Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
File:                     f05bddbd-66de-36a2-be24-ae30e4826c09.roa (raw, json)
Hash identifier:          oJmbmadM8MhEN6qfvyp2xndRo+hCG7/vGQnXdU5U4gE=
Subject key identifier:   3E:C4:FE:A7:A7:CD:F6:2C:4E:0F:50:03:AD:CE:D0:EB:03:34:7E:B4
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584AEE2696004E8CEF47A0496B20
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     1742
IP address blocks:        192.5.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:96:00:4e:8c:ef:47:a0:49:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=10870217-a3c0-4f05-87be-339187e408d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:57:3b:bf:86:a8:6b:65:4b:f1:12:b4:af:
                    c1:d9:63:93:ae:b9:14:11:e8:06:6c:a1:1b:d9:a6:
                    40:69:cd:4d:e5:89:41:9b:56:26:23:f4:57:c7:c3:
                    dc:7a:2b:18:5c:ef:63:6d:8b:f5:a0:13:0c:f3:d0:
                    d4:12:29:53:6a:3f:56:ac:7d:c8:89:0c:a2:9a:20:
                    bc:ca:1a:35:2a:8e:9d:52:08:c5:85:30:57:6c:13:
                    21:98:6e:17:a1:44:a2:a0:ac:66:d7:80:d9:87:3e:
                    ab:68:db:0e:96:17:45:56:1a:25:7b:e6:21:ab:bf:
                    d5:98:74:c3:bb:5c:06:32:4d:f0:31:94:78:58:c7:
                    73:71:62:43:32:90:d1:36:ca:26:47:db:cf:87:e6:
                    7b:1b:9f:03:8d:d1:51:06:12:f3:85:16:2d:ba:b8:
                    58:66:47:c9:da:68:6c:c7:a1:d2:89:46:56:58:e1:
                    7c:13:54:5b:ac:c0:a1:04:fe:e1:61:f9:d3:81:b4:
                    72:f5:19:e7:97:94:41:97:f1:58:be:3f:6f:06:15:
                    ff:44:4b:76:dd:05:09:de:65:49:5d:27:f3:04:bd:
                    01:9b:26:9d:cb:5c:42:33:c3:54:3d:6c:97:14:c9:
                    c5:48:73:75:36:37:0e:71:db:6c:58:c9:bf:60:c3:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:FE:A7:A7:CD:F6:2C:4E:0F:50:03:AD:CE:D0:EB:03:34:7E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:a5:c9:3d:e0:45:38:8a:25:81:9b:db:93:e5:e2:fc:43:
         96:85:a8:ec:95:f2:80:0c:07:b6:72:d8:4b:2d:d2:43:d3:b0:
         b6:32:8d:f3:11:de:c4:f9:66:27:da:c2:eb:6e:d5:d1:0b:eb:
         0a:ac:48:ed:0b:4b:9b:1f:28:3c:eb:00:1a:23:6b:a7:8f:c5:
         1c:42:03:f7:a9:79:13:f4:b8:80:64:a8:e0:b3:1d:b2:1c:91:
         a1:2c:01:31:f5:45:90:90:b5:4f:50:69:a4:a4:ce:e0:a4:1d:
         84:e7:c2:e3:3b:94:7b:b4:86:6b:5c:f9:c6:1d:a3:25:3d:81:
         83:ca:54:7f:4f:d3:d1:01:08:4b:86:7c:a8:a4:93:a8:5c:3a:
         01:da:b0:b7:cb:45:77:d9:b4:52:04:bb:07:c9:59:76:76:8d:
         66:f1:de:7e:aa:a5:c7:3a:45:5d:67:f3:f2:cd:78:44:ed:d9:
         7c:77:7d:41:e2:e1:b9:15:21:6b:e1:29:9c:7b:2b:b6:7e:e5:
         bc:a7:70:98:76:09:85:a0:77:18:bb:06:63:ee:87:5f:12:1e:
         b2:59:0a:b3:1b:04:f5:e1:7a:c0:db:ac:79:87:b9:e2:19:c9:
         61:1e:21:4b:f7:b5:29:e4:0e:69:92:ea:9b:1e:2d:69:af:de:
         fa:aa:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:44 2025 by rpki-client