Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340/7cfe2716-3b93-3393-bc19-23a34002cd92.roa
File:                     7cfe2716-3b93-3393-bc19-23a34002cd92.roa (raw, json)
Hash identifier:          cSMllugHz8MCSi2befRUY3j3fpBgy0NMOBmXXrVWjdI=
Subject key identifier:   DB:75:43:7B:E3:A8:0D:44:FB:E2:10:CB:50:EF:5B:D7:16:E1:94:CF
Certificate issuer:       /CN=278b81e4-af83-4041-a885-d438e2ab5340
Certificate serial:       010D0C9F43285849C4D4BB68C6C8864DDB878780
Authority key identifier: 87:CC:5B:95:89:65:2D:67:44:92:5E:85:D1:DF:CA:A7:B4:30:5A:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340/7cfe2716-3b93-3393-bc19-23a34002cd92.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     6327
IP address blocks:        66.163.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340/278b81e4-af83-4041-a885-d438e2ab5340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340/278b81e4-af83-4041-a885-d438e2ab5340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bb:68:c6:c8:86:4d:db:87:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278b81e4-af83-4041-a885-d438e2ab5340
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=caf8f4af-e684-4ddc-9205-1664126639c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:3a:d7:77:8c:bd:68:e7:24:54:86:58:6f:
                    9d:84:e2:8c:7b:fe:b6:44:9a:f3:51:7f:89:83:d5:
                    ae:24:0d:51:1f:f2:ec:b3:1e:80:17:80:13:c4:49:
                    8c:ac:9d:28:3f:80:99:70:94:b0:15:a9:1b:23:9c:
                    33:ca:10:08:49:e0:43:9b:98:e7:14:3d:d9:a2:b1:
                    c4:4f:f0:16:57:81:7f:5c:a6:6f:1b:4d:a9:ba:19:
                    c5:4f:54:bb:b6:2f:23:76:13:e3:ad:9f:86:39:59:
                    13:a1:0b:03:dd:45:e4:8a:fa:cd:89:fe:44:26:ec:
                    07:f9:73:22:d8:9e:37:3c:42:35:49:e0:9c:01:a8:
                    e6:53:e6:0a:29:d8:c7:bf:ca:39:f1:9f:aa:d3:19:
                    08:11:8e:cd:b9:91:02:6c:19:fa:23:52:11:2d:16:
                    46:44:7f:c3:10:da:28:c3:fd:3b:4e:96:9e:5d:cf:
                    a4:9f:b4:d9:19:ae:55:d2:61:50:c0:90:7f:5d:9b:
                    1a:c7:ef:d4:ed:69:1d:7d:4b:de:17:90:b5:f7:64:
                    16:a9:47:95:23:7e:c2:4c:91:93:3e:f5:da:68:fa:
                    6d:67:23:72:5a:fd:4c:3c:db:ba:7f:26:83:3e:77:
                    e2:1e:f0:3b:49:5a:f1:8f:8d:b4:b7:63:05:dd:8f:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:75:43:7B:E3:A8:0D:44:FB:E2:10:CB:50:EF:5B:D7:16:E1:94:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340/7cfe2716-3b93-3393-bc19-23a34002cd92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340/278b81e4-af83-4041-a885-d438e2ab5340.crl

            X509v3 Authority Key Identifier:
                keyid:87:CC:5B:95:89:65:2D:67:44:92:5E:85:D1:DF:CA:A7:B4:30:5A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/278b81e4-af83-4041-a885-d438e2ab5340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:ed:c6:fa:23:5c:c7:52:ea:36:2a:4e:11:f2:24:44:97:
         e5:f2:b0:79:85:ae:3b:bd:fd:c0:f1:77:a3:91:e3:82:90:88:
         d2:45:53:69:4f:78:85:47:7c:9b:ba:8a:2f:17:30:4d:cf:eb:
         a6:2d:fa:c9:9c:15:54:3d:3b:05:ee:56:05:82:4c:19:b0:6e:
         b3:f2:78:5f:86:c7:17:74:97:cc:97:5a:98:b3:5b:34:30:33:
         32:80:d1:c7:25:53:fe:88:66:2a:c3:c4:4a:53:c6:76:f8:71:
         dc:6a:b8:91:4b:ce:b9:05:cd:ff:35:b1:ff:fb:8f:13:a2:35:
         cd:01:50:8f:24:0b:ba:b5:be:78:69:f7:08:4f:61:55:de:33:
         9c:4d:ec:bb:28:cb:19:33:05:87:16:c9:9f:11:c0:ef:ea:01:
         64:9a:0b:87:5b:c3:13:57:9b:80:44:8c:4f:80:49:23:2f:89:
         bd:26:5c:53:11:8c:c5:7b:61:4e:5a:9b:35:43:ea:53:d7:03:
         92:25:2e:49:6b:b2:a7:88:c3:03:5d:41:74:83:36:5b:a7:e6:
         68:e1:08:f7:c1:23:1d:f7:78:00:d2:39:0e:8e:1b:7f:23:35:
         52:87:6e:88:30:b5:3d:39:a4:98:3c:04:80:d5:4a:61:b7:a1:
         ac:04:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:07:38 2025 by rpki-client