Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6/f9c52b7b-d3e5-3db2-92b9-b41ac85cafc6.roa
File:                     f9c52b7b-d3e5-3db2-92b9-b41ac85cafc6.roa (raw, json)
Hash identifier:          uEmsVnrhdLuF6Qup7olMnv8nGMP1j3P6+HqJ4ilGcb0=
Subject key identifier:   8E:17:CB:52:83:B0:E5:B8:7C:25:59:52:69:FE:CB:D8:01:B0:BF:03
Certificate issuer:       /CN=b914fffe-9abf-49f6-ba92-ee8929084ee6
Certificate serial:       010D0C9F43285849D2CA279AAE5FF97E2BF64E80
Authority key identifier: 12:78:B4:11:A6:2E:40:7D:50:72:28:9D:60:2F:A4:28:54:48:4C:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6/f9c52b7b-d3e5-3db2-92b9-b41ac85cafc6.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     7819
IP address blocks:        66.128.48.0/20 maxlen: 24
                          66.180.32.0/20 maxlen: 24
                          67.210.224.0/19 maxlen: 24
                          162.213.140.0/22 maxlen: 24
                          162.254.208.0/22 maxlen: 24
                          192.188.183.0/24 maxlen: 24
                          199.200.100.0/22 maxlen: 24
                          2605:ae00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6/b914fffe-9abf-49f6-ba92-ee8929084ee6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6/b914fffe-9abf-49f6-ba92-ee8929084ee6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:27:9a:ae:5f:f9:7e:2b:f6:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914fffe-9abf-49f6-ba92-ee8929084ee6
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=dd9bc2f0-6e69-4a69-9c37-0a9188be8402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:01:88:cb:1d:a5:34:83:85:77:ad:d4:ae:
                    6e:22:e5:23:c3:0e:9f:9f:70:21:32:fb:73:1e:b5:
                    18:81:ac:7b:64:0a:be:e6:e3:c1:0c:68:3d:f3:01:
                    78:ca:db:7b:62:99:68:b3:ac:23:9a:7e:25:4d:ab:
                    1e:14:c0:c1:95:fa:a8:96:01:9e:64:22:d6:f6:1c:
                    7c:78:b6:c0:4a:07:03:c0:b9:bf:7a:38:90:85:21:
                    fb:ca:e8:47:7a:93:aa:a7:52:fd:a2:dc:c8:5b:bd:
                    94:f7:d6:58:1e:35:d0:1b:57:27:12:53:9e:ce:6d:
                    d7:4e:dc:e3:7c:7a:92:c5:72:bb:e1:4a:76:dc:25:
                    90:c0:43:9c:93:71:dd:13:5f:63:dc:e9:36:5f:21:
                    b2:1e:32:15:a2:f1:41:6c:d2:0d:fc:29:07:40:82:
                    01:49:a7:df:f2:c6:14:b0:0b:72:30:66:e7:20:e0:
                    af:58:78:ea:0c:02:b3:42:6c:b5:0a:f0:66:e1:bd:
                    fa:56:62:fe:11:7a:a6:8c:d0:80:ab:79:09:a5:b5:
                    d9:29:e5:ef:9a:d2:74:73:8d:99:36:59:ec:50:b6:
                    78:a7:13:c7:2c:fe:93:a4:e2:cc:bc:0c:88:70:b1:
                    08:49:83:60:f5:75:d4:5a:50:c5:47:b3:3c:e5:9c:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:17:CB:52:83:B0:E5:B8:7C:25:59:52:69:FE:CB:D8:01:B0:BF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6/f9c52b7b-d3e5-3db2-92b9-b41ac85cafc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6/b914fffe-9abf-49f6-ba92-ee8929084ee6.crl

            X509v3 Authority Key Identifier:
                keyid:12:78:B4:11:A6:2E:40:7D:50:72:28:9D:60:2F:A4:28:54:48:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b914fffe-9abf-49f6-ba92-ee8929084ee6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.48.0/20
                  66.180.32.0/20
                  67.210.224.0/19
                  162.213.140.0/22
                  162.254.208.0/22
                  192.188.183.0/24
                  199.200.100.0/22
                IPv6:
                  2605:ae00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:59:15:c8:d2:7f:ec:bc:0c:9d:2c:ea:a2:e7:e9:9e:92:
         94:39:1d:46:be:e2:35:a5:72:17:66:0e:5a:7e:90:27:76:35:
         27:b7:d4:a0:d3:de:90:75:c3:a5:e5:f4:0e:93:04:0f:c6:e1:
         09:1f:db:6a:c2:48:dd:ea:03:c9:17:bb:cd:ef:c6:c4:2c:16:
         c7:54:32:b8:7d:31:50:71:83:4e:64:a8:55:b7:71:2f:ae:68:
         2c:52:ac:8d:9e:6a:56:a5:3d:80:4c:b4:83:ad:71:cd:97:a0:
         83:97:63:2f:7d:bb:87:00:38:48:9c:a0:b9:e3:28:cb:52:d0:
         94:2f:92:91:c5:c5:af:6b:f2:91:1e:83:ea:6a:06:ca:4b:b4:
         eb:b6:f3:57:01:b2:ce:b1:87:01:b4:eb:ba:c9:39:31:7a:9e:
         24:9f:45:32:b7:88:5e:b6:9e:2f:f1:60:21:c3:3c:cc:d9:80:
         10:25:a2:48:e8:7b:21:da:7c:c1:8d:b4:1f:71:52:5c:50:13:
         0b:c5:9d:5a:1c:77:0c:99:4f:48:ab:1a:5f:28:da:9b:35:83:
         cf:bf:01:29:cf:42:39:b3:c9:10:9b:26:e3:bc:44:02:29:fa:
         57:48:e6:6b:eb:65:e5:14:68:ad:10:3f:41:2c:62:63:16:fb:
         95:73:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:04:47 2025 by rpki-client