:9d:f5:4f:e3:cd:d9:97:c9:78:66:f2:d2:30:fc:66:
         60:58:9b:df:fb:59:92:17:68:ca:c9:46:39:bf:70:1e:35:a0:
         c3:b7:a4:e6:c1:cd:d5:c2:56:90:3d:20:0d:9b:83:2a:50:33:
         ac:f8:5f:ae:04:7d:92:5f:9f:c1:44:89:37:92:b5:88:79:59:
         16:47:d7:b0:2a:4c:65:31:f1:d1:71:02:b8:c5:06:0a:e3:a6:
         c5:0c:ff:6d:17:af:f1:d6:c6:2f:da:63:1f:84:63:ff:63:45:
         f5:cb:16:8b:bb:87:09:09:8f:b5:30:02:57:e1:dc:e2:9b:f2:
         a6:43:5d:a7:bf:b0:c1:f1:e1:bd:5b:62:ad:25:c3:f5:7c:57:
         70:6c:bf:9c:7f:8e:ff:e2:33:ed:d0:06:73:ce:e4:75:b8:da:
         ea:1c:8a:3e:8f:33:0c:9c:50:7a:69:df:1a:f3:47:19:1c:52:
         14:7c:bc:df:b5:a2:08:38:44:48:b1:8a:88:7d:1c:30:80:d4:
         bb:2f:8f:e5:7b:d4:13:77:31:94:04:35:da:fd:33:e1:54:f8:
         1e:8d:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:37 2025 by rpki-client