Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa
File:                     46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa (raw, json)
Hash identifier:          HuyM79/HmJYU8S6XzljCeJqVEzAqnPVCqlZfWLS5F4E=
Subject key identifier:   43:D3:EC:65:8D:BB:1E:81:F1:4C:B7:AC:46:2B:15:CC:02:DF:B4:23
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F432858491D71738669FC3CEA84C3CC80
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        66.114.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:73:86:69:fc:3c:ea:84:c3:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=5d77960b-e52f-4266-9212-ef4eb67c3491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:a6:fb:e4:98:f5:4b:45:9b:06:eb:05:b8:
                    8f:19:e5:51:d6:27:58:32:9b:3e:e9:5c:ec:47:99:
                    6a:06:69:07:f5:2f:7d:a4:fb:d0:28:1f:dc:12:6e:
                    7c:43:81:f3:ce:82:d8:f4:8e:42:49:41:f2:5b:56:
                    8b:fa:28:49:bf:d1:f1:93:58:50:3f:63:15:d1:c9:
                    2c:39:0c:10:63:b6:2b:c8:4e:db:be:c2:cf:ea:97:
                    1c:ba:5a:8e:49:86:48:64:b6:f4:6e:70:f7:14:c6:
                    cd:48:2f:bc:2b:32:63:c9:16:3e:4d:55:f8:35:aa:
                    cf:83:59:26:6f:af:6b:7d:72:f8:6f:11:00:0a:20:
                    72:b3:d3:b8:c1:72:55:f4:2f:9a:16:83:38:83:72:
                    a8:cb:7a:b8:82:ea:68:65:db:5c:9a:73:7d:07:77:
                    9f:d9:43:03:0c:3c:8b:49:41:c6:eb:a2:8d:3e:0b:
                    c6:e1:0f:9d:91:f3:e8:10:db:97:94:6e:61:82:6c:
                    8a:4c:e4:03:dd:bc:e8:9f:55:e6:24:90:7e:a2:b1:
                    63:4c:07:9a:b6:c4:c6:e0:bd:78:45:d3:9b:5c:52:
                    76:39:8b:d9:ec:7e:03:fc:58:35:f5:33:87:05:9e:
                    f5:13:c0:9f:51:a4:7a:13:b6:43:0b:29:9d:d2:5f:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:EC:65:8D:BB:1E:81:F1:4C:B7:AC:46:2B:15:CC:02:DF:B4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/46b1a6ca-870e-3a1b-8a77-60b5f1699e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:0d:2a:1d:61:e1:a8:24:bf:d4:cc:bf:31:48:6d:af:77:
         d1:3a:da:a7:38:43:1e:5f:79:9f:5d:ef:a0:55:39:a4:e6:ac:
         6d:26:ce:8a:9e:7e:d6:24:e2:2c:8b:81:e9:52:39:07:ae:4e:
         1b:e5:60:f2:0d:5c:26:d5:a8:85:4f:58:ee:35:b7:16:db:0d:
         52:2d:22:4a:70:1e:be:24:22:bb:94:e2:61:a8:96:c6:e5:e9:
         ac:b2:ff:a8:69:e4:f3:b5:54:60:cc:de:66:3b:5e:4c:4e:0c:
         85:40:73:3e:bb:2a:f8:b1:ea:5f:70:89:c1:5e:87:b2:a1:0d:
         b9:20:10:35:48:f6:a2:55:ff:b0:33:9d:93:6a:51:3a:c9:e8:
         df:16:85:77:10:0a:47:c9:2a:a4:d4:de:e3:fd:ab:50:56:69:
         38:1f:11:27:80:9e:32:24:03:9a:7d:7f:d7:37:a6:a1:89:02:
         a7:58:09:ec:c4:bb:6f:ac:f5:d6:73:12:bd:14:26:65:d6:53:
         34:01:41:93:b8:18:b5:95:0f:d2:ca:60:4d:18:8a:35:6a:e0:
         56:b6:f3:aa:dc:17:0d:99:6c:21:32:f3:56:8b:05:79:5f:f4:
         a4:76:a4:0e:cb:44:c1:8b:7c:f6:a0:49:3b:8c:19:a8:28:64:
         b4:8a:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:05 2025 by rpki-client