Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa
File:                     a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa (raw, json)
Hash identifier:          6Zd5teYwyovfUAeIBBOc/snodCAyHPY6LLwh78cio9A=
Subject key identifier:   CD:AF:C1:F5:66:F5:87:FD:45:C9:78:7C:C9:4A:C0:21:AB:C9:D4:25
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA8DE750D0F99E4F5B7E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        67.71.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:8d:e7:50:d0:f9:9e:4f:5b:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ca9794bf-3ece-45b6-94be-6b4f554431f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:d7:e1:25:06:6a:2c:26:ca:ac:69:cd:1a:
                    69:83:3f:8a:90:ac:f2:11:10:1f:91:9c:09:fd:ff:
                    4b:06:29:75:16:d5:bc:1a:21:ff:2d:e4:01:74:1a:
                    47:23:85:68:3a:7f:93:7c:fb:69:c0:75:25:3b:e3:
                    66:dd:cb:58:58:90:18:60:93:c9:31:62:8d:5e:38:
                    ee:bf:af:b2:65:8d:9c:0e:ea:b1:37:c7:79:ae:01:
                    e9:d1:66:c7:a0:05:cb:a8:04:15:01:0e:8c:e3:3a:
                    4b:43:29:8c:47:92:67:98:8b:14:70:d6:68:ac:f0:
                    61:ae:45:d1:71:8d:f9:93:de:61:65:78:ac:d2:a5:
                    e1:17:30:7b:64:ab:bd:62:1b:9d:c5:50:3a:d6:db:
                    cb:9b:99:f9:48:a1:8b:4f:43:b0:bb:a3:50:99:1d:
                    61:92:71:6a:84:d3:9f:55:a7:ed:5d:54:b4:8f:43:
                    1e:aa:97:41:2a:94:2d:a4:95:3d:28:4e:72:30:28:
                    ba:3e:f8:a0:1a:10:73:0d:73:a5:3d:29:f2:74:bb:
                    a7:a2:93:6a:03:31:9b:d0:2f:39:62:bc:ac:5c:5c:
                    0c:39:b1:a1:b5:b5:32:61:8a:11:8a:29:18:5d:aa:
                    9f:04:48:0a:0c:4d:34:ea:f1:1f:2f:26:81:be:05:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:C1:F5:66:F5:87:FD:45:C9:78:7C:C9:4A:C0:21:AB:C9:D4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a30fc023-bbfe-3bc7-8f82-bd03e2b91804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:1e:fc:c1:da:02:8a:4d:b8:29:99:58:35:c8:c2:fa:95:
         ad:9f:89:36:a6:c5:f3:77:3f:6a:1a:6e:07:ef:2e:c1:4f:1d:
         4a:5c:f3:b1:7c:c6:ae:2d:98:3a:04:d0:87:38:2c:85:39:69:
         10:5c:4a:f7:72:51:b6:7f:30:1c:74:ee:50:5e:78:c2:76:c5:
         5f:10:2d:2c:ca:4c:65:85:58:86:c5:25:ac:0b:6c:a0:d5:65:
         ff:96:3f:81:8e:1b:63:85:94:00:43:59:b4:47:c6:46:62:35:
         87:df:8f:22:5a:7a:fd:24:ce:60:03:84:f1:c7:45:c0:52:29:
         e1:50:ce:03:c4:3f:42:55:cf:29:18:b5:a3:d2:96:2e:8a:e0:
         fc:17:f9:6b:68:81:24:5c:d5:e1:5b:28:d7:52:b4:d8:4a:bd:
         27:03:c2:ab:6d:ee:1a:2e:11:f3:8d:d9:c3:2b:ef:62:08:e4:
         87:9c:d0:8f:1b:de:06:fd:dc:55:5f:71:ef:be:ca:08:bb:fc:
         d5:6f:05:ea:d9:73:9d:1a:97:f5:a4:1c:bf:1e:f8:72:d4:dc:
         cc:91:8a:4c:8f:a6:7c:aa:ef:c3:40:9d:f7:47:c9:55:f3:ef:
         5a:4a:0d:13:e1:63:7d:f7:d7:33:e0:fe:9a:20:cf:dc:24:6b:
         af:5e:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:00 2025 by rpki-client