Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
File:                     366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa (raw, json)
Hash identifier:          BxkP8plugGGa2h4IApHo87MI+WjmewZSM82OrtgTYOA=
Subject key identifier:   12:92:C3:1E:FA:D8:DB:5D:B3:55:FD:38:F9:A1:50:E6:B7:B3:C8:90
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584A3A1576899DA8793E96364900
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     19844
IP address blocks:        68.67.64.0/20 maxlen: 24
                          198.205.112.0/20 maxlen: 24
                          199.102.64.0/22 maxlen: 24
                          216.238.144.0/20 maxlen: 24
                          2605:d100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:76:89:9d:a8:79:3e:96:36:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b1a905af-bb1b-41e7-a205-28db0ada63c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:bb:c8:f5:76:ba:61:75:af:9f:19:6b:ff:
                    1c:1e:db:b9:32:af:27:3a:35:7e:94:e7:07:8f:af:
                    0e:72:2e:3a:36:bf:45:ba:e3:14:bb:40:a7:8e:76:
                    b6:c1:c0:b1:82:59:79:e2:d5:f2:00:6d:79:cf:b6:
                    f9:3e:e0:b2:51:fb:13:89:79:48:7a:ee:87:10:be:
                    80:f6:2a:30:20:55:de:21:5c:53:02:12:95:1f:d3:
                    f9:7d:f0:d8:d0:81:6a:3c:4e:44:fe:77:38:3e:de:
                    73:44:e9:68:29:6c:cb:34:5e:5d:8e:30:7d:ad:4e:
                    b7:35:8f:4f:76:de:a8:b1:8f:6e:f5:c6:d7:ce:21:
                    df:c7:3d:35:d3:15:42:bf:f2:3c:08:0e:84:10:f3:
                    fc:d7:0b:26:eb:88:dd:51:bf:40:30:c1:e1:f6:5e:
                    3d:72:fd:e7:14:e0:fa:c4:31:09:22:eb:22:1e:34:
                    d1:29:76:5d:e5:95:d0:d5:0a:e9:2a:5d:2c:7b:84:
                    09:9c:d9:ed:43:10:e0:27:54:67:17:b5:bf:27:17:
                    ea:06:06:51:55:c1:4e:4f:8d:49:be:21:6e:e8:3f:
                    39:f3:bd:4a:99:97:67:9b:4a:b5:4b:e4:ac:84:c7:
                    58:44:06:93:c4:26:ca:0f:ee:e9:dd:80:81:29:65:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:92:C3:1E:FA:D8:DB:5D:B3:55:FD:38:F9:A1:50:E6:B7:B3:C8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.64.0/20
                  198.205.112.0/20
                  199.102.64.0/22
                  216.238.144.0/20
                IPv6:
                  2605:d100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:db:04:a3:07:ef:1b:13:5c:aa:f3:8a:82:52:c3:33:57:
         20:49:cc:0b:47:3e:3d:9f:14:f8:91:f7:53:8e:ca:55:4b:9a:
         d8:0c:3e:72:d4:c7:bd:4e:cd:84:c0:29:2e:09:95:e1:71:3e:
         6b:5a:a0:05:d3:5a:d7:d9:c9:80:8d:12:e8:e8:f7:0a:4e:4d:
         5c:12:56:a9:3e:a1:37:8b:02:f4:f6:01:8d:e4:90:0e:71:0c:
         0d:94:2e:cd:99:04:be:16:4c:ce:da:6e:c3:da:3d:af:49:e6:
         66:14:8c:d1:b8:9b:66:c7:f5:71:5c:a4:58:3e:b2:e0:4f:86:
         26:e5:f9:0a:85:3c:d9:ec:dc:0f:20:49:63:92:4e:d6:9c:61:
         58:a9:9d:7d:bf:25:84:f2:ec:03:cf:b9:20:0e:55:72:bc:a5:
         a8:30:a5:c8:f1:9a:de:d0:90:6f:5a:6f:ee:7e:ae:b5:97:0d:
         52:9a:08:9e:12:53:aa:36:0e:10:dd:73:c6:b0:b7:38:55:6b:
         d0:15:a7:df:56:3a:71:13:9f:e4:4c:01:e1:f9:27:76:68:d3:
         8d:b9:db:dc:73:16:59:4a:79:9c:7a:5d:99:b3:44:52:86:c6:
         0e:5e:a5:53:12:8f:d8:4f:8a:3e:a0:fa:e3:e6:de:c7:2d:44:
         4c:30:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:38:43 2025 by rpki-client