Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/f8b4b0f5-e8d5-3e71-b8c9-5ca67d1f56e4.roa
File:                     f8b4b0f5-e8d5-3e71-b8c9-5ca67d1f56e4.roa (raw, json)
Hash identifier:          WeL4+hHuV8AxB++nxLpdBw/KckfWMILzmIvY15idkVU=
Subject key identifier:   0B:8C:D3:41:95:41:A3:A3:B8:AC:DE:51:29:CD:A9:E6:41:36:C2:71
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584AE4612979E1966ACF20677130
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/f8b4b0f5-e8d5-3e71-b8c9-5ca67d1f56e4.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14593
IP address blocks:        66.9.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:29:79:e1:96:6a:cf:20:67:71:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=04b480a6-d2b2-43b1-9989-41370f9b4d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:29:c0:ed:91:cc:45:2c:52:30:70:c4:ce:
                    e8:10:41:8f:d2:71:04:22:46:57:3a:c8:76:8f:e5:
                    48:ee:78:86:c9:5f:7d:07:41:e1:c7:4c:c3:f2:22:
                    83:7c:66:4b:f3:11:55:f5:11:3b:78:57:10:32:fe:
                    e1:e3:bf:bc:30:82:96:6f:53:65:4b:8c:cd:26:37:
                    0c:5a:69:da:f8:08:b5:df:4a:62:58:c3:ac:20:ec:
                    d6:a1:0b:bf:59:b9:6b:32:68:c2:2d:0d:53:25:80:
                    d5:51:fa:d3:ef:b9:eb:23:19:7c:e4:df:1e:45:32:
                    8c:e1:e6:47:e1:2d:99:02:13:7b:a4:f2:71:96:68:
                    b1:44:5f:89:7b:39:f2:b7:21:95:da:e9:60:e8:ca:
                    eb:aa:1f:a8:e6:b7:ae:8c:c1:f0:4d:3a:1e:74:3e:
                    e9:e7:7e:79:cd:1b:8d:e0:51:3f:ea:3b:98:ba:58:
                    3c:f6:63:d6:de:20:ef:2f:6f:69:21:fb:ac:5d:19:
                    df:2a:fa:db:2b:5f:f3:47:15:2d:c9:c8:55:4d:5b:
                    bc:4c:b6:87:15:16:c7:35:81:f6:7a:c0:b7:73:0c:
                    a4:23:f9:08:25:3e:ed:f7:7f:9c:0d:a9:88:4d:e8:
                    a1:9c:0f:a1:fd:5b:80:88:6c:f4:de:51:b8:12:3d:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:D3:41:95:41:A3:A3:B8:AC:DE:51:29:CD:A9:E6:41:36:C2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/f8b4b0f5-e8d5-3e71-b8c9-5ca67d1f56e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:ac:30:f8:40:16:ad:4e:c9:45:7e:f4:6a:88:32:99:ad:
         8b:5f:ce:f0:36:ae:50:b7:68:6d:7d:a9:d3:aa:e7:bf:73:85:
         e4:c4:dc:4a:16:8e:53:5e:cf:8c:5c:56:b6:f4:42:d3:18:2b:
         c5:14:d4:9d:43:9d:03:44:67:8b:d0:a1:7a:96:0e:17:77:88:
         96:eb:aa:47:5f:78:d9:24:f2:c0:59:30:77:38:7c:0f:8c:19:
         ce:d3:16:3c:4f:97:e8:9a:22:ea:ee:0b:70:53:22:f1:ce:95:
         a9:d6:61:14:d4:c6:7c:1e:31:4e:a2:5b:17:e6:e4:5d:e4:26:
         4e:c3:7a:65:07:d0:bd:02:80:ad:a9:93:eb:ad:3d:2e:34:54:
         77:c2:ea:a5:0e:d1:3e:2d:37:d7:1d:37:03:14:35:c2:63:a9:
         3e:be:87:de:57:a7:d7:db:28:2b:a7:13:a4:43:e6:68:fd:d4:
         db:d8:69:96:8b:30:4a:9b:cf:44:eb:9c:a1:43:92:7b:e4:ad:
         b1:cd:4c:78:68:5f:13:51:2f:da:0d:6d:af:2e:99:21:44:85:
         5c:45:36:8b:f1:87:92:68:80:bb:11:d7:6d:a3:6e:4a:a4:9c:
         e9:f9:b7:19:7c:bc:b4:1e:43:b8:1e:55:06:11:f9:1a:a7:74:
         37:bf:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:56 2025 by rpki-client