Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa
File:                     2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa (raw, json)
Hash identifier:          xgNixTJjdC6gbyHZ1akQTi9eJu/1HfDBNpTmFFtGoiI=
Subject key identifier:   5F:B4:3F:83:A7:F7:56:BF:58:7A:C6:CE:7D:B5:82:B6:B6:94:A1:74
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A3A158B9AF44C7913CA944DC0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        66.163.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8b:9a:f4:4c:79:13:ca:94:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=ad63ed54-4c1c-4e42-8a04-9e820b1259af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:df:a2:95:ed:f2:f6:0a:0e:a0:9f:17:6c:
                    c6:06:6c:ca:dc:86:2f:8b:84:12:ee:b5:a5:81:22:
                    3d:74:39:9f:b5:1b:60:bb:0c:95:ca:9c:83:20:79:
                    52:65:6f:df:75:44:36:6a:d8:50:aa:23:ff:19:52:
                    52:55:10:ff:26:c4:e0:86:02:70:93:0c:ee:05:08:
                    d0:0f:e2:fb:5d:80:12:74:09:8f:c1:c3:8d:5e:dc:
                    25:54:ef:bd:67:dc:84:12:5a:0d:a0:06:62:28:18:
                    53:5b:cb:34:4a:74:44:f1:14:04:81:e1:0b:de:d4:
                    79:22:8f:47:d5:ab:42:c0:89:2b:26:34:96:33:27:
                    ab:93:f8:74:b6:c3:4a:ba:ee:4c:f7:de:02:d5:35:
                    7a:89:b6:e0:f9:8a:b1:ab:68:34:bb:c8:79:d0:23:
                    45:98:fc:12:cb:1a:d2:a8:96:dd:88:d6:9d:fc:0c:
                    c4:6e:c2:9e:4d:42:83:58:97:8f:f2:e6:96:3f:53:
                    44:2f:b4:62:de:44:0b:4a:84:d8:a2:44:c6:9f:00:
                    09:15:80:87:17:df:a9:67:62:e0:ed:0c:84:67:21:
                    53:2c:8a:41:52:c4:43:3a:61:92:22:53:73:ed:a3:
                    12:00:5f:9c:1f:b8:df:d0:dc:2a:ec:26:2c:25:bd:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:3F:83:A7:F7:56:BF:58:7A:C6:CE:7D:B5:82:B6:B6:94:A1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:31:6f:03:88:86:50:ef:50:ea:b4:47:4f:bf:a8:19:ce:9e:
         02:25:8f:70:e3:c2:12:bd:50:ef:ed:a1:34:ec:98:74:d9:f1:
         f2:80:1e:7b:b6:8e:40:54:fe:61:7b:89:74:35:f4:4a:51:3e:
         26:00:3a:f0:7d:1b:e6:f7:29:0f:ad:0c:36:c5:ac:d1:f3:0c:
         fd:ed:a4:e4:51:09:40:d2:05:ca:e2:d1:1b:29:e1:c3:c3:92:
         a4:bf:2c:bc:6a:27:da:a7:3b:68:33:0c:ed:ac:c8:5d:eb:0a:
         88:6d:83:10:5b:3c:15:27:44:ed:4a:a8:e5:49:43:48:8f:3b:
         9c:a6:a9:9e:40:7b:8d:32:ab:85:f5:5c:92:e0:51:f6:c6:f5:
         cf:29:5a:f7:eb:80:74:1a:40:04:12:e6:12:5e:73:39:07:f8:
         6f:5b:07:7e:45:ac:49:23:1f:be:1c:88:d9:08:f9:43:e4:5e:
         2d:36:20:ec:13:1b:51:f3:26:e7:cc:31:7e:6d:d7:2d:e1:b3:
         36:e4:76:6f:d7:52:52:df:4c:76:51:62:ac:e0:87:6b:15:aa:
         70:a9:c8:83:2c:45:9c:77:e5:2a:1c:3b:51:0a:1e:7c:b3:27:
         d6:73:1d:63:19:3e:59:41:29:85:2d:75:2c:a2:60:63:0e:2b:
         bb:9d:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:58:28 2025 by rpki-client