Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/411f6cdc-80f5-36ea-919a-66f168dec439.roa
File:                     411f6cdc-80f5-36ea-919a-66f168dec439.roa (raw, json)
Hash identifier:          h50ddFcXmSbV0dr2bZuJAY9dAG4clzvgYfp/msfvEeg=
Subject key identifier:   DD:A4:A9:B2:DB:EA:CC:94:6B:07:CB:E7:A9:30:BD:69:2E:A2:88:1E
Certificate issuer:       /CN=9b363682-90e4-4356-b229-137b0af7add1
Certificate serial:       010D0C9F432858495C243C5FE47D3AC973991800
Authority key identifier: B8:C2:54:40:4B:0D:00:73:64:D1:35:7E:B7:FF:4C:73:D0:29:A0:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/411f6cdc-80f5-36ea-919a-66f168dec439.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     693
IP address blocks:        66.205.160.0/20 maxlen: 24
                          66.254.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3c:5f:e4:7d:3a:c9:73:99:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b363682-90e4-4356-b229-137b0af7add1
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=57f0edfa-10c9-46c2-8327-1df71cfb7501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:1f:7e:e2:80:36:0e:e1:b3:fe:14:a7:09:
                    fa:45:87:aa:44:cc:b7:18:3a:1d:fb:77:94:11:67:
                    d0:15:29:c9:d1:8f:39:25:57:9a:b7:3c:58:e9:ca:
                    23:7c:07:c8:2c:ed:36:b6:a5:3e:0c:fe:ae:2d:83:
                    10:16:a7:f3:5a:10:56:6c:dc:d3:e7:e7:22:41:a4:
                    8d:97:59:e6:ba:75:b2:c4:6a:4b:78:c2:05:31:12:
                    1c:51:a2:ec:2f:f6:39:fe:c5:81:c8:e2:ea:d4:56:
                    f6:6f:37:12:c8:84:c8:c3:ef:d7:4d:c9:7e:8d:d1:
                    ec:2e:d2:57:8a:f4:96:de:9b:20:86:12:1e:69:66:
                    7e:e9:d4:1f:97:1e:08:7f:c2:a3:27:59:00:22:e2:
                    c2:14:27:7c:0c:ba:71:41:39:47:ba:ce:cd:45:ee:
                    10:08:74:fc:11:75:b8:14:be:3c:d9:f1:38:ac:00:
                    53:6f:dd:d9:7c:b8:2b:44:7d:13:e0:e8:02:b6:6b:
                    30:96:80:56:0f:3a:c0:3e:f4:08:0c:88:b5:ea:6b:
                    ce:24:78:6f:64:c7:8f:fe:ca:29:72:a5:9a:f0:6e:
                    e9:ab:d3:71:1d:1a:36:95:d3:e7:77:c1:11:88:c2:
                    08:fc:15:5d:44:e1:31:42:1a:b2:65:c8:19:7a:f9:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A4:A9:B2:DB:EA:CC:94:6B:07:CB:E7:A9:30:BD:69:2E:A2:88:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/411f6cdc-80f5-36ea-919a-66f168dec439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.crl

            X509v3 Authority Key Identifier:
                keyid:B8:C2:54:40:4B:0D:00:73:64:D1:35:7E:B7:FF:4C:73:D0:29:A0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.160.0/20
                  66.254.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:38:b5:13:b6:92:f0:95:77:4c:56:0a:02:c1:3b:c6:2a:
         64:99:65:71:c5:05:4e:10:3a:84:22:5a:01:d5:df:a1:c8:5f:
         41:94:ce:77:8a:13:85:a1:37:40:21:8c:76:68:a6:5f:55:a1:
         6f:fa:69:ff:1e:a2:ac:53:82:28:b4:9f:74:42:b3:41:c4:eb:
         73:d3:f5:36:3f:be:1c:c4:d9:30:af:8b:78:4d:b6:df:7a:e6:
         f0:9c:ee:7f:5c:46:32:3f:35:22:47:17:c9:33:4d:a7:80:68:
         50:74:c1:c2:21:a0:16:12:41:59:07:50:db:f6:9f:07:a6:4c:
         85:e2:2f:8b:55:5f:90:54:6f:6f:24:4d:4c:b3:b4:7d:6d:f1:
         63:af:9c:92:97:db:69:cb:71:1a:57:6a:b7:53:73:5a:ac:89:
         f6:d6:41:bf:7c:2b:65:ea:da:40:c3:da:4e:de:61:81:cf:72:
         e4:ed:bb:16:92:ae:72:b2:e9:63:dd:00:a5:95:32:64:84:41:
         f4:65:d0:38:d2:8c:4d:ab:b6:27:a2:43:64:27:0d:a8:4f:3a:
         0e:73:4d:ef:28:27:0a:f4:04:25:5a:ee:4a:66:5e:31:21:9d:
         64:a1:3c:4a:15:40:c9:99:74:8b:1a:c5:fb:b7:0a:bc:93:bb:
         45:04:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:59 2025 by rpki-client