Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa
File:                     645ea1a4-621d-3847-9490-c2db7670fa6f.roa (raw, json)
Hash identifier:          0IP4wK7vfXNnW3Oy9hvbWfoHzhp/5KumI19L3WbLjqQ=
Subject key identifier:   B8:06:8B:76:5C:EC:85:19:2E:FF:DB:10:EA:C0:C4:A3:05:21:E5:FC
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F43285849F9DFC55A3CB14AB0CF78AB00
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     394708
IP address blocks:        66.209.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c5:5a:3c:b1:4a:b0:cf:78:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=4307ad0d-b6c9-44bc-8752-f5cb9e4f4942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:5a:27:d4:af:02:e1:dd:12:c0:57:9e:eb:
                    c9:38:0f:a3:d1:97:34:83:1e:1c:a9:d5:04:d5:d9:
                    3f:0e:2e:22:75:94:4b:bb:87:6e:6c:71:a1:66:a3:
                    9c:f7:e0:94:e9:21:58:b2:f1:fc:14:4e:19:e6:8a:
                    a4:f5:e1:55:c8:08:c9:a3:79:2e:70:95:a1:62:52:
                    59:f0:ef:d6:46:c7:4f:26:33:91:c6:c3:61:9b:2c:
                    1f:76:9d:06:49:75:c5:4a:8e:54:83:a3:dd:19:f8:
                    ed:ff:45:97:88:93:88:6b:5d:76:2a:84:b4:40:ab:
                    a4:a5:5f:e8:f2:59:7f:07:08:47:63:19:70:3b:d9:
                    de:89:59:fd:ad:f8:ae:77:fa:1c:83:00:67:b8:60:
                    38:6d:05:af:ed:2d:0e:0d:51:f0:88:07:b6:9f:f4:
                    59:94:ca:42:c5:5a:1d:ab:ec:0e:31:3b:8a:ab:f0:
                    8e:d4:ab:17:05:43:92:54:c4:fc:8c:1b:b2:18:0e:
                    30:1a:2c:ca:ca:ff:95:e3:85:8f:0a:d7:86:70:fd:
                    a4:79:7d:1d:a9:d9:31:03:8d:eb:06:c0:bd:af:f9:
                    d2:31:df:f6:31:ca:5c:39:b0:8a:35:8e:8a:c8:74:
                    28:ba:45:7a:6e:36:ac:3b:89:14:29:22:0f:4d:de:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:8B:76:5C:EC:85:19:2E:FF:DB:10:EA:C0:C4:A3:05:21:E5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/645ea1a4-621d-3847-9490-c2db7670fa6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:a3:4a:b7:e9:31:ff:10:0d:a3:ec:fe:57:85:db:8c:1a:
         6e:99:b4:f7:ec:29:d8:8e:9c:81:52:82:4a:4a:16:84:f9:2a:
         ae:10:05:9b:31:49:d3:d6:8a:41:58:2a:e5:2c:9f:97:b8:31:
         7b:d5:9e:d0:8f:26:77:ce:a3:a6:f7:9c:d1:cd:69:a9:64:84:
         15:e9:a4:a2:a9:dd:b5:e9:fb:3f:d2:6e:72:25:f8:ef:b5:7d:
         6e:23:bf:6b:ff:8e:4e:97:a4:46:97:1c:7d:1e:32:da:a4:b5:
         44:e2:29:56:50:cc:68:4c:fa:51:03:7d:34:5a:33:96:27:f9:
         bb:cc:b1:4d:00:28:2b:cc:0f:65:bf:4f:56:c0:4f:44:63:37:
         fd:19:c0:c1:fc:63:e9:97:3f:4a:31:39:05:92:2a:05:5a:20:
         19:af:43:c7:f1:03:97:a3:46:fa:9b:44:5f:33:18:ca:8a:50:
         a9:c7:dd:41:d8:5d:87:74:c9:cb:72:92:a1:14:83:a3:54:52:
         75:03:fe:7c:fd:ff:cc:57:21:36:07:85:e4:74:e4:94:2d:98:
         d5:3d:b3:46:ff:cf:18:8e:41:c6:d5:03:ce:93:6a:e3:4b:cb:
         58:ac:46:90:8c:14:eb:45:22:b5:a6:3b:63:41:67:4e:b6:39:
         be:16:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:31 2025 by rpki-client