Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
File:                     495553e5-6804-3997-88ac-54c613b38c17.roa (raw, json)
Hash identifier:          gXCjKDLbREAZ8gQfoxWbXvizFYMsh9GULKvF5cFS3ug=
Subject key identifier:   CB:69:49:CB:18:3D:EF:90:86:C9:32:8C:5E:58:72:B9:98:B8:4A:AE
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584A4F05C21A5283A36F0DE14580
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     6621
IP address blocks:        67.142.0.0/19 maxlen: 19
                          67.142.100.0/22 maxlen: 22
                          67.142.104.0/22 maxlen: 22
                          67.142.108.0/22 maxlen: 22
                          67.142.112.0/22 maxlen: 22
                          67.142.116.0/22 maxlen: 22
                          67.142.120.0/22 maxlen: 22
                          67.142.124.0/22 maxlen: 22
                          67.142.128.0/20 maxlen: 20
                          67.142.144.0/21 maxlen: 21
                          67.142.152.0/22 maxlen: 22
                          67.142.157.0/24 maxlen: 24
                          67.142.158.0/23 maxlen: 23
                          67.142.160.0/19 maxlen: 19
                          67.142.160.0/24 maxlen: 24
                          67.142.176.0/24 maxlen: 24
                          67.142.184.0/24 maxlen: 24
                          67.142.185.0/24 maxlen: 24
                          67.142.186.0/24 maxlen: 24
                          67.142.188.0/24 maxlen: 24
                          67.142.189.0/24 maxlen: 24
                          67.142.193.0/24 maxlen: 24
                          67.142.194.0/23 maxlen: 23
                          67.142.196.0/22 maxlen: 22
                          67.142.200.0/23 maxlen: 23
                          67.142.202.0/24 maxlen: 24
                          67.142.206.0/23 maxlen: 23
                          67.142.208.0/20 maxlen: 20
                          67.142.224.0/20 maxlen: 20
                          67.142.240.0/23 maxlen: 23
                          67.142.242.0/24 maxlen: 24
                          67.142.244.0/22 maxlen: 22
                          67.142.248.0/23 maxlen: 23
                          67.142.250.0/24 maxlen: 24
                          67.142.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c2:1a:52:83:a3:6f:0d:e1:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=fbf231d8-b3fa-4b3d-baf2-e070b7c186b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:73:b0:68:00:54:f2:25:6b:11:49:9c:13:
                    b4:d3:97:c4:9c:fd:5d:7b:84:31:0f:f1:b8:ad:17:
                    ee:a3:a0:2c:ce:71:63:3a:c7:27:fe:e9:c1:43:7f:
                    72:5e:40:b9:5b:98:73:08:d8:3e:f2:a6:41:2c:cd:
                    8b:ff:a6:e3:a1:be:30:a7:0b:9d:99:91:be:13:ab:
                    af:e4:a1:b9:f0:b0:8a:32:1a:88:00:1f:42:da:d1:
                    71:ff:78:4f:04:62:3c:76:5d:f9:b5:52:ca:6e:f4:
                    d3:8d:27:73:9d:16:fe:8e:38:af:a3:2f:1f:0b:aa:
                    cb:f3:d1:83:06:6a:d6:f1:20:fd:03:ab:14:c8:d9:
                    ac:6f:86:95:65:f2:10:f2:91:cd:72:69:46:f6:09:
                    b5:ae:1c:0f:f5:94:1b:76:03:d3:44:00:51:9a:a1:
                    b0:c6:f2:ca:47:b8:1b:d9:59:8e:f1:e1:e1:39:56:
                    26:66:09:07:c1:0f:cd:43:98:6a:91:21:1a:0c:13:
                    21:ca:9f:50:2d:cf:33:6a:6a:5c:99:13:88:76:c4:
                    4e:5d:e7:95:43:95:54:ca:d1:e2:c1:52:13:f4:1c:
                    84:cc:ac:20:fe:07:ce:58:08:73:a4:58:fb:85:ee:
                    23:5d:15:da:68:21:f4:7f:e0:de:e0:92:dd:3b:86:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:69:49:CB:18:3D:EF:90:86:C9:32:8C:5E:58:72:B9:98:B8:4A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.142.0.0/19
                  67.142.100.0-67.142.155.255
                  67.142.157.0-67.142.191.255
                  67.142.193.0-67.142.202.255
                  67.142.206.0-67.142.242.255
                  67.142.244.0-67.142.250.255
                  67.142.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:d3:2d:4b:28:4d:61:39:10:b1:96:91:55:22:4d:9d:61:
         7e:3b:02:7c:86:6b:82:7a:6b:75:eb:0c:48:d5:d8:d3:6c:0e:
         ae:c3:f4:ab:71:07:8d:ac:34:ed:ab:37:e8:f2:fc:3b:8e:d5:
         21:28:7d:08:a1:38:94:17:bb:4a:8a:fa:49:d3:18:0f:a1:bc:
         b8:1e:f2:ee:82:c1:b6:56:a4:43:80:0a:0a:13:18:0a:64:15:
         83:93:6e:e9:ee:fb:09:62:1a:80:49:86:b0:24:4c:25:1d:9c:
         99:52:16:b5:f6:ac:68:eb:ef:70:d1:1d:79:03:54:b2:fd:43:
         0b:e7:fd:cc:48:72:a6:a0:14:bd:45:6c:80:82:dd:08:5d:3c:
         07:ec:3e:b5:83:56:01:dc:2a:5b:40:de:07:89:36:1b:31:a6:
         2c:4c:00:d4:22:9f:29:e2:8f:9a:c6:59:f2:39:71:c5:a3:c2:
         a1:0f:c8:8b:4b:3a:b8:59:e6:2a:da:f3:a2:49:78:6b:41:fe:
         0f:2b:32:b7:d2:e6:ca:2c:67:b8:92:23:82:cf:39:95:23:93:
         cf:5f:4a:44:cf:b5:68:bf:aa:ad:4c:5a:b3:00:15:fc:fa:0f:
         a2:13:c1:f7:a7:01:68:63:3a:01:7c:70:32:6a:60:33:29:1e:
         be:33:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:19:26 2025 by rpki-client