Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa
File:                     7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa (raw, json)
Hash identifier:          woy9aSTslVzkoYayIeLBOOrUMjdI7WRvr494aGCpDO0=
Subject key identifier:   93:88:D7:CD:EE:FF:18:3B:6D:AA:48:C7:01:13:65:2A:36:CE:36:D5
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285848F926AFA52F9035610122FA00
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25899
IP address blocks:        67.59.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:af:a5:2f:90:35:61:01:22:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f6204e3c-07ad-43bb-ac7d-72b1fee96843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:64:01:3f:17:bb:9e:aa:47:56:de:37:1f:
                    01:2b:42:08:d5:29:b7:af:aa:3c:4a:ed:90:97:38:
                    61:88:4f:cb:57:88:64:cd:7c:1b:b5:8e:59:99:73:
                    4a:49:a6:b4:de:50:07:24:31:c3:b6:c2:21:ae:f7:
                    40:a2:5c:78:b1:d1:23:5b:c3:2b:d1:19:11:e7:39:
                    89:21:8a:bb:49:7a:b4:d8:99:58:0a:3e:eb:93:1a:
                    9b:cb:5d:04:db:47:a4:0a:b7:17:ab:db:ba:47:f1:
                    bc:4a:93:81:c3:a2:ba:bd:08:0b:63:92:8e:bc:c6:
                    3e:0e:fe:f4:03:16:91:3f:b8:9c:d0:4a:ee:80:98:
                    28:99:da:e8:df:c5:59:43:7d:d0:b4:5a:f6:4b:1a:
                    fc:a5:81:6c:d2:61:e4:8a:55:9e:ec:93:ca:d8:40:
                    aa:79:69:22:48:bb:d0:5e:f0:dd:50:9e:7c:47:2c:
                    56:5c:bd:3a:d0:1f:b3:8e:77:73:f6:da:7b:18:ed:
                    e1:f4:6d:0d:af:2e:1a:5d:de:99:11:2b:8a:20:c5:
                    83:98:b3:d9:c6:8d:3e:5f:54:a6:d5:f5:12:78:90:
                    de:7c:d8:ce:5a:c7:11:d5:e9:6b:e8:f1:f5:51:0a:
                    43:14:ea:ad:0e:e5:45:ec:f1:dd:ee:9f:cc:a6:8c:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:88:D7:CD:EE:FF:18:3B:6D:AA:48:C7:01:13:65:2A:36:CE:36:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:96:4d:b6:93:ff:86:e7:ff:4b:a9:7a:d6:6f:4e:77:e7:
         ea:f9:ef:46:c3:fa:ee:20:d1:4b:ba:8f:ba:67:dd:42:51:ba:
         fa:38:15:aa:7a:6f:3b:34:9d:69:c9:da:3b:6f:8c:6c:92:90:
         4f:b1:f2:77:0d:90:20:52:37:f1:52:29:c5:f9:c1:b3:8b:ed:
         ef:57:ee:0c:2e:e7:6d:33:33:58:bd:71:82:bf:dc:59:60:ea:
         06:76:8b:4c:ba:48:b7:3b:a8:a7:24:8e:32:82:df:d9:1e:69:
         db:2e:74:bf:4e:b3:18:c4:c9:59:37:35:7d:b0:ac:f3:a3:35:
         63:08:f9:12:f4:bb:54:52:60:34:1b:09:14:d6:7e:cd:65:3b:
         01:27:04:b0:c4:e6:04:f9:59:60:b1:67:11:1f:fe:8a:f0:fd:
         fe:f2:44:99:1c:7c:cc:fd:75:04:2e:24:68:23:c5:1a:d0:27:
         d9:63:10:7e:84:ab:f7:91:6e:8f:18:ce:34:37:cb:35:e2:c0:
         2c:46:35:4f:90:60:a4:dd:fa:29:58:d9:d7:a5:6c:5d:f1:e0:
         50:0f:a4:0d:bc:81:0d:5e:af:8a:16:c4:42:67:80:bf:1b:5b:
         85:4f:8c:42:27:40:10:7a:72:ca:27:6f:32:20:ec:81:52:b0:
         da:bc:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:59:58 2025 by rpki-client