Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
File:                     7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json)
Hash identifier:          J9L4iMeLEVm8dnciztcCvWYCKxqTuNGa04dFkA0jiHM=
Subject key identifier:   22:B6:3D:88:E8:99:6C:F3:21:94:C3:08:22:98:D2:21:69:79:90:CF
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F4328584AA160C80051C0173A7A894228
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     16385
IP address blocks:        67.43.86.0/24 maxlen: 24
                          67.43.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:c8:00:51:c0:17:3a:7a:89:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=ecf6b397-6f78-4c21-9d70-1025abfb6ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:fa:1b:de:ec:e3:1a:b8:80:f0:33:1b:df:
                    65:df:4f:52:84:05:36:9e:b0:7e:7c:d6:71:39:07:
                    23:c7:55:4e:9f:3b:1a:7b:6b:e0:ab:32:da:84:7d:
                    81:55:22:3a:28:ad:c9:5c:0e:7a:75:44:6d:dc:ed:
                    c1:cd:4a:21:da:80:c0:b9:59:17:fd:12:7a:d4:77:
                    66:54:91:11:74:7e:20:33:f1:a1:36:3e:7c:0d:de:
                    bd:33:2b:c3:07:e9:0e:94:7a:5e:e3:fb:fb:3e:9d:
                    e8:6e:99:ca:f8:44:c9:0b:14:85:f5:e7:13:4c:05:
                    12:21:1b:c2:cb:ed:c6:e2:fd:27:9f:f3:b9:1e:95:
                    8f:30:9d:b5:6d:7d:38:c1:6b:7e:b2:45:48:b4:27:
                    02:ae:68:de:c4:93:cd:7b:86:75:42:e3:3b:b5:4b:
                    7c:bd:67:e8:56:4b:cb:bb:6d:f3:ff:c7:74:d1:a3:
                    a5:31:ea:4e:57:84:e5:c4:18:62:7e:86:db:05:19:
                    0e:12:b3:7e:e6:8f:35:c3:97:94:05:cd:03:63:c7:
                    c6:02:53:f1:2d:1d:d3:f4:d8:bc:07:07:f4:cc:63:
                    d6:61:91:d3:38:46:a3:c5:2d:24:46:22:ed:19:fc:
                    fe:ea:d7:67:57:8b:05:e3:bc:6a:47:42:d4:01:ad:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:3D:88:E8:99:6C:F3:21:94:C3:08:22:98:D2:21:69:79:90:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:41:6c:c7:ec:8f:e3:79:75:43:8c:b7:c1:20:4b:14:13:9c:
         02:78:05:1a:82:f2:20:bb:3e:3a:98:51:7e:e6:f2:25:d3:51:
         97:2e:e8:54:a3:0a:9a:3a:d3:f3:76:41:1a:66:21:32:12:36:
         c7:8f:80:99:07:aa:aa:33:01:ac:c6:a1:54:7f:10:83:d0:9b:
         d6:13:57:4a:30:a2:76:9d:c7:9b:ae:60:cf:9b:79:b1:9d:c2:
         d2:da:1a:77:4e:2c:9e:7d:7d:1d:a1:61:33:18:11:80:8c:97:
         aa:49:e7:d3:1d:ed:8f:fc:ee:d3:4d:2d:34:36:7f:dc:d3:0d:
         96:83:ff:15:e6:79:d4:4d:5a:c2:52:b8:b6:60:44:79:c6:8e:
         27:7b:64:87:88:b9:fa:cc:39:cd:39:0a:be:bc:dd:41:8f:ac:
         f3:6e:9a:81:3f:e5:c2:fe:bd:04:9c:cd:c0:1c:fb:4c:16:0f:
         09:67:cb:07:e9:09:c8:ce:c8:fa:61:6f:27:14:50:4b:6f:01:
         4e:54:eb:76:8e:b4:2f:33:a5:05:00:4f:94:b6:3d:a7:d2:d5:
         f1:a3:38:e7:8e:27:35:c2:8d:72:e0:ad:55:48:d3:d4:89:9a:
         36:3f:cf:6a:3d:97:8d:a5:60:cb:63:99:4c:fe:19:bc:73:43:
         e3:02:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:46 2025 by rpki-client