Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67881a56-2f0f-375f-8293-61b938df30b6.roa
File:                     67881a56-2f0f-375f-8293-61b938df30b6.roa (raw, json)
Hash identifier:          Ma17i9KH5y8QiaFOCsYviqAXR9BwD2Srokte3woZMSw=
Subject key identifier:   83:0E:A2:20:C6:74:A5:09:18:79:2D:53:62:EF:68:74:EF:33:91:73
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584ABD4B8988C02EE6A64FF0BDC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67881a56-2f0f-375f-8293-61b938df30b6.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30036
IP address blocks:        72.255.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:89:88:c0:2e:e6:a6:4f:f0:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=a173e909-fe0c-4207-813d-ea190d07991d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:47:7d:1f:7f:34:b3:c5:cf:b7:5d:aa:b6:
                    11:cc:ab:a3:ad:50:3d:de:fe:ac:9c:49:de:32:d4:
                    17:bc:ac:05:0c:72:5d:f3:37:53:b6:51:4a:52:fa:
                    2f:b4:9a:8c:6b:af:fe:2f:56:f6:a7:e0:67:e9:12:
                    2c:a5:7d:88:7f:b3:3b:a9:e1:74:65:33:2f:73:e2:
                    0f:ac:ce:12:dd:65:ce:78:81:b5:f5:d1:05:8e:4e:
                    71:63:19:8a:63:72:ab:2b:3f:2b:ed:2f:82:c3:52:
                    49:60:8a:fa:2f:59:ab:9c:26:38:c9:99:46:6b:cb:
                    f1:8c:aa:79:a9:aa:c2:90:aa:1d:b8:b9:e1:4f:62:
                    3c:7e:cd:00:d3:d4:9d:9f:bd:c9:13:8e:26:77:cd:
                    3b:7c:7d:5b:d4:f1:66:a8:3b:d4:eb:aa:4d:eb:b6:
                    06:f5:ae:5d:b9:b0:a3:c3:03:3d:de:13:43:12:c9:
                    96:97:8e:71:1c:cb:59:88:eb:09:34:6a:3c:cb:68:
                    0f:73:21:c9:b0:16:bc:9d:58:16:db:37:9b:25:07:
                    b5:23:85:93:be:5e:55:49:fd:d0:18:01:af:37:b8:
                    9d:ad:af:29:54:c4:98:83:a0:3a:c9:a6:9d:6e:c0:
                    3d:d5:46:20:6e:ec:b0:14:76:2c:da:c3:f3:22:7e:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:A2:20:C6:74:A5:09:18:79:2D:53:62:EF:68:74:EF:33:91:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/67881a56-2f0f-375f-8293-61b938df30b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:37:2a:c8:09:0d:9b:c9:fa:3e:2b:8c:b2:02:03:50:b9:
         92:b2:ae:d0:5f:40:0f:a6:f5:30:b0:b6:ec:40:a5:3a:57:82:
         68:11:ba:77:61:65:bb:61:3e:ea:9b:f7:f5:c8:7f:ad:cb:81:
         cb:09:6b:30:e2:43:b5:b7:8f:21:ff:8c:f0:a3:73:7d:ed:a9:
         38:e9:bb:51:e7:d1:c3:6e:f6:4d:3c:35:7a:77:4a:cf:6b:e6:
         55:bf:bc:5f:15:f5:dc:be:1c:83:3b:7f:98:f4:9e:45:c2:b8:
         86:45:45:c7:84:f5:23:da:d4:e9:d6:44:d7:00:bc:3f:3c:88:
         9d:9d:06:5d:a2:8b:a3:d3:0e:e5:5c:91:ce:c5:71:50:21:7c:
         f8:fc:cb:10:79:8f:fe:be:e3:1a:c6:47:e7:f7:7e:a7:63:9b:
         da:b6:3d:32:f5:05:4c:78:b1:42:a3:32:e0:b8:c5:38:72:94:
         0a:c8:51:9d:8a:10:73:0d:bd:3a:1c:cf:d1:de:0a:e2:d9:89:
         1e:d1:f3:5a:99:b5:76:08:23:16:28:3a:f9:04:26:e2:6a:59:
         83:3f:2a:01:03:52:63:e7:78:83:98:1a:34:e3:e3:0a:7d:85:
         4e:98:e4:1b:23:33:04:b5:05:66:f3:01:af:5b:cd:31:82:f6:
         58:fd:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:35 2025 by rpki-client