Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
File:                     7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa (raw, json)
Hash identifier:          lgnIAfvRnBtWG7rIeefE0tYjjFNrG3cMJQuq5y/MhaQ=
Subject key identifier:   8F:A9:FF:24:2B:20:89:6F:89:60:80:99:19:68:34:15:6B:9E:B3:6C
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584B0E4151BDA15BFB4AD6F87C00
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     12684
IP address blocks:        66.119.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:51:bd:a1:5b:fb:4a:d6:f8:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=d1847d5f-aab2-4aba-a57c-bfe00c205622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:ef:9c:03:36:c0:a2:37:62:fc:0a:40:4d:
                    e5:f9:f6:68:dc:85:17:3d:83:70:8d:12:82:95:44:
                    30:f1:2d:37:2d:d2:06:ea:99:5c:19:e0:a7:47:21:
                    65:92:ec:84:f1:a2:3d:7e:c5:80:7e:78:61:65:a5:
                    74:dc:88:bb:de:37:ac:7c:cb:0b:93:c8:c2:b5:2f:
                    a9:83:d9:c6:3e:91:22:7c:40:e0:49:c7:ba:9c:29:
                    25:d8:19:77:de:c6:ad:0b:6f:cc:ad:15:80:63:67:
                    ff:57:91:47:f2:61:3d:d2:6b:19:98:7c:76:c4:e7:
                    97:a1:70:7b:b0:65:0d:e3:5c:8e:84:29:bd:5c:27:
                    ee:83:f3:a8:4d:93:1f:6a:42:f2:98:dd:83:35:40:
                    cf:1e:28:b2:8d:c1:2a:67:63:b8:ba:1c:c9:0f:cf:
                    eb:da:45:68:37:48:30:e1:83:a7:ad:67:4c:28:21:
                    f7:a6:cb:9c:24:3a:8e:dc:94:68:2c:9b:73:91:2e:
                    6e:9a:b4:5d:27:24:53:31:97:71:b6:85:6e:4e:68:
                    1e:d4:23:40:ac:fa:d2:ba:5f:f0:51:78:90:30:d6:
                    54:38:7b:c4:15:56:c9:73:d4:7c:a0:9d:8c:0b:6e:
                    cd:1a:1d:ba:68:14:08:88:a5:98:7e:a6:30:49:d6:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:FF:24:2B:20:89:6F:89:60:80:99:19:68:34:15:6B:9E:B3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:24:a3:76:0c:2f:95:cc:fa:98:57:dd:84:2c:1d:fb:ad:
         d2:69:c3:4d:f3:10:7f:e0:df:63:be:41:82:bc:9a:a7:e0:d6:
         b4:e9:8c:dc:90:e8:5d:c8:d7:57:49:4f:4e:6a:98:3d:ec:f5:
         3c:7d:80:28:1f:59:8e:86:37:72:03:e8:65:19:99:eb:07:37:
         83:61:62:2e:71:69:f8:08:47:94:55:41:42:0a:47:0c:e0:87:
         4b:92:52:b1:df:ac:3c:2f:b1:97:06:f1:26:80:0c:7e:16:85:
         f1:88:37:84:d1:a7:39:63:6b:17:55:be:df:2b:08:73:78:c2:
         6a:d3:df:9e:95:ee:74:d6:3b:32:06:e9:73:6c:43:84:fb:6f:
         2b:e7:b6:f1:58:aa:53:4e:4f:0d:11:0c:cb:c5:f1:ec:80:55:
         dc:ae:73:fd:84:a8:45:7a:a5:bd:30:ce:a9:23:19:94:b8:d2:
         36:1b:bb:c9:4f:f3:03:48:22:00:ba:a1:a8:dd:c8:6c:7d:dd:
         7d:c5:73:5a:15:bc:67:79:a6:2f:ba:65:7a:1d:02:75:bc:9e:
         3e:3a:fe:a5:e1:33:f3:8b:03:cf:fa:89:a0:30:e2:dc:a6:ef:
         fd:a5:e8:91:d6:79:82:b0:a4:42:40:9d:cd:1a:29:90:87:13:
         e8:83:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:51 2025 by rpki-client