Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b186fbf8-fafe-3427-bc2a-bc970ab8a9b6.roa
File:                     b186fbf8-fafe-3427-bc2a-bc970ab8a9b6.roa (raw, json)
Hash identifier:          dKZlU+z1tK3l9qK37QR3Mau8ZeCqM0N8cOu8+38Efrg=
Subject key identifier:   5A:19:CB:1C:38:C9:6B:C2:34:80:16:C5:BE:78:15:EA:EE:B0:A3:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC50C6D58C0550B57416D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b186fbf8-fafe-3427-bc2a-bc970ab8a9b6.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        67.188.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:0c:6d:58:c0:55:0b:57:41:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=20e2e2b8-d2c0-4a7f-a1e5-74cb3d1e2a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:60:6d:dc:c1:b2:3b:d8:e4:51:b5:0d:f1:
                    2b:b3:73:cb:eb:a4:a9:0c:4b:d8:ae:0c:0b:62:3e:
                    fe:fe:77:9b:ac:d5:41:b6:df:16:21:71:e0:dc:b6:
                    f4:e7:ec:67:b1:c9:9e:64:90:d8:3e:a0:af:e5:12:
                    6a:88:28:89:f6:96:eb:36:ec:49:a6:69:ea:33:06:
                    62:92:ee:39:40:92:7b:c4:68:d8:4b:31:c6:51:5e:
                    a7:b7:db:05:c7:fe:15:12:00:68:d7:68:e8:a5:e5:
                    06:dc:fd:4c:0c:0b:c5:21:f6:21:34:5a:90:ac:90:
                    16:f9:d3:d1:cd:0c:aa:a2:fb:02:00:b1:37:da:75:
                    b4:4c:33:0e:5e:e7:10:e9:f2:59:0b:08:55:d9:59:
                    12:9d:d1:51:d3:92:0e:51:53:e6:b8:d1:18:08:11:
                    32:f9:c7:a4:87:39:c5:e6:36:d2:48:a0:54:62:cb:
                    50:fc:78:36:1d:65:dd:2c:7e:ba:42:d6:a5:35:2b:
                    66:8e:36:9b:c7:f1:1d:cb:45:cf:54:54:23:fb:5a:
                    52:c2:02:2c:9d:00:27:21:58:61:58:5d:2a:21:4d:
                    c8:8c:8b:2e:7b:8f:00:9f:de:e5:af:eb:17:3a:b0:
                    5e:8f:7b:b2:df:f9:ff:42:bb:7c:ee:c2:38:39:e3:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:19:CB:1C:38:C9:6B:C2:34:80:16:C5:BE:78:15:EA:EE:B0:A3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b186fbf8-fafe-3427-bc2a-bc970ab8a9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:13:48:20:db:d7:9d:c2:62:2a:95:cd:c4:2a:0c:be:05:
         3d:22:f0:4c:8a:c4:5f:35:ba:4a:7f:64:3f:46:f8:27:49:c9:
         3f:38:5a:0c:3c:2c:50:5b:c4:62:37:bd:3e:67:e1:03:1d:08:
         62:89:e2:7b:8e:35:4f:30:e2:67:da:6d:ea:0f:9f:b7:7c:5d:
         c3:c3:f1:6e:33:cf:e8:6c:40:14:d4:d7:54:a9:2f:a0:fa:2a:
         29:94:fc:39:d2:8f:cd:b2:af:2a:48:e0:67:85:5f:9b:bc:fd:
         bd:69:d6:c8:d7:0c:3d:cc:f4:40:57:82:5c:34:36:3a:60:e5:
         4e:22:98:55:dc:75:84:0e:e2:30:b9:dc:bd:ae:fc:5c:52:81:
         c7:92:fa:4e:e9:22:0c:b9:7b:b5:26:74:c2:68:92:fe:7e:ad:
         0d:39:20:2b:3f:a2:bd:f3:16:f5:7c:04:98:e7:53:a8:c6:a1:
         fe:c9:3a:57:f8:82:c7:7f:06:2c:0d:74:87:2f:d6:f8:02:6f:
         ce:70:e4:0d:79:d3:f3:22:cc:73:af:e9:9d:e5:02:24:85:26:
         8e:da:73:b8:8d:b7:4f:31:09:f5:02:d6:47:e8:ec:e9:17:2c:
         e4:d0:e5:01:a3:00:2f:33:5b:d7:5e:01:12:73:20:e1:f0:cb:
         14:8a:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:55:51 2025 by rpki-client