Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa
File:                     7e9452a5-c6da-395d-856e-12142d01ff50.roa (raw, json)
Hash identifier:          aRkb6tIVE57JwzAyhkbxyYiIed+UIujBwhaXqFOEfp8=
Subject key identifier:   E9:FC:47:72:BF:A2:F6:CE:5E:44:E3:0A:FE:1F:A5:D8:7A:60:A3:16
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A050A7979C674A34E074A0400
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     13576
IP address blocks:        66.231.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:79:79:c6:74:a3:4e:07:4a:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=59a9a2fb-e425-4f44-a878-19075abff92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:54:ff:11:a7:63:f2:e7:a2:37:20:4f:f3:
                    42:d9:51:8b:18:76:88:1b:0b:64:ac:da:0e:d4:5d:
                    41:74:c3:5d:9e:16:14:30:4a:fb:ee:76:eb:f3:45:
                    66:5b:25:8d:ff:8b:b8:fe:ba:b9:7a:6d:75:e2:ef:
                    17:cb:ec:e2:8e:db:9c:48:bb:c0:90:14:37:bf:2e:
                    84:e7:6c:8a:91:52:c4:52:2e:ef:95:5c:cb:07:80:
                    6f:c5:82:ef:1a:8b:bb:bf:c0:47:72:0c:44:7a:70:
                    96:d4:d8:76:af:3f:c5:01:46:39:93:4d:46:b8:04:
                    53:b7:0a:a1:d3:fb:a7:af:51:e9:7c:28:22:e6:03:
                    68:46:34:78:c8:c8:81:2b:a0:4d:d3:4b:78:4e:4b:
                    cd:ef:ad:b9:b7:01:75:56:18:f8:33:31:31:62:70:
                    cc:6f:99:9e:b2:f4:a2:59:8d:0e:25:ed:3d:dd:a4:
                    99:e7:e2:32:42:ec:9b:cc:c5:1a:03:ce:94:0c:d7:
                    09:3c:3f:01:e5:fc:eb:e6:22:52:97:6a:ef:19:81:
                    12:15:e1:18:f1:f1:85:a4:d0:85:bd:94:73:ba:76:
                    7d:29:95:87:f1:6c:1c:77:d2:68:db:be:fa:05:56:
                    85:3b:b5:da:26:58:10:6a:2e:b2:37:9a:f1:ad:9c:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:47:72:BF:A2:F6:CE:5E:44:E3:0A:FE:1F:A5:D8:7A:60:A3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7e9452a5-c6da-395d-856e-12142d01ff50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:2a:2c:4c:27:20:a0:d2:1a:eb:fc:3c:cf:06:9e:9b:c8:ae:
         4c:8b:65:3d:c7:e3:9f:4b:84:e5:d1:c0:a2:47:67:5a:ee:7d:
         eb:4c:82:9c:1d:9f:d6:b5:79:6c:32:99:96:d6:42:44:85:4f:
         15:a6:05:df:37:83:11:a6:cf:a8:b9:31:6e:07:a1:56:0a:cc:
         1c:cd:74:d3:c5:9d:b8:19:cf:13:56:70:69:46:7b:75:36:88:
         ef:5f:58:57:0d:0d:fc:be:80:00:51:7e:df:e4:9f:0e:a8:6d:
         48:c9:0b:b7:3e:0c:48:86:cb:65:0d:d0:3d:d4:05:c9:93:79:
         dc:cc:34:c6:94:9d:e0:da:5a:bc:d3:f4:f1:46:04:fb:44:1f:
         7e:1a:bf:ea:a9:8f:ae:80:94:c8:13:f8:af:3e:ab:dd:69:b4:
         a4:97:92:57:e1:2c:bc:10:a8:34:93:42:4f:75:c5:50:b5:4c:
         51:b8:70:01:5f:6c:07:50:af:4a:be:10:9a:53:5f:34:9f:ca:
         ca:ef:fb:e4:5d:ff:19:a6:fe:fc:2e:62:c6:89:7a:56:e0:db:
         ac:fe:89:03:1a:a5:27:8b:6f:01:61:7b:f5:b9:2b:91:99:45:
         14:bc:13:30:29:72:97:ce:f3:4d:d4:31:14:61:e3:4d:8d:c5:
         fd:4b:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:33:49 2025 by rpki-client