Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa
File:                     cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa (raw, json)
Hash identifier:          lWck62A4UnSkP8QmaZ6F/fjyYCrSsD+5yC7lhp0MsgQ=
Subject key identifier:   E3:1F:F1:2A:61:A8:12:21:39:65:8F:7C:84:BD:61:96:90:4F:0B:93
Certificate issuer:       /CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
Certificate serial:       010D0C9F4328584A936B5F0894A5840DFD09DBC0
Authority key identifier: 62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     1100
IP address blocks:        66.179.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5f:08:94:a5:84:0d:fd:09:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=59d2664c-099e-4c21-921c-e9ca82749374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:e0:83:91:ca:74:75:74:da:d0:63:40:b7:
                    b2:79:a9:f0:76:13:5f:0d:8b:79:b3:1a:28:04:fa:
                    77:c9:7a:24:be:43:c3:df:69:49:44:aa:f1:3c:84:
                    92:0e:f6:10:ec:60:55:c2:17:f1:4e:2c:b3:a5:33:
                    53:c4:31:78:3a:21:90:64:6c:9e:c5:bd:d0:04:32:
                    2e:4a:58:03:e4:80:49:98:22:26:48:1e:3e:cc:87:
                    af:1b:be:95:c2:49:ce:2f:85:8f:ec:cb:ef:2a:10:
                    e5:05:fe:71:d9:a2:9b:c8:1d:96:42:22:c7:89:5c:
                    ab:01:8b:5b:f3:f5:3f:25:e0:d7:66:f6:d4:db:6e:
                    7d:d8:e1:1a:8f:2c:be:94:5c:fe:2e:f4:e1:3c:c1:
                    a6:10:c9:40:28:02:e9:2f:d7:ef:7d:49:f4:7b:fc:
                    32:7f:48:a6:c2:5b:d0:05:3b:bc:a4:cd:9a:b2:29:
                    24:94:15:55:09:44:34:4a:34:30:c1:e1:0d:fd:1d:
                    a8:ba:da:98:81:07:c9:d9:12:d9:cc:a4:da:31:c2:
                    e8:4b:a1:58:59:fe:84:f6:fd:7d:9f:a9:4f:ef:bb:
                    7d:78:56:a5:73:58:de:45:b4:53:77:3c:86:27:47:
                    d2:27:03:2f:23:e3:fd:32:96:75:07:2c:1a:0a:5b:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:F1:2A:61:A8:12:21:39:65:8F:7C:84:BD:61:96:90:4F:0B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl

            X509v3 Authority Key Identifier:
                keyid:62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:1b:67:2c:17:68:14:7b:5a:7b:e5:f8:e4:6e:c3:25:7c:
         48:02:18:0e:6f:67:9c:90:be:fe:cb:4a:9f:90:5e:1c:ca:c2:
         b8:09:b3:6a:69:21:9b:ac:dd:78:39:a5:3e:df:d5:f8:b6:24:
         ef:54:b8:c1:20:72:fa:ac:2e:70:1e:0f:32:b9:69:9d:c7:63:
         2e:eb:45:a0:80:2e:2e:ef:4d:b4:ca:8a:51:f4:2a:10:79:da:
         18:9e:20:c9:13:40:b5:31:c7:95:ad:a2:7d:3b:44:0a:33:db:
         0c:b3:1b:3f:e4:0f:9b:0b:6b:cf:02:9c:62:9c:e6:dd:06:91:
         ee:87:61:35:46:13:6c:5d:08:d2:0c:35:2f:2f:0d:14:b3:7d:
         25:66:72:4c:8e:fd:aa:84:c5:86:da:a4:fa:96:c2:e3:eb:67:
         e9:40:82:8f:d3:2e:a9:11:28:67:ff:42:7d:de:68:2c:65:20:
         3f:2a:d2:d7:ec:21:c2:7f:ee:e7:57:8d:7e:1a:e2:28:09:45:
         da:5c:45:9f:1b:ab:97:6b:19:1a:19:8a:cc:96:90:cc:51:92:
         24:b0:e0:43:90:51:a6:da:d7:f1:06:bc:9a:ba:1c:64:59:bf:
         60:1e:9a:d3:13:57:04:02:72:5b:db:85:f6:91:43:44:44:3d:
         33:6b:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:27 2025 by rpki-client