Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e9912fe-c007-388a-8ee3-e874128890bc.roa
File:                     6e9912fe-c007-388a-8ee3-e874128890bc.roa (raw, json)
Hash identifier:          0Rq7xa1U1Q8aIs2mCY6ljsPfsElQan8LKjkqmWgIYic=
Subject key identifier:   26:A3:F9:A5:C2:C7:F4:1F:D3:B8:7D:24:F0:79:07:67:D5:76:D2:5C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A492C8BF95BB36BE06FA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e9912fe-c007-388a-8ee3-e874128890bc.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     22312
IP address blocks:        66.35.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:49:2c:8b:f9:5b:b3:6b:e0:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=6a26225e-7b54-4b58-b988-6df68606c625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:5c:b8:59:09:d5:ef:b5:76:da:0d:a1:08:
                    ce:7d:91:33:31:07:eb:53:c6:fa:c3:77:68:2e:78:
                    64:f4:51:48:ad:50:55:eb:5e:91:ee:2a:2d:73:40:
                    aa:05:8c:f2:c7:50:5e:38:ed:3e:66:41:9c:8d:c0:
                    4f:31:87:65:a6:4d:9e:d1:59:7c:b8:c5:25:a9:98:
                    25:7e:d5:94:37:14:22:d1:b9:a5:32:2a:0b:f5:c6:
                    f0:e9:33:63:b1:69:2f:40:bf:89:23:35:8e:1f:14:
                    31:87:a8:35:73:ae:58:05:f9:44:35:2e:0f:1c:a0:
                    8e:7d:6f:e8:9b:72:f5:2b:a7:45:cf:84:47:92:35:
                    91:76:d2:b6:83:06:dd:22:a3:69:21:cb:57:ce:11:
                    5e:0f:71:2e:05:e8:ba:22:ec:8e:cd:57:30:49:9a:
                    c5:49:de:8e:40:44:6d:60:76:0c:42:5a:fa:6e:9b:
                    e9:48:7f:d3:d7:c0:c4:32:11:34:78:0a:7b:1f:d5:
                    b0:38:5d:1f:f6:f9:d0:c1:b1:5c:51:50:53:1b:e6:
                    42:67:26:31:70:35:01:42:a6:88:d8:4d:fb:b7:fa:
                    72:90:f8:d3:78:97:a5:7e:c6:89:74:5e:c4:36:aa:
                    4c:1c:9a:9c:36:6f:1c:68:00:31:40:d2:65:f1:b3:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:F9:A5:C2:C7:F4:1F:D3:B8:7D:24:F0:79:07:67:D5:76:D2:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e9912fe-c007-388a-8ee3-e874128890bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:c1:0a:ee:ce:4d:ab:5d:b1:ab:87:09:bf:6f:cd:3a:78:
         42:b5:f8:65:d3:e0:d1:fa:c6:77:6c:04:84:60:0b:56:af:42:
         2b:ce:0f:61:91:6d:aa:9f:2d:f6:40:9d:c6:ae:5e:91:79:74:
         5c:6c:af:f1:8d:c4:9f:e4:ff:75:c3:66:2d:00:56:8a:1e:14:
         6d:cf:7d:5c:41:00:96:07:3e:3b:4c:c2:06:30:69:95:d6:fd:
         94:f6:df:d6:5e:4f:17:40:94:1f:3f:dd:f2:90:83:17:6c:3f:
         5b:0f:b8:37:99:9c:3f:24:50:04:0b:31:40:0e:b8:17:7d:a4:
         00:46:c5:1f:f5:e2:0c:9e:b1:80:60:ba:67:2f:29:a1:fb:c3:
         1c:bf:bb:cd:be:fd:6a:56:2a:f4:33:75:54:ef:76:a4:ae:a5:
         6f:9f:10:b9:45:a4:cd:3e:a4:9c:1b:8c:d7:24:e8:8b:83:09:
         07:86:d5:9b:4b:67:3c:e6:ba:db:75:61:6b:fc:54:88:f1:e4:
         b9:ad:69:35:83:9e:c6:2a:56:f3:72:db:df:2f:83:4d:d9:c8:
         c2:82:be:70:11:0b:31:d5:47:50:35:b2:86:a4:41:13:3f:8a:
         4d:70:56:8d:c6:1a:3c:c6:a3:e0:09:a0:b3:f0:29:91:c2:19:
         e2:64:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:20:17 2025 by rpki-client