Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa
File:                     66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa (raw, json)
Hash identifier:          5YXcGo1AMvA2wLJfueFemIvE1Yf28gmIFgJFY9sSc/U=
Subject key identifier:   4D:21:6A:B7:29:CB:DB:B7:22:FF:BF:8E:8C:D8:86:0D:67:EF:3C:C1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584A3A158A7BA97503AD6D211B40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     273103
IP address blocks:        207.230.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8a:7b:a9:75:03:ad:6d:21:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b791a11f-57df-43a0-a14c-6512e44a922d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:d3:7b:33:38:31:55:bb:5f:c3:a0:3e:6b:
                    f0:66:5f:3d:7c:63:61:64:bb:99:88:ac:6a:83:55:
                    1a:04:8f:8e:20:56:7b:4b:bb:b3:30:aa:98:cf:9f:
                    3b:24:82:b2:b6:1d:b9:9c:06:34:b9:b0:a4:62:35:
                    8c:1c:f3:d3:8a:69:15:4a:99:82:72:1f:14:86:e2:
                    21:b2:58:84:34:ad:95:bd:ff:e6:c5:16:67:e5:dd:
                    0e:7c:1e:ea:44:c9:58:6e:fd:95:b5:d0:9a:2b:c8:
                    2e:14:ea:28:ff:51:f7:10:50:0d:f5:da:44:a1:99:
                    fe:aa:2c:53:31:93:bd:ab:be:9c:04:ea:e1:63:1a:
                    67:9e:1f:a7:1f:94:4e:3e:fd:c0:c1:89:c5:f5:79:
                    39:8e:31:e5:8b:c2:8e:4a:a2:ce:bb:15:89:68:6d:
                    4d:59:e3:93:88:ac:d0:24:b5:41:f7:eb:a3:db:2b:
                    9c:db:24:2d:db:2f:85:5b:69:b6:80:40:b1:82:81:
                    6a:49:da:f5:13:46:ca:5d:39:18:e4:af:b6:fe:8c:
                    d2:f5:4f:d6:1f:77:ce:61:e8:1e:cb:6b:1e:ec:ee:
                    ef:1b:8d:53:cf:5f:d1:48:d3:e8:ef:b1:4b:18:1f:
                    dd:67:34:7b:85:40:13:dc:54:0d:f8:52:d6:97:0a:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:21:6A:B7:29:CB:DB:B7:22:FF:BF:8E:8C:D8:86:0D:67:EF:3C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66cf2a5c-1b1a-34e2-84be-fe9cfde40987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:f0:bc:9c:53:bb:c2:96:91:fb:a8:47:6b:52:f9:2b:66:
         03:ba:bd:19:de:ab:a7:fe:cc:2a:12:e5:9d:74:c3:d5:24:4d:
         ca:55:46:df:ef:8e:85:4e:be:af:bf:79:ef:be:63:6f:e5:e4:
         ed:74:97:aa:8f:0f:a2:73:ff:db:53:87:e7:b4:9f:ce:40:59:
         d3:94:0b:a4:45:e9:6b:6c:d3:b4:49:e5:2c:50:cc:87:a5:54:
         46:8a:c2:96:cb:66:63:07:da:61:70:50:d4:f1:fb:44:63:49:
         20:cf:a5:7d:bb:ee:0f:02:a0:49:92:4a:05:df:22:bc:19:19:
         a6:cf:0f:f2:cb:bc:a0:4e:c6:a5:6b:7c:11:3d:3a:10:55:32:
         19:b7:f3:ce:83:67:ac:60:b4:28:09:f9:29:4f:9c:7d:cc:5b:
         78:a5:d6:3d:3b:ee:0a:d8:05:4d:3e:a5:1f:04:b4:17:8d:0f:
         e0:b9:ed:f4:9f:cc:f8:85:44:54:4f:24:68:60:94:21:06:2c:
         6e:49:76:2d:37:16:ba:db:bf:89:23:5a:3c:ed:61:ec:81:67:
         bc:3d:08:55:39:77:e1:6d:b6:a4:1b:5d:2b:f5:8a:4d:1c:dd:
         4f:c6:70:ec:d4:49:d0:f7:02:67:29:51:e8:27:cf:35:10:29:
         7a:d9:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:13:55 2025 by rpki-client