Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/e15b48b5-bba9-3ce1-be60-426b2048528d.roa
File:                     e15b48b5-bba9-3ce1-be60-426b2048528d.roa (raw, json)
Hash identifier:          GyzZqJpQEVrL2k3PKae11p1BE3KeqIBFAzLdFTVckFs=
Subject key identifier:   59:37:CD:8D:ED:59:6F:ED:D6:AA:D5:33:25:2F:87:77:32:DB:C9:29
Certificate issuer:       /CN=93e43339-37a5-4091-b560-67e3fca1a9fa
Certificate serial:       010D0C9F43285849F44A5D2421252B726B646B00
Authority key identifier: 22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/e15b48b5-bba9-3ce1-be60-426b2048528d.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     27277
IP address blocks:        67.158.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5d:24:21:25:2b:72:6b:64:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e43339-37a5-4091-b560-67e3fca1a9fa
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=efe7fc02-da55-4938-bd4b-ddd0931204df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:ef:ec:9a:93:0e:ab:36:cc:37:93:44:5f:
                    c1:ab:9b:9e:32:5b:91:71:49:47:6f:83:27:7b:ec:
                    79:7d:50:58:f3:0d:41:7e:49:bf:78:b3:d2:2a:2b:
                    c2:85:97:47:3e:e4:67:89:77:f8:16:74:cf:79:3d:
                    d1:48:d2:1b:5d:47:ab:e0:47:cc:a6:46:65:b6:fc:
                    92:90:25:21:f4:cc:1a:ff:48:a8:19:c9:eb:29:ae:
                    71:af:7e:20:88:c3:5a:86:3e:df:a6:e8:42:53:56:
                    14:3e:da:1b:2d:65:4b:3d:c9:11:1d:09:10:41:56:
                    d8:ca:f6:4e:2d:f0:ff:89:3b:cc:a7:b3:28:7f:2e:
                    7b:df:45:a1:85:46:62:c1:55:4e:0d:86:58:0d:23:
                    14:c6:10:f6:0f:b4:82:38:f0:d3:c5:27:5d:84:11:
                    c3:37:7a:18:67:2e:a9:0a:39:72:90:dd:c0:44:6c:
                    91:fc:eb:ce:02:0c:bb:32:d2:73:9b:16:34:e9:70:
                    82:e5:e8:45:da:16:ca:39:87:ac:35:37:01:cc:c6:
                    30:0c:44:51:e8:d9:5d:45:1a:0f:6f:ff:2e:12:ad:
                    a1:1c:14:b4:95:05:ac:1b:05:6f:94:f4:1d:d6:7a:
                    94:15:f7:46:34:37:b9:31:ae:b2:b9:2c:2a:4c:66:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:37:CD:8D:ED:59:6F:ED:D6:AA:D5:33:25:2F:87:77:32:DB:C9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/e15b48b5-bba9-3ce1-be60-426b2048528d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl

            X509v3 Authority Key Identifier:
                keyid:22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:46:de:bd:0c:f4:15:08:92:b7:95:69:e3:8a:87:63:34:9e:
         77:0f:4e:41:8d:92:2a:ec:22:60:20:73:14:79:57:f9:ed:53:
         5b:21:d6:d2:e6:f5:3c:4f:7b:4c:fd:f4:55:7e:0d:f4:24:6b:
         82:61:bc:e3:fa:b6:fc:5a:3e:e5:58:32:00:28:d3:08:11:a4:
         78:c0:57:d8:57:94:8a:89:b9:75:c7:db:6d:f1:11:54:97:79:
         2f:e3:67:38:9f:7e:bc:3d:6a:09:66:8c:0f:02:3a:65:4a:cc:
         5e:bc:23:d2:95:16:61:2d:08:3c:e2:4d:c8:d5:13:1c:94:f7:
         74:b7:72:e9:90:d9:6a:d3:6e:70:82:2d:05:ae:c3:7d:b4:03:
         a9:14:59:86:f6:5f:5a:a9:ab:fd:9d:fe:33:f0:e0:35:2e:cb:
         73:95:c9:bc:64:73:67:95:31:0b:4f:0d:1b:2d:0d:89:47:b3:
         88:bc:27:dc:67:f1:45:0e:46:e1:05:9d:f5:99:7c:82:fe:10:
         5a:19:dd:f1:b8:b0:b1:9e:21:0f:a9:a1:17:79:a3:19:1d:3d:
         26:f1:ed:a4:7d:ad:3e:d0:72:cc:aa:ba:f0:d9:28:30:de:fc:
         76:4d:f7:93:76:a3:c2:55:8d:62:fd:7b:3a:8e:ca:5e:bb:bd:
         65:97:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:21:58 2025 by rpki-client