Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa
File:                     9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa (raw, json)
Hash identifier:          kNQs/9sP6UIa+6ie6Oik8nwzTDt99HvnUjgF95Dq+tE=
Subject key identifier:   AA:94:28:6E:09:C2:98:11:A3:4A:44:B8:8C:C2:DC:05:DF:B8:99:9D
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584A6E46D01B9B4AD6841636CA60
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa
Signing time:             Sun 06 Jul 2025 17:42:22 +0000
ROA not before:           Sun 06 Jul 2025 17:42:22 +0000
ROA not after:            Sat 04 Oct 2025 17:42:22 +0000
asID:                     10753
IP address blocks:        66.128.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6e:46:d0:1b:9b:4a:d6:84:16:36:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Jul  6 17:42:22 2025 GMT
            Not After : Oct  4 17:42:22 2025 GMT
        Subject: CN=5f494cfb-7a15-4a36-b586-d6e83b6b7ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:c8:06:2a:d1:7d:18:cc:54:88:f4:a1:e1:
                    90:93:d6:e5:0f:9a:03:b0:5a:51:4c:73:3a:25:f8:
                    0e:51:38:87:68:42:f3:b6:20:41:37:f6:fe:82:cb:
                    b6:0b:35:90:bb:0a:0f:20:8e:57:c0:4b:73:a2:8d:
                    d6:5c:3f:8a:e3:ad:c0:39:8b:e3:ee:40:3d:57:4b:
                    cf:56:ef:30:8d:37:4d:dc:a2:b7:8a:ce:2f:ac:f3:
                    30:75:f2:bb:f9:63:c5:4d:7f:41:08:19:f6:01:5b:
                    b8:18:7d:98:42:89:0d:d6:ca:04:56:0c:84:20:d5:
                    27:e0:25:7e:a9:f0:4e:44:52:cb:03:74:d4:83:f5:
                    69:7c:e8:8d:f1:fc:57:10:e9:a7:52:e0:4e:bd:29:
                    d3:71:fc:c3:a9:f8:1a:92:e5:dc:66:0f:b7:f1:cd:
                    a9:86:09:c1:c0:0e:20:21:43:f3:9d:ff:a0:e6:ab:
                    08:c1:91:bf:62:90:74:ba:ec:9b:fa:64:4d:50:c6:
                    59:2c:75:63:fb:61:d0:fe:fb:94:32:50:5e:c0:35:
                    5d:07:b6:62:ea:7f:28:c8:5d:37:a1:6d:16:ca:d9:
                    44:30:ec:70:55:14:54:d6:42:ce:e9:b7:4f:51:97:
                    1f:3c:7c:c2:b5:36:2b:1a:16:66:5d:f7:2f:50:19:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:94:28:6E:09:C2:98:11:A3:4A:44:B8:8C:C2:DC:05:DF:B8:99:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/9ab65be5-0f24-31ad-9d4c-aff8d3ca6739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:84:05:1b:3b:aa:0d:c7:4e:c9:b6:3d:8b:c9:19:be:d2:
         5a:25:92:c9:74:99:0b:be:ce:16:92:09:fa:4e:f0:0f:46:d2:
         2a:22:03:55:af:58:69:b1:4b:70:23:6e:ca:a4:b4:1b:69:62:
         0e:2e:79:41:a0:09:f5:9a:bb:1d:11:c2:a7:02:58:91:fa:4d:
         7d:1c:4b:9e:19:a6:75:6b:c7:f0:20:51:68:53:dd:10:61:91:
         6b:d5:ee:63:06:51:1b:c3:fa:22:65:38:fd:b6:45:5b:07:e7:
         b2:8e:c0:91:20:1a:31:a6:fc:cd:0f:d6:80:47:21:92:5b:18:
         44:3f:1c:ad:9e:93:1e:2f:52:ad:15:bd:7c:14:ff:61:3d:d6:
         be:3e:c3:d2:e9:b2:8c:d2:c6:fc:b1:e9:d1:71:c4:e4:bc:4a:
         4a:54:da:98:c0:de:79:86:23:19:49:67:64:eb:21:d8:9a:62:
         34:0a:4f:ee:6a:7c:de:cf:78:a8:67:a4:8f:c2:fa:40:4d:db:
         c3:b8:3c:26:d6:d0:50:c3:ce:9b:5d:f1:ba:96:d9:5e:e9:bf:
         7b:25:90:8a:71:ae:c6:f7:12:e3:3c:13:20:38:69:ed:91:85:
         b8:00:99:5d:1d:ac:df:ae:ac:ba:11:51:e6:59:bc:fb:ba:bc:
         d9:de:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:52:45 2025 by rpki-client