Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa
File:                     9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa (raw, json)
Hash identifier:          oznXER8Hda4fYb7zR0YhMgdczxCyEItuyPr1fX2NRPo=
Subject key identifier:   1B:28:F6:CC:A0:9C:D6:EB:17:D2:83:29:6A:28:E4:83:3F:09:8E:E2
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584AFC1C10C12CD135A8F9B3CAE0
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13576
IP address blocks:        66.6.0.0/20 maxlen: 20
                          66.6.0.0/21 maxlen: 21
                          66.6.0.0/24 maxlen: 24
                          66.6.1.0/24 maxlen: 24
                          66.6.2.0/24 maxlen: 24
                          66.6.3.0/24 maxlen: 24
                          66.6.4.0/24 maxlen: 24
                          66.6.5.0/24 maxlen: 24
                          66.6.6.0/24 maxlen: 24
                          66.6.7.0/24 maxlen: 24
                          66.6.8.0/21 maxlen: 21
                          66.6.8.0/24 maxlen: 24
                          66.6.9.0/24 maxlen: 24
                          66.6.10.0/24 maxlen: 24
                          66.6.11.0/24 maxlen: 24
                          66.6.12.0/24 maxlen: 24
                          66.6.13.0/24 maxlen: 24
                          66.6.14.0/24 maxlen: 24
                          66.6.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:10:c1:2c:d1:35:a8:f9:b3:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=09086612-b193-452d-8da2-09d806e523f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:8f:fa:7a:51:be:dd:5b:78:39:d7:e2:49:
                    66:2c:85:ab:30:b2:1d:96:49:34:99:f9:c1:65:04:
                    32:4f:bf:6c:79:da:c4:e1:d9:26:09:7a:ef:ce:04:
                    31:66:a1:c2:cd:d0:47:6a:37:a4:a7:79:8f:36:0f:
                    9a:7b:ef:d3:43:55:db:c7:77:a7:ca:51:1f:7f:e9:
                    fd:90:71:4e:1b:17:71:a1:e3:4e:6f:ff:f3:e5:08:
                    43:b8:7e:05:bf:af:bb:22:1f:00:cb:b1:26:aa:7e:
                    26:ad:a3:ac:79:b5:ee:99:85:19:0f:2d:f7:9b:53:
                    1b:1e:e5:35:c3:d4:ec:5d:81:99:9d:42:7c:68:ba:
                    99:7f:ae:da:c8:08:d0:fb:8a:cf:73:14:20:27:a0:
                    e6:03:60:47:3c:ec:33:dd:8a:33:a9:e8:14:33:59:
                    2c:14:17:a2:05:3c:d8:72:f1:41:8e:77:eb:1a:73:
                    15:53:0b:37:65:4b:a8:e6:62:37:30:ca:25:ff:69:
                    5d:1c:ba:ed:c2:65:7d:0f:81:17:24:ef:89:ac:16:
                    4c:a3:27:79:36:34:f0:a6:d9:67:1f:a3:7b:82:5f:
                    80:c7:52:64:80:ba:e7:de:15:5e:5a:a0:bd:29:96:
                    48:dd:dd:ae:48:0e:62:62:8c:be:88:f5:d6:56:f0:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:28:F6:CC:A0:9C:D6:EB:17:D2:83:29:6A:28:E4:83:3F:09:8E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:32:44:46:aa:54:09:b4:ef:3b:62:f7:9d:f0:08:61:9b:
         b6:bb:d3:b2:0c:d2:a9:ef:aa:4b:16:10:32:a8:36:57:a2:4d:
         7e:18:09:3f:56:e8:0d:2b:73:af:86:3f:ff:db:53:3d:7a:58:
         48:d9:db:f9:e0:37:2b:6d:67:5f:d8:2f:da:c3:7d:03:72:ac:
         8d:e6:80:bc:3a:34:96:7c:46:44:02:08:36:39:dd:1f:ba:2e:
         3f:d0:e3:d3:95:3a:d6:fe:f8:d5:7a:ef:43:53:92:31:f2:ae:
         fa:05:a5:bc:76:16:27:95:05:7e:c1:31:2f:84:92:65:4c:9d:
         c7:88:0c:77:9e:a1:28:d8:ba:aa:1a:56:df:3b:07:6d:cf:5c:
         b5:42:d5:82:c0:6a:e5:b1:89:76:67:a4:b5:19:52:cf:5c:61:
         4e:16:fb:05:8e:15:c1:23:a4:91:dd:0d:d5:27:18:76:0b:e1:
         15:27:78:c9:1e:db:7c:39:b1:28:9b:a9:27:0a:1d:e3:7a:d4:
         61:64:cd:a0:05:b4:c7:5c:ae:ad:ee:9a:16:b3:29:8d:b5:7b:
         1d:89:f3:9f:0e:49:c1:9f:12:68:55:10:ac:12:82:02:8a:49:
         94:7b:34:e6:25:56:b2:e9:59:52:30:f2:f2:b2:8d:d6:41:3d:
         70:30:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:14 2025 by rpki-client