Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/66274923-a30a-3ab0-bddf-e417ab046680.roa
File:                     66274923-a30a-3ab0-bddf-e417ab046680.roa (raw, json)
Hash identifier:          38uh7SWzchGMJNSNWcFgV1NbGmfIRPlhQnCe1NeD7eY=
Subject key identifier:   AD:3F:35:F5:6E:47:1D:C1:A3:DC:77:8D:75:09:68:ED:C1:26:71:5F
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A61AAEE3422F72035D5EC0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/66274923-a30a-3ab0-bddf-e417ab046680.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        162.254.248.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1a:ae:e3:42:2f:72:03:5d:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=4b0d0c8c-2924-4850-882d-79d5de04c00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:f6:b6:5e:5d:a9:04:0e:55:23:7a:54:5f:
                    e0:be:f5:37:26:c1:4e:76:8a:1d:26:7c:8a:04:aa:
                    b9:93:b4:18:3a:a3:b8:92:f4:52:9f:11:bb:86:c2:
                    fe:7d:61:71:c6:9e:b9:f6:b9:df:6d:13:fb:1f:8b:
                    29:76:3a:0c:a1:f5:b3:bf:ab:0d:a9:af:0c:17:09:
                    a8:58:31:07:ac:6a:e8:4f:63:c1:5d:f7:8c:54:28:
                    00:f9:1e:2a:7a:ff:e8:a4:43:bc:51:8c:c5:8c:d0:
                    cd:89:2a:eb:e3:95:db:51:5e:17:23:ae:b4:0a:c1:
                    d3:c6:4a:53:1d:10:29:e5:68:1c:1a:42:b6:57:31:
                    ba:c9:36:c8:a8:0d:9c:23:6e:91:eb:e2:f5:9f:85:
                    39:69:d4:f5:45:2f:a8:ad:14:69:60:17:c0:d4:a0:
                    e4:35:bd:81:42:12:b4:50:98:ad:04:58:ee:c1:61:
                    9d:36:a5:af:e8:a5:71:23:e5:08:3a:d2:a7:08:53:
                    8c:5d:5a:f0:d0:4a:ff:c3:d9:1d:eb:9b:52:74:1b:
                    3f:31:61:6e:37:1e:a5:c9:9c:da:1a:62:5f:60:64:
                    7f:2e:90:52:82:54:6b:35:e7:44:5c:87:6a:72:a2:
                    48:46:77:3e:0c:76:d8:fb:27:b9:50:35:1d:6b:4d:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3F:35:F5:6E:47:1D:C1:A3:DC:77:8D:75:09:68:ED:C1:26:71:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/66274923-a30a-3ab0-bddf-e417ab046680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:b2:5d:6d:b9:44:2b:5f:20:a5:2e:97:1f:33:18:58:7c:
         e7:2f:3b:34:08:b4:fe:91:2b:10:c2:f5:80:ad:cd:7b:96:8c:
         26:44:36:a9:bf:99:bf:72:d8:72:1a:0a:8f:af:fd:67:91:3f:
         d5:ae:21:b3:04:cd:ab:2e:dd:52:6b:b1:cb:ff:2b:76:83:82:
         ca:27:4f:25:5f:5a:26:b9:85:f7:23:e8:fc:d2:a0:c0:6a:a2:
         64:f0:b1:9c:61:c8:c8:c7:1e:66:41:c9:fd:31:35:7d:88:bd:
         9b:4f:b1:a2:e9:67:45:87:9c:90:21:83:b8:8b:e1:6b:4a:d0:
         b0:70:ed:38:a4:d4:6c:ff:09:5e:d6:09:db:80:43:36:de:1c:
         25:e8:aa:be:b5:37:e7:a3:bf:1b:0b:a3:a2:99:2a:8f:f8:0d:
         9f:a3:27:45:21:4c:77:8a:e9:5a:6c:b5:eb:2a:49:08:8d:07:
         fd:d5:ac:f7:d4:48:71:72:49:33:a5:05:bd:71:a5:06:2e:0d:
         63:66:10:fb:9d:2c:b6:0c:ad:1d:11:47:46:6c:b6:f3:1d:78:
         67:5a:29:68:3c:28:b3:7a:b6:92:84:d5:77:89:2a:f4:a2:38:
         ce:ed:69:73:71:a1:46:a9:10:e3:99:e7:6b:ff:91:53:94:9d:
         0c:16:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:01:11 2025 by rpki-client