Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa
File:                     80500266-8498-3e87-8f03-0ab380bfd9ee.roa (raw, json)
Hash identifier:          KujcboVTjB5CXkKdpge3Jz5PaSAFrjSwQXTDEZtVm74=
Subject key identifier:   09:F8:10:EF:BE:0B:7E:95:D8:BF:82:34:D1:F7:F7:C5:D8:93:C9:4A
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE09709D7040E8B4379D000
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     213122
IP address blocks:        66.118.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:97:09:d7:04:0e:8b:43:79:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=933d35cc-aae4-46d9-9fcf-48cffe3e78a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c6:7d:be:12:05:fb:83:6f:df:e0:a9:fe:23:
                    ea:27:e9:41:97:69:27:db:3b:3f:c1:de:d8:a9:85:
                    ee:c7:b7:23:3b:da:3a:59:f4:18:d4:93:83:72:b0:
                    f1:ba:99:03:50:8a:2b:40:79:a1:b1:6b:2e:48:04:
                    04:74:bb:19:af:f3:24:06:4e:80:85:4b:9a:ce:85:
                    5a:11:af:25:f4:28:41:bf:35:8c:c6:85:1f:23:12:
                    f3:82:d9:b5:92:4e:55:00:8d:b2:b2:58:29:ae:f5:
                    e6:a3:96:67:e6:ed:39:ee:90:49:2b:d5:72:34:dd:
                    34:8f:43:ca:a2:cd:ba:6a:07:78:30:d1:64:b5:25:
                    71:79:f4:f2:b1:b1:4f:51:e9:2d:06:1e:bc:d1:cf:
                    7b:37:62:b0:59:dd:9a:f0:3f:47:73:fa:9c:b0:cc:
                    11:be:ad:d0:b1:ca:0a:cb:77:85:23:82:87:18:89:
                    e7:be:30:50:5a:1b:e0:d1:b6:39:ff:8b:d4:d5:f1:
                    dd:a1:f5:62:1a:db:5c:fb:63:70:aa:b7:5d:89:5a:
                    5d:cb:8c:e5:1d:8c:64:12:c6:10:fe:28:e8:77:39:
                    46:c8:67:54:15:84:34:d3:25:6d:ca:c3:68:72:c6:
                    e5:ed:b8:e1:1d:92:a3:1a:66:da:84:4c:86:00:f3:
                    bb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F8:10:EF:BE:0B:7E:95:D8:BF:82:34:D1:F7:F7:C5:D8:93:C9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:49:b6:da:62:70:e6:11:21:6b:08:78:a0:83:c4:89:49:3d:
         0b:5d:a9:26:8e:9e:35:c8:c0:47:b4:cb:a6:39:5d:09:9b:50:
         fe:ac:42:d8:0b:2f:af:a8:83:73:42:c8:f5:26:1b:71:94:d2:
         b4:b3:bb:23:57:80:8b:0c:95:6d:5a:f2:9b:fa:3d:5d:fb:8d:
         e1:f2:1a:46:25:01:a5:31:d7:1f:1f:87:d7:ea:f8:7d:72:82:
         c4:be:0f:38:de:af:0f:52:f9:00:93:a2:4e:97:47:ad:88:f9:
         bc:54:33:50:f0:b7:0f:84:74:f5:3a:6c:6d:e3:1e:ab:19:c2:
         92:98:a2:c6:49:ec:99:31:64:9a:6d:e4:9b:b7:fe:6a:b4:a9:
         c2:c5:eb:c4:da:a8:87:c7:92:5b:02:b9:b4:cf:06:22:80:35:
         82:0c:f6:d8:b3:36:12:65:94:b9:79:31:66:6d:3d:b7:69:0e:
         7a:dd:d5:66:ff:3f:02:16:82:b0:6d:44:06:ab:ec:b3:f6:25:
         3c:9e:11:d3:44:41:79:80:2b:14:62:c7:90:5b:3e:47:83:d5:
         06:f0:f8:93:28:9d:73:a8:82:07:01:b4:dc:74:26:bf:e6:fd:
         c0:c4:56:aa:6b:6c:b3:3c:50:af:03:3f:a1:fe:72:c2:f9:10:
         61:d3:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:58:12 2025 by rpki-client