Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8accb1-2bb3-398b-a324-69646a4aa85b.roa
File:                     db8accb1-2bb3-398b-a324-69646a4aa85b.roa (raw, json)
Hash identifier:          bn3GDfYF3b0kjOwvgnLt3xmw9UKnrtubX6uPc8d0f14=
Subject key identifier:   B8:FD:AB:97:A1:64:A8:29:E0:1A:51:82:BF:85:90:00:B4:86:D6:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBB60BA0B1741B61A94580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8accb1-2bb3-398b-a324-69646a4aa85b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        67.188.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:b6:0b:a0:b1:74:1b:61:a9:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a16446d4-6b59-46b9-9ebb-9187f563d075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:7a:3c:e3:c3:bb:a2:ab:5a:20:28:cf:a9:
                    49:f7:75:ea:84:f5:b0:61:24:7b:01:32:fa:0f:5a:
                    03:f6:5b:96:9e:24:a4:8f:13:ed:6f:34:58:33:bd:
                    23:c3:34:e7:bd:3b:b5:3c:32:6b:18:c8:9a:14:1a:
                    9e:bf:69:7e:24:e9:0c:e3:ea:5a:97:1a:2c:39:af:
                    ad:e7:3b:e8:3f:42:e3:1a:9a:53:ae:0b:4d:d9:12:
                    a1:1e:af:bb:aa:54:ef:5d:f0:e7:f8:13:9f:1b:a4:
                    c5:c7:00:31:72:77:2a:66:dd:3b:9f:c6:05:d5:32:
                    7f:5a:30:2a:66:04:b4:49:76:af:d2:ed:55:ff:4c:
                    b0:cb:88:c6:57:44:75:e3:ca:1d:84:d7:1a:0a:57:
                    60:d1:8a:a8:7a:18:35:b0:d4:c8:d8:d6:1c:e9:34:
                    53:fd:cb:05:e3:26:07:ef:21:97:f0:36:6e:89:c3:
                    89:1c:c7:98:89:09:49:b1:e6:e1:66:d3:f6:14:fd:
                    6c:f8:60:8b:4f:85:61:cc:69:82:38:2a:7a:3f:4f:
                    fc:36:f9:9b:51:0c:5b:10:7c:31:de:76:59:35:f1:
                    d7:90:c7:bb:51:09:d2:b9:7d:91:04:85:44:f8:c3:
                    5d:60:09:b9:b5:82:12:84:1e:65:f4:10:79:43:0e:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:AB:97:A1:64:A8:29:E0:1A:51:82:BF:85:90:00:B4:86:D6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8accb1-2bb3-398b-a324-69646a4aa85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:e9:80:24:f2:43:28:c7:48:a3:14:a3:af:f3:91:ff:ab:
         89:46:a3:a0:b8:07:22:f3:0e:7a:3f:31:a7:bb:e6:0e:ef:29:
         ce:87:5f:76:b5:34:96:de:54:f3:b1:56:5d:db:36:0e:bf:ed:
         83:38:37:ed:85:09:21:18:d2:c2:7b:de:5d:79:60:52:b5:5f:
         94:33:5a:d3:46:45:52:46:33:7b:6c:33:a2:83:43:38:33:df:
         b2:67:f1:34:bc:24:9c:3d:37:73:89:48:b6:38:12:47:fa:61:
         0c:74:37:12:2f:f8:7c:5b:e9:e6:09:2a:56:4a:49:08:d8:9e:
         cd:4a:d4:43:3e:d7:56:58:5b:3c:ae:9b:0d:50:38:83:17:6b:
         f8:be:8b:2d:ab:e3:77:6d:a2:86:a8:ce:b2:f1:01:16:72:36:
         0f:5e:8b:8a:3a:3c:d7:9c:de:30:ea:bc:b3:3e:0f:fa:99:e0:
         4f:f2:4b:6c:5d:41:4d:15:2e:5c:80:fc:0e:2b:5c:22:00:cf:
         e8:60:39:66:b2:55:84:bf:dd:6f:2c:3e:10:16:d1:a8:7b:e3:
         94:99:57:c1:ee:ad:1f:8e:75:b7:30:5c:df:4f:d5:ba:c6:86:
         a4:d8:d1:05:97:af:80:7b:94:6b:c9:fb:67:f0:de:7f:df:c7:
         14:67:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:04:52 2025 by rpki-client