Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa
File:                     d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa (raw, json)
Hash identifier:          awmbI1ygi1YxSox4b2MctvuaSts7B1iHEW6MX9D3M2k=
Subject key identifier:   E7:A0:B3:E3:05:9C:C7:58:40:06:85:B1:1D:89:B9:2C:39:0F:2C:79
Certificate issuer:       /CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094
Certificate serial:       010D0C9F4328584B38219E96AD6BBB9E4F926000
Authority key identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     46884
IP address blocks:        66.11.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9e:96:ad:6b:bb:9e:4f:92:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=256a4a64-1f06-416e-a2cf-9bce7e175310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:d1:a2:31:6f:b4:77:9c:61:74:db:53:ae:
                    13:04:a4:93:6e:32:e6:34:f6:35:95:cd:48:85:ff:
                    45:33:73:32:42:fc:74:b0:ad:b6:38:f7:c8:1d:0e:
                    35:fc:0b:e0:1f:f8:4c:62:23:f0:69:e2:f4:dc:41:
                    f9:ad:ff:ae:c8:12:b0:5c:7a:d8:d2:8b:37:7a:01:
                    cc:c3:61:b7:ed:42:6b:50:20:1d:bf:b3:bb:3a:ea:
                    d2:68:83:b0:f6:cf:f7:02:00:26:59:63:09:31:f1:
                    2b:1d:5e:43:ea:33:fc:d1:90:87:4e:f9:4c:f5:a4:
                    83:c9:7c:ff:a8:b0:6a:9a:99:90:f5:2a:7d:e2:c1:
                    8b:3b:ae:08:0b:f3:0e:18:86:be:a0:c2:22:4d:2a:
                    08:8e:05:ed:c1:c9:f2:06:25:44:e5:65:60:0b:a9:
                    91:7c:70:ca:72:3e:02:fb:33:4f:8f:a1:32:aa:d9:
                    ee:bb:b4:78:1d:98:75:15:8d:df:1c:e9:ac:ec:26:
                    cb:fd:d0:a4:0b:51:8b:8b:9a:22:30:2e:93:5e:b1:
                    80:f4:e9:ee:c8:7b:90:f4:5e:0d:d0:7b:4e:90:83:
                    cc:d8:72:01:32:17:d7:61:0b:04:93:0e:cb:7c:cd:
                    51:d3:7e:30:4d:7e:59:51:9e:1f:07:aa:2a:3c:10:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:B3:E3:05:9C:C7:58:40:06:85:B1:1D:89:B9:2C:39:0F:2C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl

            X509v3 Authority Key Identifier:
                keyid:9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:84:54:b3:b9:0c:8d:f7:30:e0:3a:4f:53:85:3c:69:ba:
         af:7e:2a:25:04:78:bc:02:f7:29:d2:e7:73:77:85:b7:2e:f5:
         25:c4:3d:a4:90:be:b7:6d:75:46:c9:76:ed:8d:4a:be:3a:a2:
         3c:73:9c:9c:c5:d6:50:2d:d0:b8:1f:a5:8d:b7:23:25:ac:08:
         d9:de:aa:10:1b:99:45:58:45:d3:86:9b:fe:f9:48:ee:0f:0d:
         14:f0:fb:02:85:49:24:3a:b9:00:28:4d:a7:2b:02:53:44:cf:
         57:59:8d:59:93:cd:b9:59:5f:72:8a:68:b3:34:97:09:35:60:
         da:34:c0:da:70:60:73:71:cc:bf:a7:15:8e:2f:65:c1:62:4a:
         ba:77:67:0c:cd:6d:80:8e:1a:47:e4:6b:eb:7e:23:39:98:33:
         9c:47:a0:9f:53:64:e8:0e:a6:46:3d:df:a8:3b:d3:99:34:b5:
         71:95:7b:3e:c6:66:cd:b2:28:7e:a1:ee:e7:e8:03:b7:ff:fe:
         41:9c:4f:e6:d6:59:bf:89:38:ff:bc:11:8c:77:1a:48:dd:14:
         9d:67:d2:fe:5d:39:c5:8c:7c:3c:4e:e5:42:6a:02:42:4c:c3:
         38:c8:e4:57:85:6a:50:c6:62:e6:10:7d:42:61:ac:a1:df:c1:
         6a:55:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:54 2025 by rpki-client