Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
File:                     f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa (raw, json)
Hash identifier:          s69sSePRBR51Utm6Ht8I8HadhxqZRfm0v9Ha9zMrCKs=
Subject key identifier:   7A:35:8B:DB:04:94:50:77:7D:35:B4:A7:26:B3:EC:0C:C8:23:6C:6D
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328584A4C3B0F4D31ACAD2399F48EA0
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     47065
IP address blocks:        66.180.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:0f:4d:31:ac:ad:23:99:f4:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=40ef52f9-06bd-4565-bb18-bf66055a9ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:e7:7d:dd:6b:53:9e:03:8d:c9:96:e0:31:
                    02:22:55:f3:1a:15:e8:3f:c7:b4:fb:bf:ac:43:9c:
                    17:64:ea:67:43:80:3a:32:55:93:8a:8d:ca:fb:44:
                    b6:1a:a4:62:30:ed:78:3f:dc:7a:89:69:8f:c0:d8:
                    40:3d:e6:6e:d3:a7:fa:21:7e:6c:6e:ad:4c:0b:93:
                    25:8e:18:f4:31:b8:4d:26:85:0c:13:2d:4b:9a:66:
                    f2:9f:4a:16:37:12:5a:a0:77:a4:1d:ef:95:72:eb:
                    d2:71:81:f1:2d:8f:47:23:de:13:d0:38:eb:27:53:
                    7c:18:ef:2b:c5:d4:47:20:8a:bf:e0:57:1e:f1:80:
                    98:63:4d:92:43:ad:19:03:45:50:2e:bc:14:e1:0b:
                    54:10:d2:20:87:24:2e:09:31:9d:8b:ef:15:42:87:
                    1f:12:81:59:04:e2:2d:91:ad:47:d4:36:97:56:f7:
                    ef:cd:3c:45:a4:bf:3e:3a:40:e8:b1:82:30:14:d6:
                    35:34:d8:16:2d:b4:88:6b:53:ca:dd:8e:c8:e9:c9:
                    80:12:e9:8c:39:74:79:2c:8f:8a:03:54:d5:c1:f3:
                    7a:f9:b2:3c:75:4f:ec:76:70:0e:a9:42:a4:56:9c:
                    57:e6:6c:97:73:d2:09:44:27:40:30:2f:02:3b:61:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:8B:DB:04:94:50:77:7D:35:B4:A7:26:B3:EC:0C:C8:23:6C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/f9de0df3-45cd-363b-a010-4dcc209f6ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:46:df:a4:eb:91:b5:cd:57:2e:9a:d5:dc:11:51:bc:aa:38:
         96:02:ba:79:ba:65:bf:30:25:2b:75:27:cf:a0:54:d3:b2:c9:
         11:ac:a1:09:40:1e:3b:c5:2b:a9:60:96:48:f2:4c:4b:01:65:
         ac:b5:1d:9e:6a:f8:b3:32:84:8c:3e:1d:cc:81:17:43:93:84:
         40:e2:61:29:25:18:5b:17:58:3f:fc:ec:fb:79:53:c2:85:00:
         4b:d3:e4:85:b9:29:6a:77:1c:2a:0b:7c:0b:a5:8b:76:95:b7:
         aa:29:05:59:8a:de:32:49:6f:19:f9:23:45:b9:f8:98:fe:64:
         8e:e5:46:d7:05:e2:fc:61:77:04:71:13:92:34:1f:3b:d9:91:
         41:5f:4e:ea:04:38:32:35:bf:89:6e:45:c0:60:1d:1f:39:4e:
         54:9d:57:1a:34:09:d0:1c:e3:a7:1e:a9:f2:88:40:01:f9:0b:
         8f:c3:31:b3:ea:0a:53:e5:0d:6e:b7:ed:95:f3:48:b9:7c:b9:
         9f:95:d0:98:44:88:19:32:93:7c:e2:a4:5a:6c:0d:c6:81:da:
         89:92:c7:19:c9:03:b9:d9:44:d3:9a:ba:d3:4d:d8:b2:04:32:
         ba:25:f0:35:b9:27:14:ae:08:92:dc:d0:1d:a6:c6:bf:c1:8b:
         92:35:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:13:57 2025 by rpki-client