Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa
File:                     9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa (raw, json)
Hash identifier:          S3uVFw0IpBGMRgcKQxV0mWxE6Rtzk5cWxXleQpVtGcU=
Subject key identifier:   56:35:40:92:9D:B2:9D:99:08:82:DF:A1:60:73:B9:9E:2E:E4:95:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16526F9895E718A973859A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     13367
IP address blocks:        66.41.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:26:f9:89:5e:71:8a:97:38:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5e22961b-33f0-42a6-80c6-84d1b82cb5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:99:d4:d3:61:03:ee:c9:eb:de:bd:17:83:c9:
                    7d:07:c7:96:4e:3c:95:00:6a:76:fb:c4:91:95:63:
                    25:5e:31:cc:fe:4b:e1:ec:33:db:fc:b7:ca:d3:ee:
                    33:e5:a5:bf:15:32:75:a2:39:c1:07:d5:f0:09:e2:
                    9f:a6:db:4c:26:17:cc:90:40:16:b2:3b:fc:0b:50:
                    97:a1:d8:8c:a2:f1:d9:60:a7:24:34:98:2f:0e:2b:
                    0f:04:91:90:0a:f6:43:fb:77:90:3f:c6:42:cb:09:
                    2d:82:59:c8:c8:b2:c3:9b:44:d0:37:28:b6:f4:ca:
                    f5:e5:8b:b9:3e:57:89:f4:53:8f:f5:e9:93:87:0c:
                    46:27:98:ef:cc:d9:db:fd:a8:b4:45:1f:a9:42:e9:
                    98:4a:b9:bf:81:8d:f8:98:6c:23:82:ee:12:6f:f8:
                    76:e9:b0:95:f1:7a:73:19:f1:f8:7f:96:a4:91:8a:
                    c3:19:c0:02:0f:50:b7:79:23:93:d7:bf:91:d3:d7:
                    61:82:29:8e:1b:64:48:30:03:ba:e9:22:27:66:0c:
                    bf:28:99:4b:0f:e7:3b:7a:07:02:ca:cc:dc:39:25:
                    23:6a:4d:04:f3:65:c5:25:95:95:4e:8c:47:ee:84:
                    3a:79:27:31:ce:bb:83:21:cd:f0:40:f4:f5:55:bd:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:35:40:92:9D:B2:9D:99:08:82:DF:A1:60:73:B9:9E:2E:E4:95:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ee7e0e5-b050-3a55-ae98-086d9199ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:86:10:f0:99:ed:b3:20:c1:e7:22:04:82:97:f4:38:03:d3:
         21:46:3e:1a:b2:9b:51:d5:b3:27:48:50:17:41:7b:76:0b:03:
         3f:22:31:53:c8:78:9f:e5:23:3a:4b:d4:ad:10:a0:16:91:2a:
         de:e6:99:03:65:68:6f:25:80:cc:67:b6:4e:43:02:c8:94:7a:
         1a:ad:af:42:9a:75:e1:17:5a:8e:19:b0:22:62:f1:fa:ca:d0:
         3c:6b:eb:aa:48:31:5f:d3:0f:c2:76:f5:5e:01:88:6b:7f:62:
         e3:6d:20:5a:b4:a9:89:25:b8:a0:7c:6f:bf:a5:9b:c6:53:d6:
         0a:5f:2b:1d:d9:7c:00:91:dc:3e:2d:08:3a:12:83:91:a1:48:
         1c:53:5b:b6:cf:d7:0a:ce:e1:a7:b8:15:e6:70:19:76:4f:9f:
         37:90:d9:04:4e:7a:dd:71:cf:10:68:97:3e:e8:0a:b7:bc:29:
         61:a9:42:e2:e0:0b:50:fe:69:84:79:d4:21:60:a4:f8:d1:3d:
         88:ab:1e:55:42:36:1d:3e:ef:25:81:c0:7a:76:f9:f1:bb:a8:
         81:e8:16:d9:97:46:94:c4:df:5a:0d:b3:7d:e7:8d:ce:d1:bf:
         8e:86:90:d3:bf:e1:4a:02:dc:1b:c7:6a:3e:d6:91:c6:29:fd:
         8f:f8:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:25:32 2025 by rpki-client