Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa
File:                     67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa (raw, json)
Hash identifier:          uVE3ODQNGlndLO6hDmjV3q6hXPfW80QP8JNcb/ryaOE=
Subject key identifier:   ED:78:31:89:08:49:61:97:90:72:56:75:EE:DD:BF:37:4D:97:A6:1A
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F4328584A5765CA52564FC1354BA34920
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     19381
IP address blocks:        67.212.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:ca:52:56:4f:c1:35:4b:a3:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=77638b7f-52c6-4076-b202-51e7adcf42f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:bb:3c:ac:7f:10:90:18:ce:4e:36:35:21:
                    18:0b:84:cd:3b:96:5e:2e:d4:54:e8:53:f9:ff:f9:
                    01:df:17:aa:44:81:9e:11:2e:5f:49:2d:6a:89:89:
                    a5:59:a0:f7:cc:8e:9a:d7:e8:9e:19:d4:f9:59:bb:
                    ee:e4:7f:a2:94:cc:87:a5:0d:ae:90:8c:49:8e:43:
                    6a:f0:b6:27:34:de:f6:f2:d8:b3:0e:d7:29:16:37:
                    66:53:e1:9a:7f:9c:64:af:44:06:ce:76:c7:54:62:
                    2d:f9:18:b0:fd:8a:0e:8d:c0:b8:32:2e:8b:e0:5b:
                    8f:81:da:5b:6a:2c:10:cd:90:e1:81:4d:d2:9d:4d:
                    fd:4d:7e:79:e8:2c:cb:cc:d2:84:43:3a:a8:85:58:
                    1b:50:f0:1c:c3:df:f2:1a:4e:8a:77:e1:12:5a:a9:
                    49:5b:56:64:1f:0d:37:f3:3d:1a:32:20:c6:a0:e9:
                    1c:c4:b4:22:17:3f:21:e2:f2:f4:e2:0a:60:93:5d:
                    2d:2a:2d:5b:61:43:23:9e:ca:92:80:a4:4f:25:27:
                    dc:ed:c1:b1:90:a8:98:18:7e:4c:8f:70:95:51:ee:
                    6e:59:42:1b:d1:fa:4e:db:66:1d:39:44:a1:ef:9a:
                    68:56:98:9e:ee:a4:ad:0c:18:67:c1:14:2b:96:77:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:78:31:89:08:49:61:97:90:72:56:75:EE:DD:BF:37:4D:97:A6:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:f4:62:00:ca:72:ab:1d:3c:1c:3a:6e:ea:1b:6b:bc:79:
         e4:46:c0:67:3c:89:42:35:9c:9a:c1:12:58:40:66:71:b9:03:
         10:39:56:52:14:94:06:80:99:0f:db:af:32:f3:f0:de:35:74:
         43:28:67:9f:70:ac:e0:6c:e0:e4:0e:26:21:76:d7:33:fe:27:
         41:48:e4:9e:27:d8:65:4a:8d:93:f6:5a:e7:a2:de:37:5e:5f:
         9c:9c:b7:0c:1b:47:6e:66:0a:7b:e4:f0:95:2e:8d:b1:51:8d:
         e4:13:ad:c6:1f:40:28:7f:6b:55:1a:15:6e:a6:e2:41:d7:ca:
         26:1d:83:7c:95:28:fc:7b:05:2f:38:b8:43:38:c5:5a:9a:86:
         cb:d4:b9:46:6e:8b:e5:32:24:3d:36:3e:40:f5:25:c8:27:cb:
         62:2e:ec:c4:5f:16:7b:19:fe:f3:b4:ef:a0:bf:a2:f0:b8:7b:
         b1:11:6d:a3:f6:5d:02:e9:f1:9e:ec:f1:61:d1:ae:c5:80:58:
         0f:09:8b:91:da:fe:e9:7f:17:54:5c:73:f7:78:7c:84:3b:a2:
         98:b3:37:f5:91:de:b5:03:d8:20:01:35:27:75:43:65:b6:5d:
         e0:d5:d3:ca:7b:3f:d2:42:a7:8b:9a:db:8c:a7:3f:4e:a5:15:
         24:b9:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:55:06 2025 by rpki-client