Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
File:                     a4f11c39-9bea-3f49-a34f-41186754ac5f.roa (raw, json)
Hash identifier:          Hms7UySWaU4bt7+/SpYVkGrdsHg+ByseVpX+HuAlUHg=
Subject key identifier:   ED:9A:E0:1E:78:0E:0F:99:D9:47:73:10:C5:36:73:6C:CD:D8:F2:A4
Certificate issuer:       /CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Certificate serial:       010D0C9F4328584A4F8DEDBEF3D5A78881E22E80
Authority key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        207.66.104.0/24 maxlen: 24
                          207.66.105.0/24 maxlen: 24
                          207.66.106.0/24 maxlen: 24
                          207.66.107.0/24 maxlen: 24
                          207.66.108.0/24 maxlen: 24
                          207.66.109.0/24 maxlen: 24
                          207.66.110.0/24 maxlen: 24
                          207.66.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:8d:ed:be:f3:d5:a7:88:81:e2:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=2a47b5b4-0be3-432a-925b-c033b6316efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:d6:54:40:79:3f:8a:5b:13:8c:b4:7c:8a:
                    d7:ab:74:8f:5f:82:54:6d:e3:73:16:d3:70:02:89:
                    d4:18:80:2a:c6:5d:1a:6a:03:0d:e7:bb:7f:45:10:
                    de:e4:ba:e7:11:ec:f1:76:d7:37:47:01:27:95:bb:
                    59:95:96:6d:02:0b:e4:aa:e6:8e:13:e5:f7:b4:0e:
                    d8:c9:51:5f:50:81:d7:4b:2f:22:49:ec:bf:52:f8:
                    f8:02:8e:05:aa:7a:1d:24:47:d5:08:f9:62:62:0d:
                    b5:6e:d6:8c:9b:0a:a3:8b:d2:3e:45:37:ac:99:8b:
                    28:75:2c:8e:92:51:b8:4a:34:2b:09:04:e5:c9:84:
                    b7:bd:3d:7e:e7:ae:9b:14:00:ff:85:dd:41:c2:21:
                    75:d3:f7:d3:f3:72:57:29:30:f6:bb:81:e9:c6:b4:
                    b7:ee:66:36:9b:5b:90:0d:b9:5b:85:47:48:8f:d6:
                    c5:54:39:0c:7f:ba:9a:63:12:27:d2:69:a5:fb:07:
                    f3:c4:3a:88:24:da:0f:d1:c2:dc:dd:7a:b9:5c:6e:
                    20:41:76:20:df:87:53:47:72:61:16:f6:6b:90:e1:
                    22:b6:0f:f9:94:00:b1:ab:9d:3e:f3:c6:f5:b9:ab:
                    21:83:2f:44:15:ea:3c:f1:94:e9:14:18:01:53:66:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9A:E0:1E:78:0E:0F:99:D9:47:73:10:C5:36:73:6C:CD:D8:F2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl

            X509v3 Authority Key Identifier:
                keyid:5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:33:be:5a:3e:b8:c6:74:68:89:4f:a7:28:40:de:e8:aa:e8:
         cc:57:2e:a0:7f:b1:3f:40:6f:c8:a9:b6:38:e2:4d:81:4c:69:
         a4:e6:3e:26:84:75:43:14:38:f8:79:15:9e:2f:96:07:e8:ad:
         7a:36:2b:eb:d4:ad:e3:88:b1:24:ac:4a:15:de:5a:48:38:c2:
         5b:83:89:aa:44:ac:fe:6f:d4:10:02:21:0e:69:85:1c:06:62:
         cc:1b:61:29:9c:5f:38:66:f1:81:08:63:0e:b8:f9:d8:f4:7d:
         36:05:7d:32:6d:6f:30:68:3c:3d:0e:70:b5:45:23:5d:22:df:
         a9:0e:d6:0f:1e:58:a0:ca:75:df:6c:b9:a8:eb:1a:16:fb:4a:
         d3:61:5e:9e:5d:4f:76:6d:20:67:30:06:5b:59:5d:da:ab:6e:
         1c:13:6a:b7:97:a0:8a:12:88:94:f9:0f:c7:a6:ac:a8:39:71:
         e0:d9:d0:ef:2f:93:5c:15:3b:60:01:05:f2:5e:f5:e2:ab:1a:
         eb:bd:f1:c1:2d:89:2f:3a:7f:22:d7:f9:f1:58:b8:11:34:5e:
         9f:e0:8b:fd:83:5f:67:59:a2:80:35:d1:1d:d4:c0:0e:3e:d3:
         cb:6c:75:c6:84:17:92:13:6e:f1:15:59:89:bb:07:81:98:3f:
         e3:3e:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:19 2025 by rpki-client