Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/686da44f-d526-30d1-b2e7-2f3a72e454d6.roa
File:                     686da44f-d526-30d1-b2e7-2f3a72e454d6.roa (raw, json)
Hash identifier:          IwXytT/WD3aS0M9I47VRTo78SRhE0JF1+WzoaEMuLtw=
Subject key identifier:   E6:35:0F:D2:D8:F6:B0:2F:14:29:07:E1:4D:5B:78:42:AD:06:31:93
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584A612B1C8C6E80D990C009E080
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/686da44f-d526-30d1-b2e7-2f3a72e454d6.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        66.206.199.0/24 maxlen: 24
                          66.206.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1c:8c:6e:80:d9:90:c0:09:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=1bd20a19-34c3-475c-a732-f17487ed38b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:20:c1:f5:f1:93:bd:6b:3b:e0:da:bd:25:
                    ab:37:78:32:87:b1:51:fd:f7:80:fa:30:53:8f:f2:
                    5f:52:be:0c:65:17:51:16:6f:cd:81:39:69:cc:54:
                    0d:22:b0:47:cc:38:af:1a:8d:a0:73:3c:76:a5:31:
                    12:8f:fc:ec:d1:fd:be:8c:45:5c:86:df:17:ed:19:
                    79:00:c6:ec:40:b4:38:8a:90:1a:9b:97:c3:67:98:
                    7c:7f:d6:c9:c7:09:4d:54:6f:86:dc:ae:7a:7e:4c:
                    7c:10:a1:e8:cd:80:a8:18:f2:3c:01:0c:4a:a2:4e:
                    6e:c4:8f:93:e5:d4:d8:28:3d:6f:55:9d:64:5c:43:
                    8c:22:d4:cd:1d:8e:00:91:75:ff:b3:2a:ab:1d:5a:
                    31:c2:c1:be:8a:78:25:17:70:3f:5d:27:4e:05:5e:
                    c1:48:2b:0d:0b:d1:46:e7:0b:4f:97:17:8d:ad:e3:
                    5b:43:c7:66:11:d8:59:3b:50:0e:c4:e9:e3:4c:76:
                    64:07:88:23:f3:95:79:8b:4b:81:58:29:1b:58:78:
                    b1:23:99:93:f0:7f:3c:70:48:ca:de:0b:58:b9:49:
                    46:38:c8:7c:fd:fa:03:9f:86:39:bd:bd:52:d9:46:
                    62:98:a7:14:eb:b7:32:d8:c1:e0:4b:2d:e8:15:ee:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:0F:D2:D8:F6:B0:2F:14:29:07:E1:4D:5B:78:42:AD:06:31:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/686da44f-d526-30d1-b2e7-2f3a72e454d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.199.0/24
                  66.206.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:6e:31:5c:f8:46:81:ca:ee:aa:86:e3:f5:bf:2e:ec:b8:
         d0:fc:96:a5:36:77:d0:ed:b7:96:1a:8d:e5:d2:6a:a2:8e:00:
         95:b7:07:4b:93:a9:29:6b:f4:56:da:6d:c3:1d:e1:ed:75:ce:
         34:8d:c0:12:ad:93:3c:28:fe:1e:87:09:d6:c5:7e:18:0f:c1:
         a7:ce:df:82:44:63:e5:7e:9c:35:5e:98:ec:d4:5a:c1:85:49:
         87:e9:a7:68:8e:69:74:d1:99:f0:31:6e:3b:6d:88:7a:96:f4:
         26:d0:5c:aa:09:cf:73:b0:ab:d5:29:27:ba:7c:e4:72:ba:5c:
         73:74:a5:fd:47:73:01:89:07:24:19:2f:57:81:93:fc:e8:7d:
         ef:7d:1e:7d:a5:f2:cf:98:82:60:39:37:7c:10:ed:d7:a1:da:
         9a:4a:43:cc:2d:45:81:68:55:26:d5:0e:3a:34:ec:e9:26:d3:
         9e:13:48:95:0b:71:6a:c9:a6:ab:c2:32:67:7a:0d:62:44:62:
         fc:86:ed:50:dc:4f:af:93:af:d3:35:0d:d3:0d:81:aa:56:00:
         1f:84:ea:91:39:b0:a0:bb:c9:e9:50:01:f9:22:84:3e:57:a4:
         16:d7:fb:47:95:95:4c:96:1d:cc:91:d5:5a:a1:ea:35:7c:60:
         01:d3:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 17:49:09 2025 by rpki-client