Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa
File:                     f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa (raw, json)
Hash identifier:          8DUCAJZ0NvLveRhbtVk51UL5cKcd7ytRSkk/e8R4AsE=
Subject key identifier:   61:36:59:91:AB:2A:ED:A7:93:29:48:E6:E0:46:CF:52:C5:4A:EF:CB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A52A0782077C4806D2954E700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa
Signing time:             Thu 26 Jun 2025 20:00:22 +0000
ROA not before:           Thu 26 Jun 2025 20:00:22 +0000
ROA not after:            Wed 24 Sep 2025 20:00:22 +0000
asID:                     7029
IP address blocks:        67.140.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:a0:78:20:77:c4:80:6d:29:54:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 26 20:00:22 2025 GMT
            Not After : Sep 24 20:00:22 2025 GMT
        Subject: CN=9e537ff9-717a-4684-aaa9-d5d253e2bd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:77:28:3c:a7:64:82:ed:59:83:95:9a:9d:
                    9e:84:aa:74:e3:df:e1:21:f4:db:1e:35:e3:fc:29:
                    c0:4c:aa:c0:bd:aa:d0:b6:9e:da:4e:bb:33:b0:51:
                    1e:4c:05:8b:be:6e:6c:a1:af:2e:0b:51:00:98:73:
                    16:a1:ca:d8:d3:ef:4c:32:13:65:ca:a8:18:04:07:
                    6a:ed:e2:56:ed:0d:87:ad:ac:26:f4:c6:cc:cd:d1:
                    f3:02:10:01:31:14:41:1b:6a:8d:3e:0e:26:78:ae:
                    ea:d6:26:1d:38:93:66:a7:6b:23:7c:b4:3f:85:cd:
                    13:35:55:48:16:07:6c:26:e5:64:0b:80:4c:10:f9:
                    e1:60:f9:c8:2f:18:4e:75:aa:54:2b:a5:88:ee:63:
                    08:a0:4f:53:90:5b:00:00:36:07:43:1d:d5:b0:b6:
                    cb:74:f0:ab:1b:96:27:5a:30:7d:e8:60:1e:7d:7f:
                    0b:90:04:09:2b:3d:38:9b:15:ac:d9:1e:0e:57:55:
                    67:d5:0d:4b:ba:11:52:ff:fd:0a:a1:49:82:c4:7f:
                    b2:98:d8:f4:bf:55:7b:f1:44:01:47:a3:0b:75:46:
                    9a:59:0a:8e:ae:07:3e:91:e8:3b:5e:9d:fb:43:dd:
                    68:7c:8b:29:2f:c6:9b:ec:59:77:2c:b4:78:ee:36:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:36:59:91:AB:2A:ED:A7:93:29:48:E6:E0:46:CF:52:C5:4A:EF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:28:60:e4:aa:05:53:bb:d7:f1:b0:2b:0a:73:0a:87:7f:8c:
         83:9a:8a:0d:e3:0b:be:8a:a2:eb:ad:aa:26:cb:7f:a9:3c:5f:
         4a:22:76:8d:84:e5:b2:de:7d:5c:e3:d3:b1:fa:fb:e0:c3:7e:
         48:76:4c:f6:24:8d:e3:4b:87:a6:e6:98:f6:86:34:8b:23:a1:
         e9:c2:e0:c3:ab:04:4b:88:bd:b1:00:1c:36:d4:89:a3:8e:f7:
         6d:37:d8:8c:04:15:63:d9:fc:16:9b:13:76:51:83:c6:53:51:
         d6:49:d9:a0:ec:0f:7b:f4:07:53:28:56:24:98:ef:29:ac:0b:
         76:6b:e4:c7:18:f7:f2:d6:8b:40:71:08:d6:53:0f:a0:b8:78:
         3b:35:ba:2b:b6:ec:9a:b2:88:65:c1:17:e7:e5:ea:27:8e:eb:
         bd:42:5f:bb:22:23:21:55:2d:45:bb:43:db:58:07:15:94:85:
         ce:b0:95:0f:1b:59:97:76:f0:55:86:7a:8d:6e:0b:c9:cb:92:
         7c:58:0e:34:e5:f5:a1:cc:66:f9:38:0b:dd:e5:2f:e4:cd:16:
         7c:83:9e:0d:7e:d1:bf:52:de:39:fb:11:d1:9d:06:87:f8:09:
         67:54:83:92:9a:93:b9:04:cc:66:33:8c:40:bc:9e:f4:fc:5a:
         48:67:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:22 2025 by rpki-client