Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa
File:                     91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa (raw, json)
Hash identifier:          wIziwYjwK4jollIMi/FCk1uFkBQPbfbOAR5Kz9wmvf4=
Subject key identifier:   9D:75:0A:16:F0:8D:51:32:DA:54:10:03:BB:07:66:37:1B:CD:1B:F8
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584AC710EBF104618220B53ED900
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        66.178.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:eb:f1:04:61:82:20:b5:3e:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=8bf6c06b-79c1-4935-a364-62be92c99ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:18:08:04:fc:f2:58:54:75:3b:07:7a:12:
                    56:0f:93:ec:4c:d9:d5:31:66:2d:4f:f2:83:12:54:
                    c1:0a:81:f2:81:25:08:cd:8d:86:d2:c1:0c:fc:7f:
                    71:4c:0f:01:da:41:c4:a9:bd:f9:da:31:fa:bf:c7:
                    86:13:20:23:cf:2e:49:7a:dd:26:64:0b:2d:ce:96:
                    34:65:80:b3:b1:12:6c:5d:88:f6:4c:1b:a0:33:ed:
                    fa:ab:34:62:ea:d1:1c:d0:eb:d0:e6:79:78:35:c9:
                    bb:e8:11:70:cf:ce:af:fe:63:16:85:a7:65:ca:7e:
                    13:8e:33:aa:12:db:69:cd:83:23:f1:e1:16:ad:82:
                    3f:08:5b:a3:45:32:4f:fd:cc:74:a4:92:22:f2:a6:
                    ed:58:17:cb:21:d8:24:40:8b:11:d7:02:a8:10:2d:
                    73:6b:51:4c:60:2b:94:53:63:e5:ac:a3:a4:c5:b2:
                    33:81:86:f6:23:75:16:92:87:92:bb:17:36:1b:17:
                    24:73:f6:db:ae:38:a6:cb:5a:da:ac:1a:d6:2e:13:
                    9e:45:ba:d5:a6:4c:ee:a3:01:42:55:3c:9f:71:16:
                    8b:aa:9f:6f:02:9c:2a:31:1d:b1:72:c6:cc:a7:9a:
                    41:ce:6e:51:75:c9:05:0d:d3:34:e9:41:bf:ef:2d:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:75:0A:16:F0:8D:51:32:DA:54:10:03:BB:07:66:37:1B:CD:1B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/91e4fe00-5dc6-337f-b6d6-6db1c6c1210d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:a5:b7:42:e4:e0:55:fe:ed:0f:c0:bb:cd:d5:34:37:2d:
         bc:e3:48:00:c4:20:ed:a2:62:8e:64:16:5c:dc:fb:38:ae:17:
         16:78:a5:44:b0:4b:40:54:ee:df:64:7d:0b:82:57:d2:b0:30:
         8b:e5:29:3b:30:35:85:9f:b1:55:7f:5b:39:c7:a9:b5:23:2f:
         e0:ca:55:72:87:c8:b1:8b:a3:d5:79:d4:26:e6:c4:7a:e5:26:
         d3:d6:85:f2:79:2b:6a:e2:84:5b:ad:50:79:ff:cc:0d:41:d7:
         d9:a5:cf:c5:20:91:b4:d2:ae:af:8b:d8:ee:55:8f:fd:19:39:
         40:bd:cf:4d:3c:db:dd:71:c2:d3:ac:9c:88:c4:c8:0f:65:90:
         72:cc:45:d1:93:e3:0c:63:95:79:e4:d5:11:22:5f:61:b4:9f:
         1f:51:c3:61:d2:bd:8e:1f:af:fe:60:59:27:d1:b4:f9:ab:10:
         9d:15:f9:aa:d6:0d:1f:df:59:4b:ef:b4:fc:49:9a:09:51:92:
         f5:23:ef:0e:c0:30:19:81:bb:b9:66:5b:03:25:c1:16:8a:d6:
         b5:37:4c:8d:d3:2c:2a:21:45:8b:30:99:7b:91:27:20:ef:32:
         f8:1d:7f:32:84:06:08:1f:26:28:24:29:4a:85:b2:a6:51:3f:
         f6:6d:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:13 2025 by rpki-client