Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/adb93378-8550-3cbe-9e67-6f7c419c0d30.roa
File:                     adb93378-8550-3cbe-9e67-6f7c419c0d30.roa (raw, json)
Hash identifier:          N4ZF5tHXsgs+Rp596PHqtKHsrFN+UOfAaMnBlkYd28s=
Subject key identifier:   6C:8F:B8:56:21:D2:03:B9:FA:D2:0A:BD:17:77:47:A3:B4:80:61:26
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F432858491D71835C3F7455DB3A31ED00
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/adb93378-8550-3cbe-9e67-6f7c419c0d30.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     29748
IP address blocks:        66.179.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:83:5c:3f:74:55:db:3a:31:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=ee3637aa-2f5e-4374-bbf7-dcd50f2c8688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:29:0f:4f:2d:d2:64:0c:19:94:bd:e0:c7:
                    d6:f7:53:f2:a8:13:50:57:ec:a9:da:65:8e:7f:b2:
                    d4:ca:2b:d1:ea:87:7b:c2:31:64:8f:69:4d:00:db:
                    97:4b:87:42:46:a8:17:86:59:ae:b7:5c:44:09:d0:
                    61:29:3a:96:9d:03:8b:61:9d:d5:c6:53:af:c1:bd:
                    dd:ca:4a:b2:db:84:a9:56:6b:a7:75:46:59:f1:17:
                    e0:a8:6f:fb:85:76:9f:9b:4c:bf:76:64:da:e0:6a:
                    94:14:b7:eb:51:39:6a:7b:ca:6e:d6:a0:29:50:16:
                    4a:0a:a1:df:3b:d4:28:4b:cc:07:cb:d3:10:cd:a2:
                    07:4a:00:f2:f3:ad:c9:b9:fb:38:da:4a:d1:a6:2c:
                    c6:42:11:8b:d9:8c:91:16:33:37:37:d2:4e:ba:51:
                    39:27:b7:6c:3c:84:40:4b:74:ec:8b:7e:d9:55:f3:
                    98:d8:0e:7e:43:5b:a0:18:48:8c:9d:01:94:c0:64:
                    33:8c:c2:d9:71:4b:22:ef:b6:ff:ef:ff:d6:13:91:
                    24:38:0d:7d:dc:db:ca:5b:ad:87:45:24:9b:9b:27:
                    c8:c0:10:c6:db:9b:7f:70:47:27:c9:a4:c4:e1:56:
                    2e:16:aa:1d:a3:60:4b:4b:55:5f:c6:00:4b:aa:ce:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8F:B8:56:21:D2:03:B9:FA:D2:0A:BD:17:77:47:A3:B4:80:61:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/adb93378-8550-3cbe-9e67-6f7c419c0d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:6a:4b:3a:15:d7:1b:86:e3:ba:74:71:cb:f9:20:be:b7:
         a3:3a:ef:be:98:ec:8c:af:bf:1b:ef:40:38:89:48:ee:65:e2:
         1b:4b:24:9e:51:07:82:1a:d8:27:e7:f1:0f:86:68:d5:62:37:
         f4:df:83:b8:a5:db:1f:b8:aa:32:5a:fe:93:97:56:a8:8f:4d:
         bc:71:1e:9b:c4:f8:e0:e8:65:37:33:55:d4:ef:38:6b:30:a4:
         ab:80:b3:d2:e4:64:e1:27:cf:d0:2a:a5:e9:8e:b0:df:59:a8:
         d5:5e:45:9a:fe:1c:d6:d9:3c:cb:6f:3a:73:c1:54:a0:18:56:
         64:8e:01:3d:af:6d:3e:7d:24:46:df:3d:39:b6:f0:01:0a:e0:
         c8:bd:07:96:39:c2:15:37:3c:e8:bc:a7:dc:ac:dc:f2:f7:04:
         a9:6c:03:ad:04:eb:9d:e0:3f:73:62:b0:a8:01:1a:67:a4:f7:
         e2:46:51:98:3a:20:de:59:25:59:c2:fc:9f:26:b8:f1:36:d1:
         37:21:09:c2:43:dc:14:94:51:ef:7b:b8:46:f3:00:1d:dd:9d:
         7b:ca:21:94:26:84:f4:71:8b:78:3d:6b:71:73:87:94:69:a0:
         37:89:6b:2d:dc:7a:eb:98:47:65:a3:53:bd:f7:9f:e0:a3:d5:
         0a:fc:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:55 2025 by rpki-client