Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ae79e840-67a9-33d7-92ee-86fb9d248de9.roa
File:                     ae79e840-67a9-33d7-92ee-86fb9d248de9.roa (raw, json)
Hash identifier:          1EP0BKf7tcqSX67msfRZvXnrfX3/zZDXRSHX+DU1acU=
Subject key identifier:   84:17:4F:6D:E3:D6:58:D8:5D:58:AC:6E:EE:64:4B:AB:2C:4E:43:B4
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584A268AC5D936270CDEA6F45040
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ae79e840-67a9-33d7-92ee-86fb9d248de9.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36692
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c5:d9:36:27:0c:de:a6:f4:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=906c1048-4b35-48a0-a54e-b14bcf047a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:72:ab:0d:52:f7:c2:a8:3c:e0:09:be:8c:
                    10:98:74:4c:8e:91:cd:5c:bb:24:f6:d9:a8:35:0c:
                    ce:cf:45:00:43:13:81:02:d7:78:8b:d8:9d:14:c2:
                    3d:e4:35:4d:2f:be:02:a8:18:1d:60:69:73:b4:50:
                    0c:7e:01:d3:97:e6:73:0d:77:da:90:1e:f3:92:f3:
                    62:be:30:1c:06:67:95:82:02:a3:92:ed:95:ce:ed:
                    fe:39:15:b3:d3:2b:fa:2e:4a:42:35:9f:24:d0:81:
                    88:1b:91:b5:d1:db:ff:9e:55:dc:99:11:4e:6b:72:
                    23:93:0d:0e:f3:63:ff:28:99:9a:38:c6:f2:c2:5f:
                    26:bd:25:a9:59:c8:c2:b5:5e:19:46:aa:02:93:19:
                    71:16:01:be:b3:e0:85:f3:b1:73:a8:52:38:b0:b8:
                    5f:a5:da:db:a3:dd:ce:dc:ca:da:86:aa:a9:9a:80:
                    17:32:71:2a:66:5d:4a:3a:23:2e:5a:88:ae:4c:5a:
                    11:8a:34:1f:84:0c:2f:0b:3f:a5:4d:fd:98:89:83:
                    12:d8:ec:e3:a7:e4:80:a1:c5:13:61:ac:d0:03:55:
                    a1:cd:18:3a:7a:9e:8a:fe:4a:97:31:80:0b:c2:d2:
                    57:31:4f:24:72:7c:f0:ca:31:db:a4:88:20:36:95:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:17:4F:6D:E3:D6:58:D8:5D:58:AC:6E:EE:64:4B:AB:2C:4E:43:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ae79e840-67a9-33d7-92ee-86fb9d248de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:08:0e:41:36:65:99:01:60:23:29:e6:e7:1e:0d:09:e5:94:
         b4:8c:b4:21:c2:12:59:05:c4:93:b2:6d:05:28:82:95:02:33:
         b1:d7:b1:b4:67:ee:a1:8d:3b:58:9b:f8:f3:f7:7e:f5:8f:bb:
         dc:a3:3d:61:f7:1e:11:27:80:54:44:35:4d:32:63:48:ce:54:
         bb:58:e8:21:06:2b:a4:8b:42:62:f0:b2:9e:90:e5:48:a7:40:
         e7:bc:5b:e3:69:92:7e:de:ae:c0:02:81:1e:8c:b6:00:85:c8:
         63:65:bc:09:8b:92:b6:4a:5f:cc:ce:ab:83:f1:38:a0:2d:7a:
         a1:62:6f:3a:65:9e:51:f6:a8:86:37:59:38:a1:29:85:c4:71:
         3d:8c:2f:3c:3a:31:a4:f4:a9:81:46:53:7f:f6:d0:2a:fc:07:
         48:d8:fd:b3:66:52:3e:50:79:8b:67:47:e7:4b:61:78:f1:06:
         78:d5:1f:13:9b:b3:d1:84:fc:ad:39:75:c7:1b:1f:d2:98:a5:
         6f:81:d4:bd:fc:f7:a0:ff:be:48:8e:78:d1:27:9b:77:f6:4e:
         80:35:bb:3f:be:48:32:04:0d:2f:d0:ff:19:72:ca:87:75:1b:
         68:ad:5c:55:12:6c:e9:88:fd:48:6a:96:b0:42:c7:c0:c2:ca:
         32:e8:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:11:57 2025 by rpki-client