Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1977a764-656e-340a-8716-44742ca97198.roa
File:                     1977a764-656e-340a-8716-44742ca97198.roa (raw, json)
Hash identifier:          jxk+vjP51i1fL5pPtZK1NQdyBek/ZnR37ZxIwsU+SfI=
Subject key identifier:   DC:F2:AF:64:0C:EB:C3:F5:6E:CF:48:3F:4B:DB:0E:A6:FE:28:62:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCE73BCC8A64FA993D0080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1977a764-656e-340a-8716-44742ca97198.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7725
IP address blocks:        66.208.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:e7:3b:cc:8a:64:fa:99:3d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=0aa13f02-eb4f-43b5-abe1-ebd31b32a330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:79:56:96:7c:16:9f:b0:a3:06:24:ff:16:
                    35:0f:b0:29:c7:3c:d4:4e:e7:a7:6a:fc:b1:55:90:
                    08:70:d2:d0:e1:b5:be:83:97:b2:e2:2f:54:3f:03:
                    0b:0f:79:af:89:ec:0d:ec:bb:66:e2:9b:1e:f0:7b:
                    17:f5:df:1f:a3:9b:88:d0:25:5a:f1:81:b6:88:65:
                    58:32:5a:12:66:86:81:af:61:4d:ac:a6:67:f1:a8:
                    cb:34:8b:66:aa:0e:d0:99:29:61:04:17:2a:d0:50:
                    dc:59:fc:c7:70:f5:09:de:ad:72:af:94:a7:f2:06:
                    83:42:bc:d4:be:9e:fc:55:b4:fe:9a:aa:c7:eb:c9:
                    5d:77:a7:58:a0:b4:62:1e:cd:ef:c5:e3:cd:3d:41:
                    da:b0:42:5e:33:fc:37:4a:4f:46:cc:1e:4b:5b:be:
                    bd:ff:50:50:d1:60:a2:7c:42:2e:66:4e:d6:89:9c:
                    ad:e3:09:36:50:9e:41:60:17:79:ca:73:af:ec:7c:
                    87:95:ad:f1:68:7b:42:f6:78:27:e1:16:bb:d5:c9:
                    e4:1d:e9:e4:f1:46:f2:56:fe:20:2e:0c:dc:ed:ec:
                    5f:48:f8:ce:55:12:24:8d:f2:de:c7:eb:36:18:0d:
                    d4:ed:3f:ea:85:7b:98:01:b2:f2:c6:60:70:08:54:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:AF:64:0C:EB:C3:F5:6E:CF:48:3F:4B:DB:0E:A6:FE:28:62:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1977a764-656e-340a-8716-44742ca97198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:64:cb:83:3a:0c:4b:43:d1:33:fd:ac:1c:c8:1f:cd:00:
         13:c0:90:78:70:1e:b5:67:56:0b:04:4c:07:cd:e6:5d:fd:7f:
         bb:61:5a:ee:40:92:cd:6d:e0:e4:f0:22:51:17:fc:a0:fc:2e:
         24:55:aa:2c:4c:99:87:e6:a6:db:e3:4b:e3:1d:38:8e:8f:f9:
         86:f3:5f:88:5c:fb:9f:f3:c6:a1:2c:cd:15:5e:9c:97:1c:56:
         d5:0d:5f:ca:f6:da:f6:84:4d:8d:0f:7e:0c:21:bf:a1:5a:06:
         d8:0a:4f:39:5d:b7:e1:c1:eb:28:f1:55:95:95:28:15:18:e5:
         4f:34:ec:df:73:5f:3e:5b:1d:d8:ec:12:51:ee:c2:a4:3f:8f:
         ef:56:e4:35:58:0e:08:4a:58:f8:41:2d:ac:9d:2e:23:15:bf:
         2e:47:13:ee:ae:d0:06:80:f6:22:fa:a9:0a:c4:91:b5:45:d1:
         5a:73:e0:2a:a6:ac:47:c5:e5:15:03:d2:75:19:ca:32:6f:42:
         b0:c5:46:b8:c0:dc:2d:34:a5:39:05:bd:8b:df:9b:17:9b:6b:
         28:04:df:c5:6d:0e:45:00:f9:6e:39:19:75:07:01:15:83:57:
         5f:95:83:9d:a0:b5:6f:19:7a:85:97:0b:2d:9d:35:ad:ed:d0:
         8c:cf:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:37:24 2025 by rpki-client