Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df6d616d-e198-30f4-a129-7d8ed5b8aac6.roa
File:                     df6d616d-e198-30f4-a129-7d8ed5b8aac6.roa (raw, json)
Hash identifier:          4w3XLDzg3shtr1j6d2cct3ia9TGSMpkXYH3QuW718Dg=
Subject key identifier:   6A:E4:EC:6A:4F:9C:34:5A:D4:B4:36:2E:5D:1A:EC:D4:D1:19:5A:1B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19660B8CF7257F8E130F718
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df6d616d-e198-30f4-a129-7d8ed5b8aac6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        67.69.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:60:b8:cf:72:57:f8:e1:30:f7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=662ec2b7-2d78-41fd-a34e-18249f0e69e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:c5:6b:17:cd:81:a8:30:1c:01:f0:81:f7:
                    7f:24:78:68:0d:43:23:a8:a5:07:ca:11:de:1e:a4:
                    73:c5:f1:72:5e:98:50:70:76:03:9f:64:87:94:69:
                    b1:fd:84:a3:c0:0d:e1:a5:dd:93:d5:99:4b:c3:06:
                    ec:f6:79:a2:f9:99:ff:f7:88:91:ef:1a:4b:59:3d:
                    0d:24:b2:40:e2:ab:9c:ac:1d:4d:18:6e:97:f0:ea:
                    dc:c2:38:ce:0a:b6:79:41:eb:d4:03:d6:18:8a:f0:
                    5d:d8:3e:dc:8e:77:29:e4:41:ef:54:5e:90:3e:07:
                    5d:ef:34:c2:d6:e7:e6:05:9a:8a:9b:52:5f:e4:33:
                    81:4f:28:62:c1:9e:a4:f9:d2:21:70:f5:e7:a6:f6:
                    02:87:48:06:84:83:8e:48:ee:46:61:07:98:09:35:
                    7e:e9:a1:c7:8c:54:01:58:a8:f3:de:32:a2:ed:8b:
                    68:a4:62:b5:41:e8:d7:1e:70:8e:79:6f:f5:9f:25:
                    dc:bb:46:a7:f8:f9:ef:4e:2e:eb:93:96:89:7a:ee:
                    71:ca:7c:92:82:b9:c2:63:92:7e:88:c1:00:87:47:
                    5e:92:25:e6:05:a5:f3:f1:9e:02:ce:82:94:1e:eb:
                    db:92:90:87:9c:ba:10:e0:f9:b8:b6:48:4a:a1:3a:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:EC:6A:4F:9C:34:5A:D4:B4:36:2E:5D:1A:EC:D4:D1:19:5A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/df6d616d-e198-30f4-a129-7d8ed5b8aac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:66:84:7e:30:59:ea:8e:5d:9b:1c:ad:2b:bd:09:9e:25:
         93:9a:b6:cd:82:9e:50:7d:57:ba:df:df:e8:de:0c:db:99:e6:
         16:f6:be:fb:07:35:b9:64:54:80:bf:07:93:43:ab:04:6b:90:
         f6:51:60:f0:70:12:bb:e7:ba:e5:0f:67:b7:a9:2f:2a:d3:d2:
         9f:08:df:2f:c3:fd:04:05:63:1a:e0:56:f9:bf:ca:42:a3:27:
         38:47:03:d2:86:dc:ca:d6:32:6b:8f:74:35:87:cc:a0:49:7a:
         5e:89:d2:52:9e:4f:a0:51:73:c5:40:5d:aa:2e:b0:8c:a5:ec:
         65:13:a1:69:74:5f:5a:fc:e2:6b:6d:29:96:0e:57:64:1d:0e:
         05:2a:2e:e2:f9:cb:f8:43:6e:ae:ad:01:70:3f:85:04:e9:c3:
         28:ab:cc:b6:37:0a:38:f0:36:02:84:01:99:ea:5b:05:ec:17:
         13:ed:66:9e:2d:0d:06:a7:da:7d:50:e7:23:03:de:5b:ff:46:
         4a:ba:ba:57:82:b3:93:ae:42:f4:a3:3f:d5:7e:b4:d2:fe:af:
         38:e7:4f:fc:43:22:e5:a1:63:63:05:79:13:d8:d5:7f:20:41:
         70:f4:cd:dd:1c:e3:eb:b4:b0:a0:70:1a:58:42:61:64:a2:5b:
         63:3c:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:40 2025 by rpki-client