Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa
File:                     30a09d44-dfec-338b-ac49-726a62b531d0.roa (raw, json)
Hash identifier:          31tnQeB9eu8PBiLkLGRWzNMejVQ3+0RUALfthWRCI0s=
Subject key identifier:   D4:99:E7:28:E9:E2:C1:BB:CF:75:EC:D2:57:B7:2C:B3:E2:CF:8B:F6
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F4328584AEE269C764A3378A1B6E27A00
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     62651
IP address blocks:        199.33.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:9c:76:4a:33:78:a1:b6:e2:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=7ac2df07-8572-465f-8ec8-a3962bea9ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:cb:02:1e:51:0b:43:00:1a:b6:91:d7:53:
                    08:c7:2e:3f:49:85:24:e5:3a:b4:70:f5:d7:f3:3a:
                    dd:04:33:ba:1c:26:a4:75:19:da:5c:84:51:67:f4:
                    fe:93:15:cc:50:9d:af:3f:54:5f:54:e6:37:aa:96:
                    88:f1:f0:c1:31:88:89:72:d3:4f:f5:58:64:7d:1e:
                    8e:5a:13:cc:f2:80:bc:82:32:ee:37:c9:3e:c6:4a:
                    33:aa:93:82:86:0c:c3:02:3d:6f:e8:14:00:ad:fb:
                    98:bd:8c:ad:e9:80:7f:c0:82:51:53:73:ef:e8:d3:
                    1e:04:56:c2:5b:8f:05:69:d4:87:9e:38:08:a1:81:
                    dd:ae:5b:dd:74:2e:40:b5:41:29:a8:ea:b3:86:72:
                    d3:78:1e:b7:88:9b:fd:61:b2:23:4e:48:07:30:be:
                    ed:c9:33:b2:50:55:85:43:8e:4e:85:a5:9b:26:62:
                    dc:98:f4:f9:01:1a:1a:15:5d:8d:16:31:34:99:d2:
                    79:63:e5:e3:39:cf:8c:8d:e9:0c:2d:90:e7:25:7d:
                    83:46:aa:4b:57:ab:a3:09:f5:4a:77:8a:0b:24:6c:
                    30:6f:b3:0e:7f:ef:89:9b:2d:4f:14:88:9c:63:b9:
                    f1:1d:fd:d3:bf:3a:02:3a:54:84:e9:dd:82:9d:35:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:E7:28:E9:E2:C1:BB:CF:75:EC:D2:57:B7:2C:B3:E2:CF:8B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9e:2a:da:d1:0d:29:57:9a:e7:3e:14:a0:14:af:4e:9e:65:
         24:60:0a:2d:ca:aa:98:d7:f2:4d:8c:f4:12:21:04:c9:cf:e0:
         89:18:50:29:97:89:9a:03:ef:d8:ae:76:65:cd:be:a7:e4:12:
         02:bf:4a:e7:52:14:a3:f1:e3:b0:06:26:2c:0e:a7:f1:d7:eb:
         01:fa:1b:99:4a:e4:5a:3a:f9:7d:15:7c:4e:1a:21:fc:3c:9a:
         75:75:9a:ca:57:be:42:a3:a8:db:66:a5:4b:d7:9c:f4:8d:0c:
         cf:5f:4d:33:ae:8b:48:0a:6a:bc:69:5f:29:f6:50:02:5d:73:
         8f:63:22:b7:8e:22:56:db:bf:7a:4f:d5:64:82:25:33:43:8e:
         f1:01:f4:db:b5:65:d8:90:43:0c:43:c6:93:34:c4:44:94:de:
         a2:5c:b5:8e:85:67:e5:4c:13:6f:5b:13:93:6f:19:24:d4:8d:
         7b:20:b0:99:d2:5d:96:cb:f2:8d:28:99:2a:e5:94:fa:2f:68:
         cb:c1:47:9d:25:af:08:54:a1:14:db:46:e5:fb:67:3d:f3:81:
         8d:5d:c6:b0:3f:34:6f:b4:08:00:6e:d7:7a:6c:d5:5d:d4:81:
         02:95:8f:1a:be:2f:1f:2c:3b:f1:47:8b:3c:76:de:02:48:ba:
         65:cd:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:25 2025 by rpki-client