Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa
File:                     ea338235-81c7-343b-b797-594e288c4658.roa (raw, json)
Hash identifier:          RqED7KeBvvyDLswcF1pgb9UrCMtnMm8dYXaj9+res58=
Subject key identifier:   AE:7E:F8:C8:97:64:FD:9C:E3:05:BF:44:6F:2B:C8:4C:E6:3A:DD:59
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584AC17B91D2A2AA08EC2306E700
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa
Signing time:             Tue 05 Aug 2025 13:00:41 +0000
ROA not before:           Tue 05 Aug 2025 13:00:41 +0000
ROA not after:            Mon 03 Nov 2025 14:00:41 +0000
asID:                     26042
IP address blocks:        67.220.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:7b:91:d2:a2:aa:08:ec:23:06:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Aug  5 13:00:41 2025 GMT
            Not After : Nov  3 14:00:41 2025 GMT
        Subject: CN=456624f6-00c2-406c-8298-6a1438b0f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:8f:e2:66:bd:3c:32:3f:1f:4c:3a:43:af:
                    af:8a:3b:05:00:4f:d9:07:44:38:cd:22:63:1e:91:
                    99:56:69:39:2f:ea:a5:07:d3:94:71:56:2e:49:b4:
                    86:5f:11:ee:94:85:c9:21:71:2a:3e:84:11:6f:59:
                    79:9e:d8:d8:54:93:f9:8f:a2:3b:14:53:30:ad:03:
                    ae:ef:22:f2:1c:69:4f:08:d6:76:14:b2:91:90:d5:
                    63:98:d8:36:0e:84:05:05:f1:ee:5c:7b:9e:35:25:
                    a8:1f:cc:7b:c8:73:9e:3e:d2:8d:df:9e:4b:dd:a0:
                    8b:5e:4b:d8:95:51:c0:ff:7f:07:ec:73:07:05:e1:
                    a1:4b:67:11:81:e4:9a:ce:8e:bd:18:73:e8:35:3f:
                    cc:e9:fa:bb:03:09:9d:e7:a3:07:8a:c0:1f:4a:46:
                    bb:ee:90:a9:19:cf:6c:5a:ba:19:7b:de:3c:1a:a7:
                    09:74:31:c6:ff:86:c5:e2:92:c7:8d:8c:9e:23:43:
                    9e:a9:2c:33:02:9d:54:e4:36:18:33:f8:d3:8f:59:
                    bd:47:12:ed:55:58:4f:48:e5:bb:88:17:f6:07:91:
                    df:8c:7d:31:9f:72:62:f6:52:89:4e:97:82:6e:9f:
                    90:2f:b8:be:a0:17:80:2f:21:8a:2a:fa:1b:f4:a8:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:F8:C8:97:64:FD:9C:E3:05:BF:44:6F:2B:C8:4C:E6:3A:DD:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ea338235-81c7-343b-b797-594e288c4658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:af:74:bd:d6:c0:7a:7e:02:4f:26:57:6c:1e:fb:27:2f:2b:
         4b:8f:8f:99:88:ca:82:47:a2:47:f8:ab:d7:f0:d1:bf:b0:f1:
         38:63:ec:b7:71:0a:be:ef:ec:95:c9:93:a4:5c:50:f8:0c:63:
         47:95:50:74:9e:c8:29:b0:a5:2c:41:33:77:6a:a7:7a:0c:20:
         4e:28:06:58:17:7d:69:da:90:94:9b:2f:e2:36:d5:a0:0a:2b:
         1c:1d:fb:81:8c:27:82:06:d8:61:fc:6e:63:48:cc:02:68:04:
         1a:31:f2:c3:b2:33:3c:d1:4f:53:82:a2:9e:8b:a2:79:e5:3e:
         4b:52:c8:e6:bb:b0:df:73:5c:d8:b0:6b:f6:1e:7f:85:60:32:
         86:2a:f8:e4:cc:1f:7a:27:a1:2c:3c:ea:15:81:bb:0a:e7:1a:
         26:2d:76:c4:7f:58:45:09:71:73:7c:4f:52:2c:a2:8e:5b:7f:
         5d:89:29:06:23:b5:97:62:c6:84:a2:37:81:4d:4a:c0:d7:5e:
         52:68:12:42:c1:a0:05:b3:0d:5d:28:65:24:e4:bd:e4:44:8e:
         a9:d0:69:89:3d:07:6b:ea:7c:a7:b4:90:52:f3:e3:a3:a2:92:
         bf:59:c3:67:89:80:ab:72:ab:4a:d4:14:33:23:fc:b3:ab:da:
         b7:a4:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:23 2025 by rpki-client