Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8815689d-8653-31e7-a5d3-d77139c0621d.roa
File:                     8815689d-8653-31e7-a5d3-d77139c0621d.roa (raw, json)
Hash identifier:          wPsvb9mwoij07QVrU7ayRxRyxq2UnzSfWQ0H6rCIT4g=
Subject key identifier:   58:35:F9:2D:D6:C2:65:D9:92:91:77:25:9A:39:75:AD:AF:60:14:6B
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285849E7BA83390FF72BBDC5EB0A00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8815689d-8653-31e7-a5d3-d77139c0621d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     36007
IP address blocks:        66.55.70.0/24 maxlen: 24
                          66.55.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:39:0f:f7:2b:bd:c5:eb:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=468d5f96-c755-406e-a8ad-0cb217182408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:95:85:89:03:e9:61:e9:7f:01:91:92:dd:
                    d6:f1:2a:54:d9:51:77:16:d6:61:31:00:f0:bb:d5:
                    57:8a:f7:7c:1c:d9:fd:1e:2c:3f:32:8e:9b:4e:52:
                    5f:28:be:6c:9c:58:0e:d2:9b:cc:eb:cd:a9:f3:90:
                    8c:07:14:72:1a:43:2a:13:58:61:31:66:69:d8:aa:
                    69:67:41:6d:c6:a2:fc:58:9f:bc:39:23:5b:31:18:
                    2a:97:f9:b3:57:96:f3:e8:df:ed:e9:a1:30:6d:99:
                    0d:ee:55:f6:a7:44:10:5a:83:ac:89:c0:1b:5b:0e:
                    59:8c:82:7b:01:e4:cf:f4:96:11:6e:a3:fb:a0:85:
                    ef:7a:0a:43:a0:0d:44:df:88:77:12:b1:1c:51:c0:
                    4b:91:a2:55:d4:cd:ca:26:24:bd:4a:5d:07:60:57:
                    5b:71:09:cc:d8:14:e6:3f:a1:0f:37:6f:d4:30:9e:
                    07:96:36:e8:20:7e:c3:df:41:4f:63:66:b8:96:e9:
                    ff:81:f2:94:77:31:e9:41:09:7a:0a:7c:07:88:ee:
                    84:3f:00:f5:f8:f2:5d:2c:87:4a:e3:df:c0:6d:b9:
                    b2:0e:a7:d3:9b:d7:8d:1f:5e:de:58:65:14:75:ff:
                    ec:d6:17:78:ad:b3:f2:e4:14:75:65:35:a0:20:52:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:F9:2D:D6:C2:65:D9:92:91:77:25:9A:39:75:AD:AF:60:14:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8815689d-8653-31e7-a5d3-d77139c0621d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:9d:fb:57:2e:b1:98:fa:e9:0f:e1:58:cf:ce:cc:dc:50:
         e2:e0:6b:1b:24:db:76:14:6d:60:25:6e:cf:f6:d4:a2:21:a3:
         95:89:d1:23:d9:6e:71:e5:c5:b2:55:e1:08:dd:22:82:92:ce:
         d7:7f:61:ab:be:d7:8a:9b:6c:b7:9b:0a:32:38:1a:81:0f:fa:
         67:73:1c:3b:ec:92:8f:0c:c7:c6:a2:7c:f6:61:6c:e9:6c:35:
         38:f7:1d:18:49:a9:b5:f8:f7:df:11:ba:b8:db:cd:ba:25:90:
         41:58:06:0a:de:d9:30:e8:92:6b:14:d8:a7:ba:bd:29:26:fb:
         aa:71:c4:4b:f1:11:a1:1a:be:7e:1a:34:84:24:b9:b4:c7:88:
         2a:59:24:3b:ea:98:27:ef:cf:b9:32:74:e7:f7:6b:73:da:af:
         88:08:d3:1a:2a:e0:af:93:83:1a:48:dc:de:6c:e7:b8:b7:20:
         ef:32:79:08:6a:a1:84:59:d1:7b:a0:c6:a7:ab:c6:41:57:9e:
         74:4c:3f:f4:22:29:9b:4f:16:6c:b7:c9:4d:dc:f9:26:25:a7:
         ae:f0:a4:e5:d8:96:83:0e:e8:89:f9:97:93:92:bb:04:0d:43:
         11:d8:f5:27:55:46:08:80:cd:1e:4e:ea:94:e3:97:f8:f9:d3:
         54:15:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:42 2025 by rpki-client