Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa
File:                     8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa (raw, json)
Hash identifier:          DwbpdwDjWQjTTyS+Cseaq2DuhAnh+e+9JNdFYDM5roY=
Subject key identifier:   2C:C0:02:79:D9:45:B4:46:0F:76:0E:CF:11:28:D4:94:9A:7F:EE:60
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F43285849C0A4DE8C5493ADB1B8A2D500
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     394044
IP address blocks:        66.180.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:de:8c:54:93:ad:b1:b8:a2:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=47bbac9e-7140-4e5a-a7d9-bc2db9646647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:32:a6:c0:8a:f6:08:0d:55:f1:3c:ae:62:
                    03:b0:b6:31:4d:1c:39:ac:b4:47:36:5e:c8:e5:28:
                    37:d5:5b:76:8e:c4:4c:bb:a7:fc:ff:2e:27:f6:6b:
                    9a:ce:ed:77:d3:e9:51:bb:a8:a6:6a:3f:61:8c:ac:
                    78:4d:b9:be:ad:6c:5f:e1:a8:72:c4:3d:18:69:c3:
                    83:b9:74:3a:12:b2:0b:01:e7:4c:d1:7f:c4:af:f7:
                    46:a9:6e:80:f0:5d:4b:4e:3b:49:56:40:bb:8a:30:
                    b2:48:f6:2d:02:8c:a2:f2:aa:83:58:f1:7f:fc:8c:
                    cc:b5:09:90:7d:4f:62:af:52:bb:20:f8:86:25:ec:
                    9f:b0:d8:f5:02:2d:fa:6f:9c:c8:ec:6b:79:c4:ec:
                    3a:d4:90:7c:5d:9e:54:7e:4e:f3:13:76:ed:49:6d:
                    c9:ba:63:ee:ca:7a:d9:00:b9:96:1f:d0:97:24:5f:
                    23:25:fe:97:9d:b6:37:62:79:e7:e1:46:99:a1:8c:
                    3b:e7:bb:ed:0d:a9:36:b9:6c:a7:f1:57:2e:13:4e:
                    59:64:74:54:18:b2:6c:2c:98:24:40:34:f9:fd:5f:
                    2b:f7:f1:c6:10:df:cc:33:2c:55:61:18:b7:0f:56:
                    9b:11:04:bd:bb:80:13:56:25:fb:b7:62:81:d1:57:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:02:79:D9:45:B4:46:0F:76:0E:CF:11:28:D4:94:9A:7F:EE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8e79e3ba-90dc-3ae6-bf98-21b1f4ec107b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:fb:e0:54:5b:ab:58:e0:24:f0:9f:c5:ee:f0:9e:c4:83:
         b1:b4:1c:12:b6:6d:f4:22:5b:66:48:d4:51:46:9d:94:57:df:
         57:30:82:c7:31:b8:05:e9:f7:0c:7b:f8:35:ba:1b:ac:f6:5c:
         3a:60:e4:9d:e3:6b:55:54:22:20:23:ad:6d:e7:6d:dd:fb:89:
         0a:a3:fc:40:75:a5:3e:1a:2f:12:59:af:72:02:52:ab:71:1c:
         d1:c4:f7:4f:39:71:a1:f6:c5:4d:5a:aa:23:09:4b:c3:52:0f:
         1e:66:ce:0e:ec:0a:95:1a:17:7f:73:6c:09:3d:da:74:8a:94:
         94:14:9a:da:c6:e7:4e:66:95:43:d4:11:1d:56:9d:70:1e:6c:
         1d:cb:82:cf:50:a0:41:53:48:6a:cc:b5:09:7a:69:fd:26:4c:
         8e:a8:01:b2:36:51:4d:64:2f:79:f8:67:7e:ed:79:fc:3d:d9:
         de:66:37:5e:79:49:83:4a:65:9e:55:c5:a3:76:5d:4f:b6:dd:
         0b:13:84:e7:67:54:e2:d9:b3:ed:97:b0:55:e1:8b:7e:a2:71:
         ab:f1:58:b9:37:ce:2d:66:f3:78:6f:0e:b5:70:f2:04:04:53:
         73:a5:8b:f7:88:7a:a1:bc:32:58:7e:46:94:82:1e:75:f5:f4:
         33:98:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:16:17 2025 by rpki-client