Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/76dd4d64-3162-3c69-a78a-3b779a6cc25c.roa
File:                     76dd4d64-3162-3c69-a78a-3b779a6cc25c.roa (raw, json)
Hash identifier:          cDiQF6g/Zp+ffrnL1dlVPaBCbmIWKU2oUVhZQg/w4o0=
Subject key identifier:   C9:9F:93:D1:F8:8F:89:6E:9C:6A:E2:19:16:5B:88:BF:05:E0:FC:C2
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584A4F05C1E8F7896977CF948960
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/76dd4d64-3162-3c69-a78a-3b779a6cc25c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     6621
IP address blocks:        67.47.0.0/20 maxlen: 20
                          67.47.16.0/23 maxlen: 23
                          67.47.18.0/24 maxlen: 24
                          67.47.22.0/23 maxlen: 23
                          67.47.24.0/21 maxlen: 21
                          67.47.32.0/19 maxlen: 19
                          67.47.80.0/20 maxlen: 20
                          67.47.192.0/20 maxlen: 20
                          67.47.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c1:e8:f7:89:69:77:cf:94:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=d7d31630-737d-445e-8b9e-89757ff9bf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:c0:24:48:04:45:3e:44:e8:35:3e:fe:24:
                    0c:46:0a:53:5c:30:53:eb:4a:51:34:2c:12:de:75:
                    1a:06:da:0c:6b:79:c6:76:a1:cb:2c:6a:42:a9:36:
                    ef:cd:a3:2b:59:e5:73:2f:50:a1:c6:df:98:f1:0a:
                    63:98:16:3c:d0:25:d9:23:86:d5:65:a0:96:f0:f1:
                    24:e6:5b:7d:f0:9b:49:6d:a4:91:82:b7:bb:cf:4f:
                    95:2a:38:70:a5:f6:92:c1:0d:3e:53:58:09:18:ef:
                    cc:77:f4:0b:5f:85:0c:83:2b:19:be:06:73:cf:e0:
                    26:0b:88:25:60:d9:b0:95:30:3c:8b:38:0f:d2:38:
                    16:13:b6:c6:08:0a:ac:98:68:30:c4:58:24:ca:dd:
                    19:fd:7f:04:ca:be:41:90:e6:0e:11:77:3b:6b:a9:
                    6b:dc:d2:81:3e:0b:d3:07:b5:7f:1b:6c:f4:c9:74:
                    7f:0e:c8:bd:5f:3c:a2:69:2a:32:2a:92:6e:67:71:
                    6b:b9:b6:36:6a:76:21:5d:97:64:bc:6a:ee:7a:6c:
                    e4:ac:b0:90:a9:c8:12:51:64:a4:cd:1d:0f:59:e1:
                    04:29:1d:c9:1d:0a:f0:1d:a1:63:0e:74:23:5a:44:
                    3d:d6:de:28:3f:8d:7a:2d:af:25:43:c9:f7:a0:3b:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9F:93:D1:F8:8F:89:6E:9C:6A:E2:19:16:5B:88:BF:05:E0:FC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/76dd4d64-3162-3c69-a78a-3b779a6cc25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.47.0.0-67.47.18.255
                  67.47.22.0-67.47.63.255
                  67.47.80.0/20
                  67.47.192.0/20
                  67.47.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:19:7c:c1:9a:3d:88:9f:1d:82:6f:16:7e:af:b6:9f:38:
         ea:cf:5a:59:b6:9b:af:db:6f:b5:ea:7a:3e:ea:78:d5:8b:8a:
         94:29:d1:78:58:df:6c:73:7f:a8:4d:7d:15:04:40:41:35:18:
         66:3b:84:63:b0:b7:03:09:a8:c0:1a:e9:43:08:83:81:b7:3f:
         f1:57:2d:b0:fb:92:17:bf:c7:7e:98:6c:a3:42:cd:3a:b4:fa:
         72:7e:3f:5c:5f:ca:45:49:d8:9b:de:e1:1d:e8:b0:3a:01:3d:
         3a:57:cd:dc:40:38:b8:5f:c8:83:c5:bc:c0:2b:3f:45:a2:43:
         46:46:16:a8:80:ea:95:2e:d2:21:8b:8b:fd:90:ea:8f:9f:26:
         b5:c1:9c:ec:25:4b:08:2b:f5:16:07:04:06:ba:3e:32:72:a0:
         8b:65:0b:7e:74:19:6b:eb:e3:35:6a:88:4b:2f:92:11:ea:60:
         27:32:48:4d:7c:ce:b7:ae:da:c6:05:13:e7:00:80:34:d7:c0:
         0b:4d:4d:c5:c9:39:77:25:13:75:56:a8:83:d2:d1:20:09:c4:
         ba:a7:06:1d:42:d9:cf:b8:79:cd:91:18:78:28:70:76:ca:bd:
         f1:3d:0b:ce:d2:af:64:d6:88:cf:d5:70:d4:7c:c8:e0:c6:12:
         0f:a9:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:20:34 2025 by rpki-client