Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ae598485-afe5-3119-8551-285eeea3a96b.roa
File:                     ae598485-afe5-3119-8551-285eeea3a96b.roa (raw, json)
Hash identifier:          6neXaOtPGRzwg1r6Sahq7imqpm5ybfmat4zAcdZW6kA=
Subject key identifier:   70:9C:DC:E8:53:9F:19:1B:5E:51:42:ED:3B:14:1B:66:5A:86:D2:86
Certificate issuer:       /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial:       010D0C9F4328584A3B7E73789E0598167C166F80
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ae598485-afe5-3119-8551-285eeea3a96b.roa
Signing time:             Wed 18 Jun 2025 13:08:14 +0000
ROA not before:           Wed 18 Jun 2025 13:08:14 +0000
ROA not after:            Tue 16 Sep 2025 13:08:14 +0000
asID:                     32688
IP address blocks:        66.6.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7e:73:78:9e:05:98:16:7c:16:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
        Validity
            Not Before: Jun 18 13:08:14 2025 GMT
            Not After : Sep 16 13:08:14 2025 GMT
        Subject: CN=73b6d03c-cffd-4e04-871f-5ff752e7d93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:9e:84:90:4f:e5:76:03:57:28:8c:f3:29:
                    6e:6f:5a:50:7f:4f:12:6d:ed:ea:e1:57:95:af:12:
                    cd:b6:32:2d:75:54:ac:93:d5:04:84:ae:bc:46:44:
                    85:ae:b9:a8:ed:48:df:b7:31:11:73:de:ca:f0:44:
                    e1:8d:bd:13:b8:51:a1:98:17:23:ae:20:68:db:9c:
                    fd:b6:92:1a:ca:70:43:ab:4a:6f:1f:06:3f:52:62:
                    43:c7:53:27:20:b5:44:6a:00:fe:bf:e2:9d:bc:81:
                    d7:d8:a5:97:16:60:5f:84:84:b5:2c:04:b2:8c:07:
                    87:46:f3:fa:7c:3f:f0:40:fc:54:cc:23:23:66:09:
                    f5:ae:51:e4:bc:78:05:f7:e1:40:0f:00:ef:eb:88:
                    b1:f8:e8:df:ba:0a:9a:73:89:6c:a4:fa:0c:5e:ee:
                    b6:65:7d:8e:8e:56:1b:32:31:58:2a:0c:7d:4c:5b:
                    4d:a1:cb:55:49:d4:c5:87:f1:8a:fb:48:f2:93:07:
                    d2:09:28:e0:48:83:ce:99:a5:76:5b:6a:56:a4:4e:
                    5f:f4:1c:26:cd:80:8a:b4:3f:b3:89:73:1f:a8:65:
                    f6:2d:e2:32:bc:43:b0:c2:df:96:70:1f:b7:d2:8d:
                    8d:9f:c3:ee:2e:a0:50:7e:bc:1a:fb:df:47:99:3b:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9C:DC:E8:53:9F:19:1B:5E:51:42:ED:3B:14:1B:66:5A:86:D2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ae598485-afe5-3119-8551-285eeea3a96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:84:7a:2d:f5:13:2a:b3:b0:67:a4:7e:8d:87:7e:e6:fe:eb:
         0a:01:e0:d3:31:ac:2f:b5:ff:2e:0b:ae:9d:dc:ff:13:5b:19:
         13:ae:ad:df:0b:4a:e3:2d:4d:7f:ac:a5:73:53:71:6d:39:20:
         00:7e:7e:c3:0c:b3:19:cd:c1:b3:cf:df:35:d9:47:82:2d:a0:
         3a:d9:f2:3b:17:03:45:21:7f:f2:e5:6f:eb:5f:6f:51:14:da:
         79:41:e2:0e:16:b2:05:74:be:72:bc:0b:30:8a:31:c7:31:e9:
         9a:4b:8d:41:57:9d:42:82:fc:d7:f9:6c:05:9e:09:f5:26:3a:
         21:be:46:93:29:ae:8a:53:11:60:fd:b3:6f:65:30:28:86:b4:
         c8:cb:fe:da:2e:e4:18:a9:49:d3:73:6d:99:01:80:69:39:6f:
         59:a1:42:9a:1b:4d:b4:24:b2:40:97:55:85:06:08:dd:ba:01:
         fe:33:f3:af:5b:7b:a6:ff:3e:7c:c3:cf:a2:1d:52:ce:d1:67:
         a2:ca:b7:17:8d:90:8f:1d:a9:82:f4:20:37:f1:9a:83:9f:8e:
         47:60:c7:c4:12:72:1a:36:50:05:e9:61:4d:7c:5c:40:e5:17:
         39:0f:06:be:f5:a0:b1:30:dd:95:83:2e:95:8a:eb:67:f8:1a:
         56:7a:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:35:31 2025 by rpki-client