Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa
File:                     ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa (raw, json)
Hash identifier:          2lCkEh2rwqNhk9Bf6kmCJ1xVMVSBLnv+EpLZG6NASy0=
Subject key identifier:   2D:55:7B:45:35:10:83:99:DB:A8:24:41:DF:C9:C7:B0:A9:56:B5:BB
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584ADECBBD68A16F72D369618280
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     22925
IP address blocks:        66.208.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bd:68:a1:6f:72:d3:69:61:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=20f43c4a-a4c6-4f0a-a9f0-a5a1565ad16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:01:11:0d:8d:59:49:12:c7:ba:7b:3e:3a:
                    23:b4:d1:ae:70:7d:44:16:db:67:b1:56:7a:d0:57:
                    79:f1:84:22:4e:24:fd:36:ea:c7:be:f2:7f:95:69:
                    b8:70:99:33:be:38:10:5b:eb:ac:f5:d4:d5:b8:78:
                    51:6f:16:5a:34:da:b3:01:dd:01:87:7c:85:19:4e:
                    6e:9f:58:c2:ba:58:53:23:ac:c8:85:00:ca:55:b6:
                    ae:88:75:c6:f4:bc:94:3d:6f:56:fc:10:4f:06:19:
                    25:23:19:46:44:fc:df:f5:c0:08:4f:31:04:2f:0f:
                    9f:a2:5d:f0:53:f8:d4:0b:b0:0f:64:19:e4:27:2f:
                    e6:13:6a:f0:ba:f3:c9:c9:45:77:90:27:e5:a3:e8:
                    64:32:b3:87:8a:e9:2c:68:a8:17:9b:c3:be:36:4c:
                    cc:bb:6d:e5:d4:da:4e:67:75:ec:7b:08:58:db:31:
                    f2:91:a9:c1:a2:c8:f7:15:09:d1:a0:e5:86:37:0f:
                    dc:22:27:cd:1a:18:2a:a7:3c:e9:cb:40:de:09:08:
                    ff:fe:75:27:2c:f9:99:82:27:ca:b6:49:a3:c2:18:
                    47:bf:dc:18:86:48:cb:f0:52:d5:92:79:5c:62:07:
                    38:07:69:aa:ac:aa:93:33:f8:09:96:41:d5:bf:9b:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:7B:45:35:10:83:99:DB:A8:24:41:DF:C9:C7:B0:A9:56:B5:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/ee0ed4d5-cb19-33ff-9df7-8591db62f62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:79:3d:ab:6c:80:95:a6:b1:e6:4b:21:4f:de:3d:8d:dd:
         97:c4:09:28:cb:af:75:fb:8b:3d:23:cd:1e:18:45:94:d8:2e:
         db:88:0a:ef:b6:a0:e8:fa:77:1e:ba:83:67:2b:dd:44:67:1b:
         d6:31:c9:6e:3f:3f:be:11:69:90:ed:6d:af:6f:97:1d:48:fd:
         2b:4a:05:8f:c0:06:15:f2:84:ca:08:64:46:b9:98:37:a5:fa:
         30:4c:02:82:fd:2e:f5:ad:55:6c:01:8b:c5:5c:ad:a5:1c:04:
         26:2a:36:2c:d8:36:10:95:7a:90:94:51:b3:41:8d:ad:33:f5:
         b6:6e:17:79:39:ce:86:80:41:a3:50:f2:97:89:97:46:81:5c:
         f1:fd:79:2b:8a:d4:27:57:36:f8:ec:df:d3:a5:6c:44:47:f8:
         c3:1d:26:1b:b1:29:5e:b3:ec:54:0f:37:30:ff:e0:4e:b4:c6:
         ae:00:60:54:b0:10:60:cd:38:26:8c:30:4c:c0:06:12:02:aa:
         6b:1a:e3:ab:e6:fb:8a:80:85:83:36:d3:26:99:24:03:0b:41:
         48:87:fd:1f:bd:99:e0:d9:10:da:4c:ae:05:52:b7:b2:32:b8:
         67:a2:c2:3c:45:79:25:d6:17:f9:4e:4f:8d:b5:09:5f:88:01:
         a5:68:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:07:38 2025 by rpki-client