Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa
File:                     b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa (raw, json)
Hash identifier:          bnwnckDJbLAtz+mA8hJZyCCI9cZo+R4K1G2A7i1Hcyc=
Subject key identifier:   8C:24:23:96:03:7F:9B:FB:A9:3B:3A:D7:44:88:DC:BF:EF:BC:6E:51
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285849CE9A44954714BFB67AD3B680
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     54781
IP address blocks:        66.60.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:44:95:47:14:bf:b6:7a:d3:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=f66ef727-da2f-44ec-864f-1391516ee92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:e6:e1:58:ba:71:56:0e:66:9c:33:fa:5c:
                    1e:6b:89:9b:1d:ef:74:45:df:cc:f4:77:8a:92:9b:
                    77:df:d0:0b:c6:a7:29:62:25:77:69:fe:1f:3a:29:
                    f3:fb:28:bc:9f:a6:90:75:fe:92:8c:05:a7:0a:b4:
                    51:cc:4d:12:7d:48:2a:a2:d5:a9:62:7a:49:0b:f3:
                    5b:12:d5:52:c0:b5:1b:23:00:82:5f:b9:1e:82:ce:
                    06:f3:1d:e6:83:8e:45:5c:c4:56:ab:3b:5b:2a:b2:
                    62:e5:10:53:63:88:bb:07:6f:b3:2f:d5:94:91:7e:
                    31:5e:9e:95:53:25:a3:06:54:0d:c8:aa:a9:a6:e3:
                    e9:eb:ec:21:62:e6:c9:6e:90:0e:3e:29:73:35:5b:
                    3c:c7:f6:a3:21:d4:03:1b:63:e0:ec:5a:4a:53:b9:
                    8a:c8:f7:78:2f:eb:3a:ae:94:c5:0c:e4:e6:01:b5:
                    26:1b:28:47:b3:eb:06:01:65:ce:ff:ad:0f:e5:bc:
                    9a:c6:6e:84:26:a3:b1:a4:7d:7f:6e:1b:64:c6:ae:
                    80:cc:04:d5:be:7e:77:6a:24:96:9a:8a:6d:49:1b:
                    0b:07:41:0a:a9:0b:1a:b0:3b:31:f4:5d:24:7c:3e:
                    29:f3:ac:40:64:6d:87:89:1b:58:11:2e:e8:48:f3:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:24:23:96:03:7F:9B:FB:A9:3B:3A:D7:44:88:DC:BF:EF:BC:6E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b7a107a0-878f-367d-a0fb-7cd8d24f9c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:05:48:b3:5c:db:36:11:7e:7a:d3:9f:04:33:c5:a7:c8:ad:
         88:68:81:f9:c0:ad:26:53:f1:b4:c1:0e:9f:42:dd:56:30:08:
         60:90:3e:50:32:91:1e:05:87:dd:44:5b:23:dd:15:d5:37:98:
         8a:b8:4d:3a:71:9e:98:f6:bf:58:69:b1:3f:d1:29:53:12:28:
         74:d6:a4:2f:31:c3:5d:55:d3:38:cb:ef:b0:1e:45:8e:40:ec:
         13:46:01:64:7a:03:59:0f:e3:c1:99:49:77:bf:fc:45:30:50:
         15:25:4a:cd:5b:65:40:01:84:dc:87:d3:10:d5:a9:a7:a4:9f:
         55:95:29:24:2a:84:f9:85:20:b3:33:40:d8:76:db:df:35:0b:
         4f:fd:aa:59:51:fd:16:57:bd:52:27:3d:4b:eb:2f:9e:80:b4:
         5c:e8:89:06:4d:10:1e:91:cd:52:47:73:74:0e:28:b9:a5:db:
         d9:a0:57:79:2f:6f:fb:b9:f4:95:97:9b:26:20:8c:9c:68:12:
         05:27:d2:b5:9a:c2:1b:33:25:98:04:b0:26:22:18:97:83:39:
         3f:3c:88:4d:79:52:bc:0d:d3:b5:cc:32:4c:8e:5b:8b:24:c3:
         43:8f:c5:76:17:07:db:17:58:01:7c:a3:2b:12:33:34:79:c8:
         1f:9d:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:58:06 2025 by rpki-client