Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7ac23532-5cf9-3ea8-bf54-89dde66ba9f8.roa
File:                     7ac23532-5cf9-3ea8-bf54-89dde66ba9f8.roa (raw, json)
Hash identifier:          6H/SFuzwZUEawplB9iWu46uvTTvX+JsVbWb3WgCtKyw=
Subject key identifier:   48:C5:E7:4E:64:F2:14:40:F8:41:74:A1:C3:BB:9C:07:15:B6:3D:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A3A158E4234099B6BB921FCD0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7ac23532-5cf9-3ea8-bf54-89dde66ba9f8.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        67.227.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8e:42:34:09:9b:6b:b9:21:fc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=33af44c6-310d-4578-86f3-5a44df799fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:5c:5f:22:93:70:7a:8a:42:a3:9e:00:66:
                    ef:e8:35:77:89:9e:19:eb:45:7d:fe:2d:41:d8:8f:
                    1d:34:b6:9f:8b:d4:08:8d:c3:9f:e2:d7:18:55:59:
                    22:d9:e3:5c:8f:aa:cb:44:6e:ba:dd:70:64:b0:e9:
                    c8:d2:85:60:37:97:9c:f8:86:2b:b2:f7:5a:c9:47:
                    30:43:53:67:b2:d4:62:05:e2:3f:94:71:f3:f2:e7:
                    50:a0:a8:22:d1:c1:3b:c2:f2:bc:d0:8c:b7:ae:38:
                    f5:cb:d9:14:c1:73:7f:e9:ce:25:e1:59:53:f1:5f:
                    65:6a:24:f1:d3:13:23:5f:6c:ca:c7:19:38:44:9e:
                    7a:33:8c:8d:66:dd:5c:0e:5f:44:af:3c:0b:23:db:
                    d7:23:3e:17:69:b8:7e:6a:3d:49:48:78:e2:ac:8d:
                    51:66:3b:0d:72:b1:f7:0a:d2:4b:e3:e0:d1:2e:81:
                    80:f4:ba:fe:e3:0b:12:01:f6:d4:b9:4d:df:e6:f0:
                    9c:8c:18:e9:80:74:92:d8:ad:5d:60:ed:52:51:6b:
                    98:80:e8:d4:ec:d9:b6:de:d9:30:74:fe:a1:5d:8f:
                    e8:1d:fc:c9:c4:05:87:3b:a6:af:b1:40:76:e4:42:
                    a6:78:cb:5f:c2:af:21:60:37:1d:a6:eb:1b:ac:4d:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C5:E7:4E:64:F2:14:40:F8:41:74:A1:C3:BB:9C:07:15:B6:3D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7ac23532-5cf9-3ea8-bf54-89dde66ba9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:09:54:38:34:b6:d3:a7:5c:0b:03:90:bf:86:22:3f:40:
         37:3c:b4:6e:36:9f:df:32:83:80:26:1c:c6:25:f5:c4:9f:c2:
         eb:32:cd:2d:51:32:50:ca:7d:59:f1:40:cc:ee:f7:06:48:9a:
         04:5d:f2:5a:f2:0a:ac:67:c9:ad:5a:ce:7d:04:0a:b1:a7:c1:
         1c:cc:86:8f:de:19:a8:45:e8:d7:d8:cf:0d:1a:15:f8:fd:4f:
         67:2c:84:b9:d7:29:5b:f4:5b:80:23:77:45:79:31:33:46:82:
         8b:77:75:f9:39:e0:75:7a:a0:41:28:f3:0b:21:64:86:8e:8c:
         fc:08:20:79:0c:eb:da:00:e9:b9:aa:a4:c8:8c:7d:d3:12:19:
         51:5a:9e:97:15:d3:24:df:20:22:2e:b8:4c:ed:6a:e6:79:51:
         1f:3d:66:e7:66:fc:7b:fa:81:20:20:cd:fb:31:db:6c:38:ec:
         c6:0d:8f:d5:95:c0:65:c5:81:5b:91:55:28:9e:e2:61:91:74:
         90:be:fd:df:c6:f0:1e:33:af:29:51:4b:09:40:15:6d:29:77:
         28:8d:6a:55:fc:4b:1f:ed:20:eb:22:8c:97:4e:b8:a9:bb:66:
         ce:68:ca:55:27:7f:6c:02:ba:db:ad:b8:b3:d7:98:a8:71:b7:
         40:80:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:33:32 2025 by rpki-client