Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa
File:                     0c51f89d-004c-33c1-9f52-b0b9c3227393.roa (raw, json)
Hash identifier:          FFPIACPJNYqxQWHJHY+nvKlZPRE1RWNiGQ9O0NkXr5Q=
Subject key identifier:   47:53:66:84:DB:AB:5C:AE:08:00:29:80:8C:19:54:48:A4:06:2F:5D
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AEE269851641754DA8AFA7500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     30058
IP address blocks:        66.90.75.0/24 maxlen: 24
                          66.90.76.0/23 maxlen: 23
                          66.90.125.0/24 maxlen: 24
                          2001:49f0:d0fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:98:51:64:17:54:da:8a:fa:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=b0f0a25b-c9be-41d9-be2d-5f95e0f91a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:06:ad:d2:d8:71:d1:3a:5e:fd:04:e9:30:
                    b5:8a:18:34:7f:d8:c4:72:d7:ee:ec:c1:66:57:07:
                    77:8d:cb:32:72:07:2a:62:1d:4b:ac:c8:39:50:ca:
                    92:1f:32:5e:ac:b3:d5:7b:40:e1:42:8f:85:38:dd:
                    4c:22:4c:c3:74:0f:b9:4b:3d:e5:ea:1a:01:c1:87:
                    fe:5b:e9:75:d4:ef:a5:79:64:b0:24:ab:cc:01:11:
                    05:60:dc:26:ea:70:06:fe:70:04:4a:41:6c:a4:95:
                    18:2d:92:ea:93:5c:0a:47:89:5a:54:0d:6f:0a:25:
                    65:0a:0e:27:77:1c:df:7b:21:0e:24:5b:49:8f:65:
                    65:af:c8:a8:47:0a:99:8b:01:75:f9:e4:ad:21:09:
                    b0:a0:94:5b:94:e3:f8:56:5c:7c:8d:07:f2:7e:5d:
                    dc:46:1b:64:49:3a:33:f5:a2:e9:6f:c9:c9:a2:30:
                    46:64:f3:df:92:4f:ac:1b:98:2a:09:b2:f5:a4:68:
                    dc:21:aa:90:16:2d:72:1f:f0:c0:70:a7:49:f3:e9:
                    b4:7f:e6:2a:59:3f:20:e0:19:6f:cf:50:d5:c5:33:
                    99:c0:1e:8e:d9:e1:39:7f:cc:f3:7b:33:5a:3d:75:
                    a1:c5:ae:33:3a:85:93:ea:72:9c:c9:47:90:cd:30:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:66:84:DB:AB:5C:AE:08:00:29:80:8C:19:54:48:A4:06:2F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c51f89d-004c-33c1-9f52-b0b9c3227393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.75.0-66.90.77.255
                  66.90.125.0/24
                IPv6:
                  2001:49f0:d0fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:09:e7:c0:88:f2:1f:d9:9f:b1:fb:54:41:18:e4:e2:9b:
         f6:e6:72:73:e7:17:60:f2:62:95:43:0a:6c:4d:e8:84:61:6e:
         48:42:fb:11:68:10:c3:20:33:b9:17:1f:7c:53:2e:a7:d7:be:
         18:0c:77:da:16:12:4d:4c:13:75:c3:5c:36:de:7a:bc:08:77:
         a2:ee:b9:20:1c:ec:cf:da:5c:19:f2:0a:07:45:24:4f:52:d0:
         08:b6:53:be:93:ca:43:1b:e1:53:1e:e1:2f:87:ef:ac:e7:d4:
         dc:79:7e:ed:6e:a8:fd:e9:d5:fc:b6:21:68:d2:16:d7:b0:d1:
         62:e2:5a:62:33:51:18:f4:1b:dc:17:93:bb:6a:ad:87:6a:97:
         58:38:94:05:29:de:0b:5f:3f:b2:be:b7:83:b6:9c:98:24:fb:
         10:83:b9:91:51:94:f6:55:c4:46:69:7b:38:b0:dd:e6:a0:46:
         70:c9:09:9a:7b:41:83:46:20:ff:f1:46:48:02:48:61:e9:20:
         99:be:4e:36:8d:e6:2b:01:73:03:df:f3:96:a1:77:22:bc:b5:
         b1:66:0c:bc:92:66:e8:42:dd:89:9a:f3:6b:03:7d:36:6f:6e:
         cc:ae:7b:2c:7b:df:cc:6f:cb:81:3a:14:e2:e8:69:9a:9d:50:
         78:b0:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:28 2025 by rpki-client