Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa
File:                     f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa (raw, json)
Hash identifier:          XB1qp4sBi4UfDO3UOJY7E85KBIboqOzKZbGvK5kZCxs=
Subject key identifier:   4F:F5:DE:63:10:02:18:8B:FB:AD:35:AE:D4:83:D1:B9:A7:BB:F2:56
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584A9FFB9560BD294B8C4B823500
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     51964
IP address blocks:        66.96.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:95:60:bd:29:4b:8c:4b:82:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=8793185c-9acb-454f-b0b0-4041caad250c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:08:b1:ad:1d:19:44:e7:d9:54:90:78:5e:
                    82:28:e2:7f:6a:63:6d:4b:43:52:37:90:50:ec:a7:
                    aa:2b:e1:a9:01:dc:85:ba:c0:61:de:ab:8e:c8:31:
                    1a:15:b4:4c:ea:24:73:b6:5d:41:b7:80:25:ed:20:
                    b4:ba:9a:fe:6e:75:a7:60:ae:5c:72:38:a8:58:c4:
                    63:69:53:3b:b4:0c:03:fc:b2:86:ac:0d:c4:78:f4:
                    e8:90:e1:06:38:25:77:e7:69:8d:43:91:f9:74:78:
                    97:a5:ae:e2:81:70:af:5b:fe:bc:b6:00:a8:77:b3:
                    0c:a8:41:9e:e1:4c:09:4f:49:4a:39:f2:9b:74:18:
                    16:2a:e0:fa:83:4d:ee:10:76:42:a8:c1:73:da:4a:
                    59:64:56:47:32:50:c4:9b:71:e2:54:1d:bd:e5:dd:
                    5a:b5:9c:0b:d8:40:30:11:4f:12:4c:6a:09:ce:13:
                    5d:e5:70:28:ba:4a:ce:2d:f0:00:92:1d:45:6a:c1:
                    09:e9:0c:e2:13:f7:9c:80:07:78:f8:a4:83:5e:94:
                    85:6b:36:d9:42:f1:42:cb:29:f6:90:44:33:28:7a:
                    46:26:8a:10:5a:6d:e2:e8:df:20:7b:8a:64:f0:6b:
                    69:86:47:8c:5b:6f:bc:d1:ef:fe:b9:a6:fa:2e:ef:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F5:DE:63:10:02:18:8B:FB:AD:35:AE:D4:83:D1:B9:A7:BB:F2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f4d33456-a8fc-3c40-8217-77838ab3fb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:d4:97:43:25:f7:5f:4d:2d:a9:9e:15:3c:0c:33:75:73:
         32:49:c3:85:e0:8a:6b:0f:57:f5:30:43:0e:7d:4d:58:bd:00:
         f3:f3:51:1b:f8:08:5f:f0:82:62:d2:ed:e2:fa:34:22:72:7c:
         72:9d:d8:fa:ef:06:9e:9d:9b:14:1a:31:12:6f:d6:46:f8:9f:
         8a:3c:ad:1a:18:22:6c:fa:93:94:05:08:e7:bc:b6:eb:ad:d9:
         ee:06:61:3e:ab:ba:85:b7:fb:cf:1b:52:eb:ee:ef:8c:7d:93:
         ec:72:0a:c7:05:06:2e:55:5a:18:45:fc:1d:d4:f1:df:02:12:
         d2:ef:06:52:52:52:aa:23:a6:66:a6:3f:25:6b:58:09:5a:42:
         8c:c5:6a:ed:e7:20:8f:f5:56:eb:80:9f:a4:60:9c:3e:9e:66:
         6d:c1:d3:5c:65:87:f2:66:76:f2:d5:2b:58:e6:bf:c0:e3:6b:
         3b:40:94:ba:68:9f:d3:b7:96:d1:8e:7c:fa:ae:c5:bd:ef:98:
         4f:54:7e:d0:2e:28:7e:3e:6c:cd:ea:6e:81:d4:3b:e2:2d:7e:
         4c:40:55:8f:86:4a:a6:64:11:dc:a6:61:d0:2d:b5:92:75:2e:
         37:11:98:26:5f:5a:1e:6b:a6:8a:5e:a1:97:1b:60:e8:72:d3:
         4a:3d:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:11:21 2025 by rpki-client