Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
File:                     ada8083d-f38d-3f27-99a2-b33c58b226ac.roa (raw, json)
Hash identifier:          ZMOJLFrgpIvRxA5D0A/p03NuAzuWUuQmxV8MWA8AN8Q=
Subject key identifier:   77:A3:C4:CD:6C:3B:D9:BC:34:80:F4:93:40:5A:18:83:B5:EF:1F:06
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AF0F14302CB8F220DA0B8B800
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     395591
IP address blocks:        66.206.199.0/24 maxlen: 24
                          66.206.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:43:02:cb:8f:22:0d:a0:b8:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=91087926-1bb7-4c57-8621-5d31b733e9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:4c:ee:3b:45:f2:38:8c:a7:1e:e7:e5:50:
                    24:f4:a4:c3:45:34:c7:b7:59:37:ae:ff:fc:8a:3d:
                    65:4f:c7:ac:84:b1:55:a4:f1:3a:92:0d:03:33:17:
                    15:24:7d:31:9c:fa:9c:e7:48:7a:46:4e:8d:38:e9:
                    98:d8:6d:12:c0:d5:b5:0d:c1:9a:8d:e7:4a:37:8f:
                    e1:29:43:23:43:03:d8:95:ec:80:3b:80:fc:e3:04:
                    3c:4b:00:fc:0f:8f:d7:c8:fa:e9:ea:a4:56:0b:7e:
                    35:75:4e:d0:ef:76:31:b8:e4:48:d2:bb:32:5f:d8:
                    15:84:a3:d4:f7:58:c8:e5:8e:03:fb:80:32:c3:84:
                    ff:25:dd:e4:f5:1d:34:1f:64:7d:3a:e4:dc:79:f2:
                    85:b1:7a:d1:de:9b:52:51:85:19:0a:da:70:43:15:
                    e8:70:15:6a:e7:08:d7:d6:13:8d:b7:fb:8b:58:29:
                    bb:36:ad:f2:6d:1e:c6:a7:55:fe:1f:67:67:26:79:
                    a3:b5:1c:11:31:e4:d6:2f:11:3c:c8:50:80:4f:14:
                    4f:4e:40:eb:ed:25:22:ea:13:55:6a:d8:ee:c0:fa:
                    12:a1:a7:5c:79:c3:2a:01:1a:32:de:8e:50:2f:a6:
                    33:3f:0b:44:c4:ea:5e:36:dc:b7:e9:f2:6f:0a:f8:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:C4:CD:6C:3B:D9:BC:34:80:F4:93:40:5A:18:83:B5:EF:1F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/ada8083d-f38d-3f27-99a2-b33c58b226ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.199.0/24
                  66.206.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:c1:a4:cb:8b:a7:f0:ce:88:e7:67:78:cc:33:da:29:09:
         e4:8d:8d:9a:43:70:9a:35:23:aa:62:cd:02:11:69:bd:ee:cd:
         29:bb:17:a9:13:93:ab:ed:5f:48:c4:8f:5f:ab:c3:62:6f:ee:
         4a:6e:59:09:a0:c7:6c:28:1e:c6:5e:64:c9:20:1b:54:cd:8f:
         bc:59:b6:30:d4:ec:86:f9:f3:d4:c8:bb:ad:38:2f:16:b1:7e:
         bd:c4:e9:35:fe:16:5a:61:7b:f2:42:90:a2:8c:82:f2:49:24:
         7a:e4:b6:51:f7:b9:23:86:a4:83:a2:f9:92:55:98:10:a9:dd:
         ad:b7:ea:48:bb:20:76:d3:d0:b7:f2:ca:c3:92:74:66:41:47:
         8b:bd:8f:03:c1:c2:c9:04:f4:02:4e:95:35:e5:dd:b7:fa:01:
         1c:92:5d:c3:ac:e5:2e:73:d3:0b:ad:7e:c9:23:99:93:76:6f:
         17:6e:d0:58:13:06:fa:da:52:b4:5a:cb:d6:03:91:27:2c:97:
         05:fb:59:56:d1:fd:68:40:84:73:6d:01:7c:f9:d0:3e:26:52:
         ce:2b:bd:cd:a0:77:7f:5d:33:a3:87:08:d8:39:3c:3c:3f:75:
         e7:4d:98:cd:b9:dc:ff:07:a9:1e:6c:62:0e:5c:dd:01:f2:91:
         4c:e9:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:07:03 2025 by rpki-client