Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa
File:                     322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa (raw, json)
Hash identifier:          rt69gMwaJQZEcVlPkibERkCfR6QMjzaUHKXF6J5eh30=
Subject key identifier:   34:95:1D:DA:33:65:81:EB:9F:DF:55:8F:8C:B8:5F:73:E5:87:36:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCC9E32A8FBA3BFAB9B900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        67.54.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c9:e3:2a:8f:ba:3b:fa:b9:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2ccd0257-ea0e-4d06-9fb8-a42dad09bca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:24:6b:a4:37:97:3e:b7:84:e8:53:b5:b0:
                    ab:f1:ff:81:3c:c0:56:11:15:55:c5:cf:fd:5a:ea:
                    b2:e3:8e:63:52:30:c8:e9:06:35:cd:0f:42:81:fe:
                    2e:ea:d5:86:53:c7:92:c0:4a:de:04:92:34:94:e2:
                    9d:99:cf:52:30:78:78:0e:84:cd:a1:bf:9c:5d:93:
                    2c:97:cb:d8:13:1b:9e:b2:c9:17:e4:de:10:bd:6c:
                    1a:36:64:d2:ef:18:82:c5:7f:ac:78:7e:2a:05:66:
                    69:81:95:43:09:e0:7e:a2:cb:c1:46:43:85:3c:97:
                    bc:18:d0:1b:4c:db:bb:de:69:7e:d8:67:5f:01:2b:
                    55:ff:63:f1:c2:68:c6:3c:f3:f9:70:1e:29:b1:5d:
                    0d:96:ca:74:1b:70:08:3b:c4:3b:bb:20:4d:80:12:
                    ea:a4:fd:c4:85:67:50:ac:96:87:2c:0c:8e:c6:84:
                    a7:b1:8d:23:44:35:b9:2c:4e:58:fa:f7:8f:e4:23:
                    48:63:53:b1:d5:18:aa:d6:4b:32:c7:b3:66:51:b9:
                    fd:ed:f3:4a:a5:63:50:5c:48:6d:15:c5:13:98:af:
                    66:f0:23:70:4c:96:29:16:d0:7e:33:e0:22:4e:2c:
                    66:ca:c4:0d:03:93:57:1b:7b:37:de:30:6e:f4:2a:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:95:1D:DA:33:65:81:EB:9F:DF:55:8F:8C:B8:5F:73:E5:87:36:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:8b:9e:60:63:84:f6:7c:4d:5b:d9:87:a8:44:7a:8d:3e:a8:
         2b:3b:f2:39:c5:35:0a:0f:a8:6b:cb:40:e4:21:56:77:b3:21:
         64:e4:63:71:5b:47:fe:cb:23:ae:af:e9:37:d0:68:6b:56:d2:
         e3:c2:b0:9f:44:a4:0b:b8:8f:3d:5d:94:fb:4b:c3:97:b7:14:
         a8:b6:e7:70:d3:6a:1f:10:43:64:d9:bb:ec:f4:24:34:6e:df:
         c8:fa:7e:a1:30:31:dc:b0:21:48:db:92:75:2f:7c:6f:61:3d:
         1b:c5:cc:39:fe:19:22:cd:57:d5:07:3e:77:35:d9:90:22:26:
         b8:a3:32:cc:92:81:7c:b2:ab:8b:1a:86:95:7f:e5:2e:ac:fb:
         35:d1:bb:f4:80:c8:3a:3f:8f:bf:68:46:66:1a:2f:de:9e:6b:
         5c:8f:14:e0:8c:ec:fa:2d:54:6b:95:46:9e:49:42:fd:86:ea:
         31:aa:a5:c7:f4:64:43:64:bf:e5:d3:f5:af:bf:39:42:99:79:
         8c:51:2e:29:38:18:62:d5:1f:a0:8c:e9:72:82:a3:89:4c:b0:
         cf:02:f4:6e:eb:fc:80:15:ce:32:26:d6:df:9d:df:6f:60:6a:
         a9:5d:19:c1:47:c1:ea:9e:71:cb:a5:b2:41:ee:4e:67:72:db:
         7e:1d:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:53 2025 by rpki-client