Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
File:                     72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa (raw, json)
Hash identifier:          rxXslnP98g3+d9uVcHxAoxggHVX/U3PeFcuiWu52rNA=
Subject key identifier:   CA:8F:00:55:81:D1:38:37:12:40:6B:10:A4:C1:C1:E0:78:0C:E9:8C
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584A9FFB8BC4B266DEA525587100
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        66.178.140.0/24 maxlen: 24
                          66.178.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:8b:c4:b2:66:de:a5:25:58:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=e6d59d7c-dc45-4701-a322-47219972dd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:8e:06:16:e9:c3:bc:18:0f:7a:b4:d7:bf:
                    c5:b5:73:60:f4:df:98:53:66:72:a9:98:6e:86:9d:
                    66:aa:69:6b:01:4a:7d:fe:13:9b:cd:ff:4f:ff:a9:
                    fe:90:05:89:ce:be:94:92:87:93:0a:c6:8b:59:b9:
                    86:25:59:cd:04:ce:cd:85:8f:0e:b5:95:d4:2d:42:
                    4c:50:72:79:83:04:9c:96:4e:5c:e4:91:a6:a5:e7:
                    b0:c0:af:65:88:b7:53:55:22:d4:c0:23:ca:70:cc:
                    07:df:bd:f7:31:69:4e:b0:c3:9c:18:67:39:e7:01:
                    77:64:0d:78:8e:17:33:46:3e:8f:28:73:b1:90:60:
                    49:b1:09:8e:34:63:cc:b8:51:20:42:11:00:c3:26:
                    93:78:9b:6e:e8:ec:15:c5:7a:96:fd:de:03:23:76:
                    f8:14:66:05:f1:59:e2:d0:d7:0d:09:26:fa:bd:e7:
                    68:e2:78:b5:b2:ff:4b:79:a2:1c:85:d5:d3:89:23:
                    14:03:aa:e3:e5:ba:e1:f9:43:4e:92:14:96:93:52:
                    47:80:ef:94:c9:0b:fc:f6:11:78:54:c3:7e:90:39:
                    6b:a8:60:28:5f:46:30:97:fe:2e:c2:4d:89:2b:34:
                    67:5c:19:56:a1:62:fe:a0:05:ff:c0:f9:62:40:98:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:00:55:81:D1:38:37:12:40:6B:10:A4:C1:C1:E0:78:0C:E9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d0:6a:c3:3f:31:84:ce:4d:4d:f3:4a:d6:7e:dd:8b:d6:e7:
         ef:b8:bd:3e:98:15:4a:5a:c3:0e:68:3e:85:20:56:4c:5f:47:
         ac:62:5d:e9:bb:79:e4:8a:ed:b6:f3:60:2a:f8:c3:87:3f:a3:
         3a:f1:b3:42:ac:bc:2b:81:c9:f6:7f:ef:3e:f2:f6:be:66:75:
         31:94:6d:cf:68:2c:34:b5:48:d6:4e:33:da:16:3f:da:91:9d:
         74:b6:fc:e2:bf:8f:16:63:43:14:91:f8:42:9e:ab:5f:55:fd:
         d5:aa:0a:5c:09:8e:7b:d8:98:9f:3e:e0:57:a8:9a:a7:b8:fe:
         ff:3c:92:42:e5:28:ff:9c:ff:29:a6:f6:df:53:7c:54:3f:2c:
         a5:ae:a7:2a:05:9e:30:ce:5b:55:09:56:8a:52:30:59:94:c2:
         a6:33:1c:4e:6d:bd:06:5c:d3:27:91:84:d5:da:42:a7:cf:c3:
         67:37:27:fd:78:6e:38:f0:db:bd:e5:e8:da:37:9a:d5:89:8d:
         42:94:2e:e6:bb:a5:95:73:df:63:ab:9b:45:e8:fd:5e:e3:5d:
         bb:45:96:57:cf:fd:49:15:e5:0b:7f:2a:e1:9d:9e:65:24:8b:
         8b:ba:41:3b:a5:5a:27:79:d4:1c:5a:1e:9c:05:e1:b5:0e:04:
         4c:b7:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:25 2025 by rpki-client