Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa
File:                     8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa (raw, json)
Hash identifier:          U01OdKwMCt37hKJldpIPhWC07rOlh+sesHv0yQxnQqc=
Subject key identifier:   29:3F:E0:19:D5:DB:88:EC:6F:EF:CF:52:50:18:48:1F:ED:5D:C6:34
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285849C0A4D07752203E5A267F86C0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        66.178.140.0/24 maxlen: 24
                          66.178.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d0:77:52:20:3e:5a:26:7f:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=7b84eb17-217c-4f04-9b86-f4bda9bb8fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:a2:9a:fb:a4:28:f5:a7:4d:89:74:d0:39:
                    66:aa:66:9a:8a:76:61:1c:e3:4f:56:93:a0:48:9b:
                    bd:15:f6:d4:a2:5f:33:d0:b4:7f:aa:94:f8:da:e5:
                    16:85:ad:6a:b7:1f:ba:99:0e:99:5b:80:a0:c3:19:
                    9d:2c:0e:c1:85:60:bb:55:57:0d:57:fb:92:1d:70:
                    a3:84:8f:e1:9a:2e:1f:50:fc:fc:2a:08:43:fc:3f:
                    b7:e8:54:10:1e:7e:87:51:d2:52:8c:0b:97:4a:55:
                    b9:16:ea:22:d2:b9:9a:be:27:aa:db:08:34:64:67:
                    98:b0:dd:86:dd:ac:bc:35:9f:08:ec:89:9c:3f:71:
                    73:3c:db:0e:3d:51:32:5c:68:0c:8b:a1:87:53:ef:
                    1b:2c:82:1b:30:34:a3:d0:4c:a3:1c:2f:9c:65:ab:
                    43:cb:40:a2:07:23:e4:85:ec:2d:8d:ab:d5:ae:1d:
                    a0:74:62:aa:9d:10:62:da:d4:5d:f7:d2:a9:55:8f:
                    f2:1d:4f:6d:84:5e:14:1d:8e:87:c1:f1:16:20:35:
                    0b:f6:cb:65:f8:6d:75:a9:3c:91:07:c6:6a:76:cd:
                    b8:7c:a7:47:36:e3:d6:fa:53:ce:ce:49:cb:2f:8e:
                    bd:c3:64:e4:8f:b6:ec:ba:97:d2:7c:ba:35:51:2b:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:E0:19:D5:DB:88:EC:6F:EF:CF:52:50:18:48:1F:ED:5D:C6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:d3:b0:57:5f:48:54:42:3c:86:54:d5:09:71:0d:d7:b4:
         a9:23:34:9f:0d:ef:df:d6:aa:7d:bf:95:27:88:d8:4a:40:3f:
         2e:c8:37:dd:8d:b6:b2:e2:d8:c5:3c:8a:f8:3b:9e:78:1e:a2:
         3d:af:da:e8:a0:38:51:6e:ee:9b:4a:05:d8:84:7b:32:cd:5f:
         53:fc:bc:3b:2d:c5:c6:f4:45:a5:08:81:3f:91:7c:c9:fa:c0:
         97:85:ff:67:93:29:1c:cc:b0:c6:63:7d:c1:cd:a7:6e:57:aa:
         0e:04:4e:00:dd:11:ca:02:ac:df:84:04:2b:6b:d3:68:b8:f8:
         57:6d:24:ea:f9:0e:02:b7:63:ec:2a:08:d4:13:4a:c2:35:44:
         12:00:4f:95:4c:38:d5:3d:4b:cd:b1:8b:dd:71:2e:1c:e0:12:
         1f:73:13:af:c9:5e:82:5a:e9:c2:62:9b:04:d5:2d:6f:63:69:
         16:4c:e2:07:12:fc:fb:38:d4:77:08:d9:25:9c:3f:c7:97:a1:
         ab:21:97:93:28:d2:9c:c6:58:82:29:cb:dc:1f:1e:4d:94:db:
         c9:6a:a1:06:23:a0:d3:07:0f:13:91:9f:db:13:9a:38:4b:11:
         73:fc:78:f6:dd:98:0a:70:e1:7b:11:c0:37:85:38:2f:0a:db:
         1d:0a:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:26:08 2025 by rpki-client