Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/03b2c07d-0de6-3967-995f-dd2f80b5804d.roa
File:                     03b2c07d-0de6-3967-995f-dd2f80b5804d.roa (raw, json)
Hash identifier:          hYLBTjyEW7zhS+JYK5l8O2KLXyXBtwk+XMunH2q/rhI=
Subject key identifier:   66:39:F2:83:74:7E:02:06:59:77:10:76:10:2E:2A:E1:5D:B6:1C:90
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584AE8A203ED7A0BE10BC0FE49B0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/03b2c07d-0de6-3967-995f-dd2f80b5804d.roa
Signing time:             Tue 19 Aug 2025 13:18:09 +0000
ROA not before:           Tue 19 Aug 2025 13:18:09 +0000
ROA not after:            Mon 17 Nov 2025 14:18:09 +0000
asID:                     14353
IP address blocks:        65.38.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:a2:03:ed:7a:0b:e1:0b:c0:fe:49:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Aug 19 13:18:09 2025 GMT
            Not After : Nov 17 14:18:09 2025 GMT
        Subject: CN=e04fe8f9-3200-4643-85e6-57cc577f6b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:89:a6:d4:1c:a8:27:38:3d:97:d6:9a:05:
                    99:d5:db:f6:ac:82:74:3c:7a:fa:87:dc:89:8d:42:
                    fb:c0:ba:b2:25:ba:47:c3:a3:1b:0a:8b:26:df:11:
                    71:69:10:c4:f0:6f:d7:44:b0:59:0f:82:7a:a1:1f:
                    bc:41:a0:f9:13:4a:79:38:f5:d6:d4:d2:4b:22:a2:
                    d5:f8:a1:30:ae:1f:c7:24:69:17:13:0b:44:1b:ee:
                    82:37:f5:de:ff:83:e0:e6:9f:a2:43:fc:26:cf:0e:
                    be:ef:06:8d:d2:66:4b:d5:46:1c:fd:71:5f:a0:af:
                    40:c9:5b:2e:64:c0:12:32:e3:aa:33:75:ed:89:bd:
                    43:57:85:7d:d7:17:74:bb:a6:d1:93:1d:ad:fe:52:
                    85:83:e9:5f:de:66:71:db:8b:30:92:34:03:d3:98:
                    f7:bb:bb:c8:da:66:05:b8:51:b3:15:e6:db:1c:5d:
                    60:aa:13:15:7a:16:a9:8a:9e:2d:ed:3b:97:f1:96:
                    9e:b3:d4:22:69:4e:47:65:3c:b9:af:41:53:c7:d0:
                    a9:7d:df:f9:38:d8:01:b4:c9:b9:d5:de:db:22:e5:
                    9b:a6:a9:4f:e1:8d:60:aa:ab:97:6c:30:3f:42:ed:
                    c4:7a:e3:c8:06:33:d1:36:86:f5:13:48:73:29:05:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:F2:83:74:7E:02:06:59:77:10:76:10:2E:2A:E1:5D:B6:1C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/03b2c07d-0de6-3967-995f-dd2f80b5804d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:95:30:32:35:5d:6d:06:94:af:bb:08:06:2d:13:be:e9:97:
         86:94:7b:25:75:0f:6e:5a:1b:35:cf:27:4d:b0:8d:f1:d0:b0:
         a4:c0:aa:e7:bd:46:47:bb:f5:63:3d:26:03:5f:8b:54:4e:f7:
         2c:a0:d3:26:21:2b:ab:23:7d:f3:b5:f6:70:af:bf:9b:56:62:
         ce:a7:51:d4:05:84:21:71:17:80:d7:7f:1c:48:84:4d:8f:16:
         a7:66:b8:08:14:1c:a3:d0:01:80:f1:fa:65:32:0b:85:22:e7:
         6b:9f:12:06:98:99:9c:14:2b:fb:ad:25:87:08:75:9b:d2:0b:
         a2:f8:82:cd:b6:c7:67:aa:28:d2:41:af:ee:e7:fd:e2:fb:03:
         a3:61:05:58:7f:6c:d2:3c:94:34:7e:cc:ba:bf:05:2f:90:d3:
         57:da:cf:28:ab:f4:53:48:af:6c:a0:16:3b:df:58:29:58:d6:
         b7:af:d2:4d:99:ef:54:2b:b3:fb:d3:7b:c9:a6:e6:9c:23:bc:
         e2:f1:38:82:7c:16:7a:90:51:1b:66:4f:13:de:40:e2:90:c9:
         a3:74:a1:07:d9:7c:e8:1d:6f:c0:d2:ce:1b:1c:9a:90:4c:00:
         ee:de:d4:44:73:b2:4c:c3:43:5e:6a:ca:5e:2c:5e:05:e3:cc:
         b9:d8:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:15 2025 by rpki-client