Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/758c5488-022f-39ff-b331-c337902078fc.roa
File:                     758c5488-022f-39ff-b331-c337902078fc.roa (raw, json)
Hash identifier:          AJfpR2ZRCYIK0CLPnWlaUbBwt2AKWDFgLJF23jFuJjA=
Subject key identifier:   8C:E9:FC:99:A8:51:8F:8F:19:79:3F:27:43:A8:E2:4C:71:07:E4:A1
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584AEF8BC43D391B5E83DF787440
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/758c5488-022f-39ff-b331-c337902078fc.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     22351
IP address blocks:        66.205.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c4:3d:39:1b:5e:83:df:78:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=953be3cd-5319-45b4-9a8c-a48076ccb013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:7b:a4:13:3d:73:a3:bc:b0:dd:3b:bc:0e:
                    31:ad:91:c3:41:0c:55:7e:ee:0b:b5:2d:ef:b2:a8:
                    ed:8b:c7:91:81:3d:27:5e:91:a5:ab:b1:2e:6b:bd:
                    64:4f:fa:a3:05:9f:ef:c4:f2:76:c3:c6:31:5f:17:
                    12:ad:2d:51:9b:53:0e:21:bf:6e:17:f2:59:49:a1:
                    96:9a:ab:53:a3:d3:a8:50:82:8e:1d:ba:80:46:aa:
                    d3:1c:21:81:fd:ea:46:24:d6:07:41:7c:a3:ff:d8:
                    09:8b:f0:67:a4:e2:c5:2b:da:b8:71:bb:3f:f5:b7:
                    79:e2:bf:a0:c3:0a:af:9a:df:cc:6d:79:c6:bb:2e:
                    de:25:98:bd:f8:c2:5c:6e:3c:a9:df:fb:08:9b:41:
                    a8:a4:b6:d7:37:1a:33:db:28:78:1b:a8:60:24:28:
                    90:07:dd:a7:c8:0c:a2:b7:63:f2:4a:e3:18:e6:e0:
                    7c:f0:93:20:2e:7b:86:94:cf:0b:c1:8a:d8:00:f8:
                    61:11:34:36:5b:e5:7a:a3:f4:7b:10:e3:86:57:8d:
                    bc:d6:5c:15:06:29:ad:d0:3e:28:af:79:34:fa:0d:
                    9c:af:d5:e5:80:d5:61:1d:07:2c:05:6f:5e:db:ec:
                    0c:46:15:d3:43:63:78:3f:b9:e6:ec:8c:b1:8c:45:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E9:FC:99:A8:51:8F:8F:19:79:3F:27:43:A8:E2:4C:71:07:E4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/758c5488-022f-39ff-b331-c337902078fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:85:b1:c0:bf:25:7b:4a:27:24:ba:a2:38:f8:59:2a:69:
         eb:ae:2c:f4:1d:5a:3c:b8:70:ea:29:a7:5e:0f:83:31:65:b1:
         b2:dd:14:66:a3:81:89:68:0b:23:f5:31:e7:73:67:90:80:da:
         53:cd:14:60:ac:59:4b:dc:ef:8d:15:35:b4:ef:7a:a8:54:a5:
         06:05:3e:ae:09:86:80:40:d9:d0:48:20:b4:f3:63:a7:27:eb:
         a5:7f:7a:ba:13:bf:83:f6:91:78:2e:37:64:db:76:9f:b9:2d:
         b8:4c:58:2c:59:94:0a:3a:03:60:71:63:fa:56:dc:10:e8:9f:
         b6:2c:43:4c:45:4d:88:22:5d:02:9d:d0:e8:90:bf:c8:3a:0e:
         64:41:f2:2a:c7:a0:87:ff:2c:44:30:6f:45:72:b5:c6:40:1c:
         c5:68:46:5c:7a:5b:f8:ee:da:f8:00:76:9d:51:53:83:97:e8:
         ff:6a:f3:b2:62:01:86:91:f1:47:3a:55:a4:a8:f5:0c:76:d1:
         8a:12:78:b7:a2:1a:01:8a:57:78:f2:fc:69:cf:63:e7:0a:a4:
         bf:30:91:28:93:33:d0:a9:15:0a:cb:96:dd:82:a7:cb:2d:8a:
         78:97:e4:2e:c4:a4:15:db:d1:fe:d1:75:89:ba:de:42:92:79:
         07:bb:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:59 2025 by rpki-client