Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa
File:                     fcf651bf-062d-3478-a5f1-a3f894589147.roa (raw, json)
Hash identifier:          0l5RXA0l5miadnMwdzSfxIkNRuXbwv7Ju4zgFlMbZ0M=
Subject key identifier:   0F:9C:4D:70:FC:A1:52:71:63:28:6F:56:06:82:8C:70:20:AD:0B:0D
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F43285848DD3BA8DA497C3FF9AA1DD1C0
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     400610
IP address blocks:        66.219.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a8:da:49:7c:3f:f9:aa:1d:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=38dca7c7-881f-466d-ae59-1f3f90f674ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:54:b8:b0:4d:2b:62:4c:d6:b3:a3:f6:71:
                    9e:25:64:5a:6a:1e:87:e6:8f:cd:c1:ee:a7:f7:85:
                    97:5c:e8:67:c3:c3:02:d1:17:3c:9d:2f:9c:13:28:
                    46:d2:a8:0c:07:ce:27:d9:03:39:bd:e1:00:0f:a0:
                    bb:f7:70:4a:7d:21:61:ce:6b:b5:20:f1:ee:c5:55:
                    31:d2:5c:09:04:75:28:9b:6e:d9:97:22:2f:f7:69:
                    7e:0d:9e:d6:f1:3e:4a:74:7a:42:fc:a1:73:fe:2d:
                    94:ca:37:ae:dc:8e:e9:f0:ab:fc:a9:3d:68:80:c5:
                    5c:cc:b4:29:68:be:f2:85:04:ed:42:8a:4d:f1:4d:
                    1d:4d:6a:93:eb:4e:88:be:48:a2:09:f0:2f:b4:9e:
                    c8:ba:7d:5c:5e:d1:9c:2b:f1:58:3a:c4:9f:0b:06:
                    23:45:b8:10:42:50:ac:e2:52:b0:19:ca:60:e5:73:
                    b4:56:49:85:c6:bc:92:e8:69:25:bb:b8:fb:c7:d3:
                    56:52:86:d1:45:42:d8:58:b7:6b:98:1f:e7:77:7b:
                    9b:8e:ea:8e:a3:fe:92:39:60:3b:ed:be:47:bd:98:
                    bd:12:3b:9d:77:c4:2a:d4:54:aa:ff:0f:71:e9:1a:
                    23:5e:20:9b:10:bd:98:b1:68:02:70:5b:00:da:21:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9C:4D:70:FC:A1:52:71:63:28:6F:56:06:82:8C:70:20:AD:0B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:cb:be:54:c0:aa:f5:3b:90:f0:57:4c:1f:5d:3e:5b:82:
         a0:f2:ec:e6:fd:fb:06:dd:e0:a3:54:5b:5d:c2:6d:b5:94:35:
         92:80:3c:47:5f:33:ba:5f:37:a0:0b:0f:2f:48:88:11:90:75:
         a7:65:0d:25:29:ce:cf:96:01:40:16:33:6c:f3:fc:54:5b:06:
         73:8b:17:86:26:44:77:e4:3f:13:c4:1e:51:a5:0f:5a:57:61:
         12:a4:9e:42:12:22:23:e8:c6:e0:46:85:e7:cb:45:27:ac:23:
         9e:d7:fe:ab:af:68:eb:67:c3:2a:81:b7:12:7d:5e:59:b8:85:
         67:f5:10:5c:a6:60:f8:bc:f4:de:0f:b2:5b:9a:2c:36:b7:bc:
         af:d7:8d:b4:d3:1b:1f:16:b3:cb:44:b0:1a:ef:48:f9:64:6a:
         eb:bb:cc:20:38:fe:8c:18:6d:30:98:a7:65:88:6c:a4:bd:47:
         c2:ab:fd:39:48:33:82:2c:41:66:6d:19:b7:94:d5:10:b5:c2:
         67:df:25:5c:7f:60:a9:14:a2:9e:79:d6:a5:fe:83:0d:9f:e0:
         e9:99:3e:a5:1d:d2:5e:fe:4e:b4:ac:84:d1:4b:2b:a7:66:ff:
         c0:10:eb:ab:f6:f3:03:6c:f5:da:ae:7c:33:c2:2e:5f:79:7b:
         99:ee:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:12 2025 by rpki-client