Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/f971c193-df2b-328f-9848-6b635335eb6a.roa
File:                     f971c193-df2b-328f-9848-6b635335eb6a.roa (raw, json)
Hash identifier:          g+jB+G+df0BQPvqywJzCPYKyC1l3AlK8DY29RR5fVbA=
Subject key identifier:   57:4C:30:31:21:2A:08:2F:80:EB:DA:D5:B4:66:5C:C8:64:81:70:14
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F432858492CAE8452C56844C94CE7C400
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/f971c193-df2b-328f-9848-6b635335eb6a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        66.22.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:84:52:c5:68:44:c9:4c:e7:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=7934def6-84cd-4eed-98f9-c1ac61624887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:d0:51:61:ee:04:ca:28:70:88:ef:2f:10:
                    a8:6e:48:bd:bc:d1:94:15:32:3a:d1:04:fc:24:63:
                    3b:b6:f5:30:d3:0f:36:1f:27:fc:30:7f:28:e7:e8:
                    c6:da:48:fe:6b:0b:44:ec:8b:14:37:21:cd:e3:ae:
                    be:8c:98:5e:1c:42:11:12:09:32:6d:5c:35:5a:90:
                    22:c4:78:6e:e7:15:f4:dd:34:88:4b:3e:4a:da:6d:
                    2c:6b:6f:67:a9:1c:c7:b5:5d:b7:c8:d5:9c:96:2a:
                    9b:02:19:5a:3d:2d:62:b5:09:94:28:f3:fd:dd:10:
                    45:94:ea:87:67:9f:c4:be:10:23:44:7b:7e:bd:d5:
                    4e:d1:4f:ea:fe:11:0d:77:4f:df:ae:b6:e1:db:09:
                    60:01:d0:1e:7d:10:12:17:f6:f7:f6:a6:ff:35:fa:
                    2b:ef:c3:7a:45:35:f4:0b:a8:6b:be:db:0e:37:4d:
                    4d:90:29:76:91:00:24:48:0c:72:de:6d:cc:ea:99:
                    5b:b7:fa:79:44:c8:0e:a3:41:b0:ab:ac:33:23:b7:
                    f7:04:89:af:ca:d4:03:8a:83:2d:1c:0b:48:c1:73:
                    d6:50:f0:83:16:7c:b4:e5:cb:ed:d4:f0:9e:fe:a0:
                    a0:96:41:de:94:f8:18:2c:43:b7:4c:c6:ff:32:b8:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4C:30:31:21:2A:08:2F:80:EB:DA:D5:B4:66:5C:C8:64:81:70:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/f971c193-df2b-328f-9848-6b635335eb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:59:69:8f:57:10:89:45:c0:72:3e:6c:77:ea:1c:7a:aa:34:
         59:8c:65:e3:c2:cc:da:08:8b:38:3f:e7:4b:2f:01:3c:c5:ad:
         f7:dc:b7:0c:f1:ca:fd:37:8d:f0:e4:61:98:67:1e:a9:c8:b4:
         fa:49:a0:fe:52:51:1e:ce:8b:0a:4a:2b:e2:6b:43:94:7c:d2:
         c6:4e:00:22:6a:67:fd:a5:40:6c:83:61:b2:d5:bb:ea:c7:b2:
         91:0d:fc:0f:54:ca:57:58:8d:b2:70:9a:e3:a5:16:87:f2:8f:
         f1:58:16:7d:de:b6:68:70:51:26:98:58:98:a3:f0:b8:b8:7c:
         24:37:d6:6e:b0:5d:41:be:fc:08:7c:de:a8:6f:02:2e:62:99:
         a7:84:8a:25:ea:36:55:48:9f:20:9a:1c:c8:d0:5e:6a:4a:a7:
         54:cf:2d:50:de:41:f2:86:b0:15:89:97:68:cd:28:f9:da:26:
         df:10:30:ae:3c:36:32:53:05:05:ac:74:31:44:14:46:a8:09:
         aa:79:29:3d:97:03:16:2e:55:f6:a6:38:74:92:82:39:6e:22:
         bd:ae:22:74:6d:7d:4d:4c:1d:0a:23:2a:12:b6:08:ef:d6:c3:
         bd:ef:fa:d2:c9:b6:e7:a7:46:30:6b:98:32:c2:9c:5f:81:09:
         8e:f0:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:49 2025 by rpki-client