Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/ce50c172-859a-37b4-a5d6-69292c41fb23.roa
File:                     ce50c172-859a-37b4-a5d6-69292c41fb23.roa (raw, json)
Hash identifier:          CShEKsfC4qYuqpGOUz6UnUZy4DAuOigEbx6SYtbo3Tk=
Subject key identifier:   FC:3F:2F:E2:1B:7D:C1:D7:55:6C:A7:8D:BC:C6:F2:EE:65:27:D6:DC
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F43285849CE9A5A2123869303FC630D00
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/ce50c172-859a-37b4-a5d6-69292c41fb23.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     63290
IP address blocks:        66.245.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5a:21:23:86:93:03:fc:63:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=95c5696c-1c67-4bd0-9130-527ac035a17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:98:6a:29:09:21:72:1e:16:7a:47:95:ff:
                    05:28:a3:86:a0:e1:06:91:fd:24:b6:d9:77:c3:98:
                    fc:eb:d0:89:7c:72:8b:9e:22:17:a8:13:37:a0:4b:
                    13:4f:c8:67:68:97:f7:cb:81:c5:42:30:32:33:d6:
                    76:a2:c9:b3:6c:f1:3a:5e:7a:8c:5a:63:68:a4:83:
                    c2:77:b4:58:4c:de:db:1d:b6:e6:1e:1e:3f:56:b1:
                    91:9d:ac:40:78:03:54:3e:8f:c8:76:37:73:87:52:
                    41:3c:71:cc:05:5f:df:91:56:c5:75:aa:4e:f4:67:
                    b7:ec:65:b4:38:b4:4d:b0:a7:77:55:25:01:d8:e3:
                    38:e6:8b:fc:e0:f2:03:68:25:16:e6:66:86:54:b2:
                    45:14:0e:a0:73:4a:77:71:de:32:8f:51:2f:cf:a3:
                    5f:ee:12:e8:4e:32:4b:02:16:a5:06:6b:fe:da:87:
                    fa:d0:02:38:3d:d3:63:03:12:55:f2:ed:99:55:ea:
                    0a:90:fd:32:61:91:cc:be:87:e6:14:98:79:98:21:
                    85:13:c3:97:14:dc:8b:ed:6a:10:c7:13:5c:94:6c:
                    e6:17:7d:df:43:4c:7f:5a:70:2e:7c:66:0e:e8:fe:
                    31:ad:2c:b9:a9:17:69:e1:8a:af:69:39:4a:6e:a8:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:2F:E2:1B:7D:C1:D7:55:6C:A7:8D:BC:C6:F2:EE:65:27:D6:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/ce50c172-859a-37b4-a5d6-69292c41fb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:67:88:d8:7f:9a:1e:58:5a:12:28:e4:01:02:75:9b:a6:d6:
         f1:31:16:1b:62:f3:1a:7f:8c:c3:8f:aa:f4:4d:5a:8e:ef:11:
         23:f1:84:76:67:e5:69:fb:4f:52:6a:b6:67:b2:3a:63:60:ee:
         5d:bb:f0:d2:9f:b0:5c:30:43:74:0b:d5:cf:23:25:08:c3:b1:
         06:32:ab:52:58:9c:b4:d9:4e:df:d4:a7:a7:7d:4c:ab:36:e0:
         41:30:97:75:d5:f4:5d:08:93:58:7c:22:7e:f6:bf:1a:49:ea:
         a5:9f:35:ed:ef:09:eb:d8:74:df:d3:69:4e:65:31:7e:31:f4:
         53:aa:98:57:6d:16:77:11:2c:6d:23:de:13:4b:c9:57:a4:9c:
         8d:d4:8a:4a:ea:c8:93:76:cc:43:ae:73:bf:61:bb:68:ba:55:
         a8:f4:fa:cf:52:7b:81:e8:de:7c:89:1e:45:ee:7b:74:1a:1a:
         1f:11:5b:cf:dc:9a:75:dd:77:4c:54:79:94:5d:00:ca:c7:e6:
         88:38:27:64:e7:4f:ec:d1:e5:99:53:b2:96:52:e7:5a:ee:a2:
         5d:29:b0:cd:43:a2:84:08:f8:00:59:97:2f:0a:ef:f6:94:e6:
         6f:a5:93:20:cd:b7:06:e0:9f:81:73:5b:0e:dd:4f:37:d0:17:
         b9:9c:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:50:10 2025 by rpki-client