Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
File:                     d46d8569-5b81-3f6c-b7a8-027002156fc2.roa (raw, json)
Hash identifier:          +ZGBtz23MxudQdkXfsIszjYmdxNbkSw6RaTs/BuF+TM=
Subject key identifier:   12:D0:75:87:EB:D6:B6:23:80:18:1C:B2:F0:82:04:A5:94:47:0C:77
Certificate issuer:       /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial:       010D0C9F4328584B2E5C4B35B4CBF044DA274000
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     40545
IP address blocks:        66.115.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4b:35:b4:cb:f0:44:da:27:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=389798f4-8f46-4432-8909-c22c161ddde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:cd:2e:39:06:29:cd:98:0b:07:a1:33:87:
                    f9:e5:58:c1:16:2f:df:c7:7b:c9:a5:38:dd:b3:f5:
                    3b:73:ef:3f:a9:c7:a9:1c:5c:ab:48:0c:2d:3c:66:
                    3b:64:04:98:5a:ad:6f:3c:10:f7:28:56:ba:3d:9b:
                    64:1d:04:51:a4:dd:3a:12:27:f2:bd:c4:77:4d:6b:
                    a7:d5:e5:1a:82:6b:74:2a:7d:5a:e3:b9:2f:6b:9c:
                    a6:46:c3:73:78:c1:cd:2d:40:5a:90:46:a2:98:58:
                    ca:54:0e:27:d1:96:9c:5d:c6:b1:cf:94:05:9e:d6:
                    dd:f0:89:a3:87:18:e0:08:0d:17:b2:fd:37:64:46:
                    d1:60:0f:2d:5b:34:86:03:fb:f2:53:2c:93:20:2b:
                    fd:75:8e:e6:29:72:1a:fb:96:fc:26:d4:28:14:a3:
                    71:b2:6e:eb:f4:0e:c9:c9:4b:53:e0:f9:04:14:0b:
                    54:dc:a6:af:c9:1d:7e:02:60:b8:4f:f3:51:b5:cc:
                    73:db:ee:10:68:c1:69:f9:98:50:ea:e9:68:e2:6d:
                    db:ed:d2:fa:33:c4:30:07:a0:7e:77:d9:2e:f2:d2:
                    dc:3c:9c:81:8a:00:69:2d:98:54:00:02:bd:1d:67:
                    cf:e8:8e:3f:62:15:3c:bf:81:db:c3:0e:1e:7d:74:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:75:87:EB:D6:B6:23:80:18:1C:B2:F0:82:04:A5:94:47:0C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:65:86:24:8f:60:72:77:a3:67:9e:64:a6:fe:ec:5c:5f:fc:
         ff:c7:8c:42:be:42:ea:e8:df:fd:8a:04:2c:c4:e4:7f:40:02:
         94:af:39:2f:3b:87:23:f0:eb:1f:2d:8c:85:e6:2e:f2:dd:5b:
         fc:80:22:f5:c7:23:bc:d8:51:36:9c:af:de:fa:6c:18:20:dd:
         de:56:31:51:35:c7:ff:04:97:5b:b0:90:a6:76:24:fd:8f:f3:
         5b:04:58:86:14:fc:a2:da:ba:cf:1d:30:e5:9b:1d:0b:1e:9c:
         42:b4:32:9b:48:0e:28:fb:79:58:e6:48:2a:36:56:11:bd:3a:
         9b:20:64:2f:86:96:3c:33:48:87:df:52:bf:48:cb:b7:29:ff:
         c8:e9:ff:bf:f4:35:c8:fe:de:94:96:42:03:35:76:e1:bc:fe:
         08:c1:17:72:21:db:7e:be:76:42:4f:66:a3:54:d1:ed:71:47:
         5b:8b:46:8a:a6:2e:f1:c9:4c:33:76:82:44:a2:e4:3f:2f:97:
         a4:2a:90:ee:f5:13:e5:03:9d:f3:5a:30:c5:f0:6d:fa:bb:6d:
         8f:ef:f5:e0:4e:90:39:ab:ff:40:e4:91:8b:6f:3f:b7:89:94:
         c2:d5:6a:49:0f:03:70:e4:39:8c:c6:39:54:36:cf:ae:ba:8e:
         c0:0b:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:58:51 2025 by rpki-client