Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa
File:                     c66f8dab-484a-3cbe-8820-e423a3150bdf.roa (raw, json)
Hash identifier:          EsB3hCXjUmr7bAroa+JRSUD3OwpDaQdLt6y99KjJenE=
Subject key identifier:   F0:1F:1B:D8:90:43:0C:52:C8:65:C6:5F:F1:62:C1:7C:EB:F5:63:04
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584B01B1482A8888C785A87AD900
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     29789
IP address blocks:        66.254.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:48:2a:88:88:c7:85:a8:7a:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=80270499-753b-4f85-a327-12ed3df91732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:48:56:43:78:3a:6f:3b:f1:93:57:fe:5f:
                    cb:47:1a:62:20:d7:5c:7e:64:52:94:19:2c:ae:88:
                    ee:41:29:a9:0e:f6:26:70:2f:57:69:f3:77:c9:af:
                    72:0a:87:cc:bd:3c:2a:6c:16:c4:e3:94:9f:18:9d:
                    d1:21:9f:cb:85:31:c5:68:4c:9f:69:16:d3:0a:61:
                    50:b9:f8:58:ed:cb:35:5a:13:f1:18:24:36:1f:42:
                    af:5b:dd:3f:57:69:f2:6c:52:bb:af:80:e4:ba:3b:
                    ef:98:23:9c:34:ab:31:80:a7:ea:81:2e:31:19:dc:
                    3d:33:ef:91:d8:af:da:a1:03:68:27:9a:db:c1:5f:
                    34:72:1d:ac:d1:f2:4d:18:53:23:b3:21:55:b8:58:
                    8b:b1:99:d0:2c:c0:9f:de:8e:a4:4f:a7:59:56:e9:
                    4a:ef:d0:e7:73:b4:79:8d:e6:91:47:1c:11:8f:1a:
                    f7:95:ca:d3:fb:98:eb:6d:5c:1a:ea:0f:ca:51:b0:
                    25:f5:94:6a:5c:57:9c:3e:ab:d9:c6:b6:f4:1f:b1:
                    c2:90:54:23:df:3e:0a:37:3a:95:12:20:bb:d3:62:
                    8a:05:77:1c:f6:6a:66:67:b0:9e:c6:1c:9b:38:70:
                    40:2b:24:5a:23:00:e2:97:51:2f:f2:3e:61:1b:31:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1F:1B:D8:90:43:0C:52:C8:65:C6:5F:F1:62:C1:7C:EB:F5:63:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/c66f8dab-484a-3cbe-8820-e423a3150bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:92:75:6f:0d:8f:30:aa:46:21:51:85:be:1b:2f:6c:e9:5a:
         bf:34:d6:c5:48:a5:18:3e:58:fd:52:3b:26:3b:f9:cd:b1:a4:
         9b:95:e0:38:49:78:dc:3e:60:d8:79:50:6d:88:b1:33:6f:a7:
         7f:b5:65:cf:00:d9:e0:9b:c3:57:68:8a:f9:ac:23:96:7e:75:
         6b:59:ba:80:bf:b3:20:0a:37:bd:b9:da:aa:8f:f3:17:1c:6e:
         4f:15:d5:1b:26:7e:5f:af:f7:86:56:6c:79:40:80:38:ff:c1:
         34:9f:97:b7:e2:0b:69:82:47:ac:49:8d:f0:a8:8a:9c:c5:c1:
         07:d5:95:eb:be:35:39:3c:a7:9c:83:92:83:61:8b:d5:e0:34:
         df:b1:3f:10:d8:b8:2d:aa:bb:a7:21:04:ac:d2:d6:1c:a7:36:
         ab:fd:d0:85:36:b8:9c:62:42:ec:78:e1:85:7b:40:77:68:4e:
         80:cb:ba:23:dc:8e:27:a2:0a:18:95:1c:0b:41:de:b4:0f:4c:
         f5:54:29:37:a2:63:6d:89:3a:4a:4c:5f:fa:c6:ce:d7:2d:42:
         2b:76:a7:b6:6c:bc:df:36:74:8e:0b:dd:4c:27:6a:51:ff:74:
         cd:82:e3:7c:e9:d5:35:f3:9d:38:ff:70:88:1a:78:df:92:9e:
         26:4c:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:34 2025 by rpki-client