Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa
File:                     d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa (raw, json)
Hash identifier:          oX3UQgLYh1hHDjpok/S5F0clDihpLL9pUxqQennevxc=
Subject key identifier:   20:23:80:0E:A9:18:55:2A:3B:16:4A:30:ED:63:33:72:56:97:6C:2B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AC2E0FCB18478E442FFF2B780
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     35997
IP address blocks:        207.67.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fc:b1:84:78:e4:42:ff:f2:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=ce999cb2-d560-4de2-8ac1-a19714b20bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:54:16:38:92:32:c9:59:44:5a:b2:c5:6e:
                    ce:ea:5a:72:d5:1e:79:60:6c:ed:3f:8d:e6:6d:fe:
                    d8:32:b4:29:2f:f9:02:ba:8f:aa:d9:2e:1f:51:80:
                    c4:a4:c6:43:5e:c8:64:75:f1:06:ee:54:e6:22:66:
                    c1:99:80:91:ee:76:ad:a4:4f:fe:2b:3c:29:4b:15:
                    46:bd:e2:62:30:1f:f4:7e:c9:f3:f6:92:cb:d0:91:
                    f2:43:85:2a:0c:85:d6:95:a4:ce:ae:78:77:5c:c4:
                    e6:76:f6:92:0d:f1:08:a1:56:5f:aa:73:bf:b9:fc:
                    5a:9c:4f:ff:11:19:6b:cb:f0:67:9a:dc:5c:20:06:
                    c9:00:ce:42:92:1f:50:57:26:62:fd:68:e6:22:d0:
                    7d:75:32:92:6a:29:c2:b7:95:97:f6:90:ed:0c:6a:
                    18:00:91:2a:c3:90:1d:12:24:18:e8:b5:b6:9d:8c:
                    d2:c6:92:c5:0a:8a:70:39:cc:0f:2f:40:ac:e6:34:
                    3a:32:4f:c2:17:95:8a:de:6a:c9:df:e4:54:eb:f9:
                    47:88:21:90:32:58:25:4a:d2:9c:5d:87:ae:67:ca:
                    36:3b:90:ac:61:ac:a6:3e:1c:16:85:dc:aa:a3:b7:
                    d9:cc:a3:4b:37:37:ea:ba:28:23:09:9b:12:db:f2:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:80:0E:A9:18:55:2A:3B:16:4A:30:ED:63:33:72:56:97:6C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.67.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:ca:4e:86:b2:63:18:ac:c0:6c:7e:b8:bf:55:28:93:cc:
         b7:1c:b4:91:0b:b2:a5:ce:c2:97:b3:78:b5:d1:2b:4a:65:d5:
         5a:a1:bb:4b:65:7d:2c:e0:d9:ec:64:93:b0:9d:e1:f1:a7:1d:
         15:dd:31:84:b3:e7:a2:1e:4c:96:fa:50:30:91:e9:a8:d2:8d:
         15:6d:93:16:d3:82:62:47:5c:83:fe:ed:d1:48:1e:5d:bd:24:
         b5:70:c8:58:72:11:16:18:1d:81:84:2e:4d:31:ed:83:b5:ad:
         d1:4e:5b:e1:ad:dc:4f:b2:0d:08:cf:51:c1:60:56:fd:b8:f8:
         75:ec:8e:65:56:13:fc:29:5d:d9:d0:d5:62:3e:93:b3:a0:57:
         cc:bb:4c:1d:97:8f:72:6e:e3:54:37:48:35:98:4b:c5:ea:c8:
         e0:74:60:57:07:ba:63:dd:6b:21:4d:7d:f2:75:50:92:a7:bc:
         95:a2:ed:e3:e0:bd:bf:25:b5:e1:7d:80:9a:57:20:6c:9b:6a:
         2a:44:19:50:07:78:fb:2e:96:43:77:a7:8e:64:1a:e0:c5:cf:
         47:76:6b:e3:cd:22:c1:46:4e:ed:55:81:54:8f:c3:05:e0:98:
         2a:ee:e2:5f:c3:ad:eb:ec:85:a7:19:df:f3:d2:78:51:f4:e0:
         3d:0b:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:02 2025 by rpki-client