Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa
File:                     e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa (raw, json)
Hash identifier:          7uZwb4e6ZaHDjr8vuyTlW8jU+dJ8NUt2gqEX0YQvjaY=
Subject key identifier:   D9:03:95:26:E0:B6:D2:64:68:24:F6:A3:A0:D2:B7:65:E5:55:D4:3A
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584A268AA99F9394DA4132613F00
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     48678
IP address blocks:        67.214.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:a9:9f:93:94:da:41:32:61:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=b63b9896-1a15-411c-9e09-60f8f9f46b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:e0:7a:1b:68:ec:f0:57:ac:f8:c9:83:68:
                    c7:fe:9f:e5:aa:8f:a7:6d:02:6a:56:12:ff:2c:d2:
                    2c:9c:8d:58:da:e8:b3:2e:f7:a9:8e:3b:bf:4f:db:
                    45:d5:fc:2c:ae:db:80:e4:72:70:04:60:42:03:8c:
                    fd:bb:61:e3:37:06:a8:e3:ec:cf:74:47:e1:d0:e4:
                    1c:35:0b:b4:79:73:8c:99:3e:bd:5c:15:23:ca:74:
                    6f:ab:d1:fa:d1:cf:2f:96:ed:11:ca:4e:f4:58:c2:
                    b2:9e:28:b8:e3:2e:e1:b8:e2:21:d1:f0:ea:2c:dd:
                    f3:25:8a:28:17:2c:68:9b:f8:dd:f2:fb:86:bb:03:
                    3e:b6:bb:bc:04:2b:e2:82:c3:5f:b2:c7:8c:0e:b1:
                    fc:bf:02:2e:2b:f4:35:43:99:31:95:a8:65:e0:f9:
                    2f:92:2a:b0:b4:04:73:a4:a8:07:c6:52:7f:b1:8a:
                    4b:3b:45:84:4f:83:fb:2c:18:c1:66:b2:af:a2:29:
                    99:38:38:e4:9e:2f:f3:9f:29:77:b9:f1:b4:fa:0b:
                    d4:29:df:e0:ea:9e:48:02:39:af:51:46:16:81:5b:
                    d4:37:e7:0d:59:99:3f:13:50:32:b3:1a:b4:b9:26:
                    7e:f3:f4:ba:75:4b:5b:a0:72:67:8f:89:d7:13:bc:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:03:95:26:E0:B6:D2:64:68:24:F6:A3:A0:D2:B7:65:E5:55:D4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:5b:15:ea:e4:bd:bd:d3:25:ac:1a:b9:40:d8:18:99:3f:
         4b:df:35:15:bd:ba:bd:fd:a7:66:7d:c3:25:bb:d1:59:54:f5:
         82:a3:d2:2f:12:ca:ed:5f:7c:0d:dc:d6:14:91:e3:88:32:2f:
         38:b7:e7:6b:77:49:37:22:c6:74:d8:40:d0:2c:d8:13:cf:4b:
         a4:6b:67:c2:6c:ba:6e:86:3e:30:1c:7c:f1:17:9b:f9:60:3b:
         50:93:7a:46:ca:75:70:a9:aa:df:16:45:58:44:fa:72:a7:fe:
         64:ba:c8:89:88:14:12:ff:65:a7:f6:9f:a5:05:81:71:83:3c:
         47:63:70:d7:a8:e6:14:3f:b2:ec:a5:ad:ad:47:7b:47:99:95:
         09:b1:09:4d:5e:a6:f2:55:f8:ff:8a:92:4d:c0:af:b0:b9:80:
         dd:eb:17:45:ca:6d:7b:02:04:c0:f1:01:43:10:1f:db:f5:20:
         fb:c2:18:f7:3b:d5:d8:d8:a0:49:ce:dc:4b:0d:36:d6:e1:bb:
         8d:2f:b5:6c:8c:17:43:77:5d:51:fc:48:aa:6a:8e:2a:72:78:
         69:e3:d8:69:38:b2:ab:7a:fe:c2:53:b4:67:74:cb:81:46:2c:
         f0:df:ea:bb:85:72:55:f5:7a:1f:11:98:37:ed:75:34:48:a3:
         2f:0a:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:24:26 2025 by rpki-client