Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/93586662-f1b3-3c8d-8f29-d0c1dcff32d5.roa
File:                     93586662-f1b3-3c8d-8f29-d0c1dcff32d5.roa (raw, json)
Hash identifier:          hjh/v+Ki7r4gioYIZ4N+ngUZJc+Auqn0DutUr3m1aIA=
Subject key identifier:   1C:C3:05:C8:F7:4A:80:39:28:E0:09:64:1F:AC:2D:0B:E9:34:81:0B
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584AADF11B578618D05B1ED04080
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/93586662-f1b3-3c8d-8f29-d0c1dcff32d5.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     2734
IP address blocks:        67.212.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1b:57:86:18:d0:5b:1e:d0:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=64bd5731-6d13-4df5-93d9-6c978217bce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:4d:d3:ab:7d:bb:6d:20:09:f9:ce:b0:8d:
                    aa:58:60:17:a1:bc:4b:51:25:ac:c9:b8:7b:32:ac:
                    56:79:b0:75:6f:c7:c1:78:22:04:5e:ae:95:46:c4:
                    31:4e:a8:93:12:27:0b:3a:0d:3a:c6:8d:d6:e7:9a:
                    bb:0c:f4:0b:03:ad:22:2f:81:05:b3:99:a7:b6:52:
                    77:64:94:54:60:ed:12:ba:8d:51:c9:d9:10:48:a7:
                    32:4b:ce:7b:0e:fc:cc:32:ff:f1:f6:36:ac:6f:c1:
                    b2:ee:fc:e9:e0:0e:a0:80:0e:34:cf:15:bb:35:79:
                    50:44:4c:e0:d4:01:7c:2b:e8:53:db:d3:7d:36:62:
                    ed:ca:1d:87:2f:65:92:c7:86:1f:5d:4b:af:f9:30:
                    ed:64:67:46:3f:08:d4:e9:a6:e8:d6:5d:fa:29:b2:
                    e8:44:db:d7:08:88:de:a5:53:82:79:18:9d:c6:49:
                    2d:a6:a9:3f:3c:7c:b9:c1:9a:7c:ac:ed:2c:87:40:
                    be:2c:bb:ff:e9:c6:53:03:f9:eb:9a:57:f2:ea:8d:
                    2c:21:ed:f0:d5:e9:38:48:b6:31:87:c3:12:15:d2:
                    31:41:dc:4a:08:af:35:07:1d:18:0e:af:71:dd:cc:
                    1a:a2:97:f9:51:ea:b5:d9:95:8b:a1:a7:23:7e:ce:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C3:05:C8:F7:4A:80:39:28:E0:09:64:1F:AC:2D:0B:E9:34:81:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/93586662-f1b3-3c8d-8f29-d0c1dcff32d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:93:47:28:27:a0:4d:83:de:e8:fd:89:74:3d:be:8c:e7:8d:
         61:0c:37:8c:25:e7:9b:e2:2b:59:5e:29:7a:4b:72:a4:b7:d0:
         38:09:55:8c:c4:a8:c4:94:fe:3b:72:2f:7d:02:bc:3e:57:3a:
         6b:9b:6b:06:47:19:8f:0e:5f:25:fb:40:6d:cc:2f:9b:28:3a:
         3c:49:1e:90:2b:79:7e:a3:d9:63:67:29:74:fb:3f:76:db:60:
         53:4f:be:10:bd:3c:94:8f:d7:c4:0b:8f:18:8e:39:5a:31:25:
         4b:85:24:aa:56:89:fd:ff:be:0d:6b:0e:9e:1e:2d:30:7b:bc:
         81:69:96:94:16:d0:2d:08:55:82:7d:94:0c:0c:76:fb:0f:d2:
         c8:ea:4d:40:bd:6c:98:10:61:a0:f2:73:06:ab:ca:25:3d:3c:
         f7:e7:03:8d:c9:f9:2f:4e:55:15:70:18:16:e4:bb:10:93:e4:
         71:54:d6:bc:da:5b:1d:f6:de:c1:36:a3:30:30:b9:71:bc:50:
         e6:58:60:27:97:63:32:d2:f0:e1:a8:54:ce:a7:04:dc:5f:4e:
         07:9f:65:63:9e:8d:1e:a2:e5:12:ba:46:a6:88:35:18:2e:c5:
         2f:10:1c:c9:0a:69:3a:48:29:7d:3c:06:5c:77:af:b7:35:c3:
         d1:9b:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:43:32 2025 by rpki-client