Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/ed501a13-f89c-34a8-a2c2-8b33122b5ee3.roa
File:                     ed501a13-f89c-34a8-a2c2-8b33122b5ee3.roa (raw, json)
Hash identifier:          HV+K8WOGJqN5AeltxdZ/vhN70fcRdbYTdjjMn6MBLl0=
Subject key identifier:   AA:2E:DE:83:5A:CD:C6:A0:85:DE:DC:A0:AB:30:8A:77:71:6D:36:C9
Certificate issuer:       /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Certificate serial:       010D0C9F43285849C0AE44181A2231DBFDAA8780
Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/ed501a13-f89c-34a8-a2c2-8b33122b5ee3.roa
Signing time:             Mon 05 May 2025 13:20:09 +0000
ROA not before:           Mon 05 May 2025 13:20:09 +0000
ROA not after:            Sun 03 Aug 2025 13:20:09 +0000
asID:                     15149
IP address blocks:        66.199.224.0/21 maxlen: 21
                          66.199.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:ae:44:18:1a:22:31:db:fd:aa:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
        Validity
            Not Before: May  5 13:20:09 2025 GMT
            Not After : Aug  3 13:20:09 2025 GMT
        Subject: CN=0196d4e6-54bc-478e-8696-52c2b6b32f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:7a:1a:9c:65:19:98:ce:bb:f4:a4:48:7d:
                    3c:7e:6a:7c:08:01:fc:c5:e3:f1:fe:ad:8f:ae:71:
                    d0:e2:8c:a0:d9:f1:2e:08:f5:eb:cf:71:44:0e:24:
                    20:d0:f5:1f:89:85:58:16:60:5b:2a:1e:bb:29:b1:
                    2a:9e:7c:cc:d3:94:07:1a:c8:a0:e9:a8:30:9f:2a:
                    45:46:da:99:43:ec:f3:e8:d1:6f:b3:c0:fc:1d:4b:
                    62:4c:1f:7c:3e:f8:4f:b0:8c:25:6d:70:40:52:5d:
                    72:8e:3b:2f:73:cd:a8:b5:e2:17:56:f7:96:c2:0e:
                    65:0e:4d:4a:38:31:dd:ff:7e:65:64:7b:bc:08:0b:
                    05:8d:95:84:4a:62:8d:74:ea:1a:b8:a6:a1:bb:7e:
                    ea:28:9f:f5:a8:4d:2b:29:eb:68:23:84:24:6d:76:
                    71:a0:70:ca:9b:9d:72:54:05:bc:bd:6a:f5:11:8b:
                    ab:f8:65:e6:7a:50:4e:70:e5:fd:d5:66:25:37:07:
                    82:75:28:a3:de:e0:33:0b:53:f7:31:31:8a:32:1d:
                    aa:8c:50:b2:3d:6f:34:74:a4:47:0a:0e:3a:d4:49:
                    d6:a4:c1:79:57:71:e6:fc:c2:c9:9c:a7:be:97:7e:
                    b7:b9:c2:43:63:85:11:b1:b4:05:8d:5b:81:a4:7c:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2E:DE:83:5A:CD:C6:A0:85:DE:DC:A0:AB:30:8A:77:71:6D:36:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/ed501a13-f89c-34a8-a2c2-8b33122b5ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.199.224.0-66.199.235.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:66:d8:27:f0:12:43:dc:ec:6d:2f:37:51:23:c8:ed:ca:
         a6:72:1e:f4:b1:fd:94:46:90:b9:16:ae:4b:50:15:5e:cc:28:
         74:bd:ee:4e:43:82:13:12:14:d1:49:4f:d4:05:9a:9f:73:d9:
         0c:8b:b4:5e:7f:4d:1f:29:cc:af:76:fb:fb:c3:7e:76:13:86:
         6a:d7:14:be:83:4f:6c:10:19:2b:ab:cb:43:91:7e:70:89:9b:
         a3:8e:ce:58:f5:18:7b:77:92:4a:62:ec:d6:91:26:89:b0:4f:
         9f:27:b0:06:0f:ea:2b:31:2d:13:50:2b:83:85:d8:08:e1:11:
         93:98:95:32:2c:e6:01:c8:36:32:e0:d6:ca:c5:e5:00:90:54:
         de:60:f5:9c:83:3a:10:3a:6f:00:5f:f1:73:2e:eb:37:74:8c:
         76:bb:e8:7e:8d:6c:4e:41:3c:53:3d:ac:c5:e0:aa:d5:3f:aa:
         b6:53:c4:50:88:cf:53:57:8b:d9:6b:a5:c2:f4:33:2f:c0:bd:
         21:aa:a4:73:fc:f4:80:2e:bd:fd:04:cf:88:0a:ee:42:b1:45:
         e6:2e:39:7c:13:4b:45:cb:0a:12:d7:83:03:47:fc:bd:0f:cd:
         b7:bf:ee:0b:e4:fe:f2:f8:5f:ec:0c:36:e8:30:f6:4e:78:03:
         82:8c:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:12:06 2025 by rpki-client