Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dddf0140-dad3-3e7e-a207-eb66d9aa6402.roa
File:                     dddf0140-dad3-3e7e-a207-eb66d9aa6402.roa (raw, json)
Hash identifier:          U2VW+/+/0bKcbK/O9Dohhxw6I3hXWTIxyrJy4Hk9wag=
Subject key identifier:   F5:C7:9D:7E:A1:D0:53:D8:78:4C:CE:81:B1:F7:32:8E:03:05:E5:E2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A560046F9DAD60807AD3104E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dddf0140-dad3-3e7e-a207-eb66d9aa6402.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     212335
IP address blocks:        67.207.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:46:f9:da:d6:08:07:ad:31:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=afefbdfc-db81-4ac0-a70e-0df9f478e0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:0f:c4:8d:0e:1b:f5:2c:f0:ee:f6:3a:e6:
                    e8:94:a8:bb:02:37:c6:40:1d:66:c6:22:d7:4b:59:
                    33:3e:6a:13:d4:a9:76:fa:6d:16:cb:76:14:91:8e:
                    a4:92:61:6a:d1:50:53:49:64:94:5c:87:42:19:95:
                    5d:a5:3b:14:27:03:af:28:39:b8:75:33:cf:02:ab:
                    95:c7:38:c0:a0:3e:fd:97:c0:d7:fc:49:6c:7d:8e:
                    69:28:a1:3a:34:14:17:f4:bd:f5:17:b2:be:f8:a4:
                    fc:46:20:da:a6:0a:8b:02:87:90:58:bf:0a:86:22:
                    45:4c:23:d5:1e:81:0b:3e:3e:ca:10:ec:b7:40:4e:
                    ae:1b:84:0f:87:fe:8f:5a:0d:89:5a:9c:45:79:45:
                    be:84:d1:6a:40:05:87:28:97:ec:01:aa:d7:8e:ac:
                    20:51:67:4a:41:97:a9:3d:e3:8d:75:57:28:9b:f4:
                    8c:78:72:bc:9e:4a:5e:9a:a3:45:6c:76:a9:bd:de:
                    10:4a:15:de:eb:d7:a0:12:5d:26:37:cc:92:2d:c8:
                    95:50:15:28:4d:ee:1f:ac:a5:be:b3:8d:92:01:22:
                    c6:8c:52:c1:bb:c8:d4:ca:0c:02:89:a4:d9:41:fc:
                    9e:7e:e2:50:55:ce:96:d9:d6:d4:b6:59:3a:6b:25:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:9D:7E:A1:D0:53:D8:78:4C:CE:81:B1:F7:32:8E:03:05:E5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dddf0140-dad3-3e7e-a207-eb66d9aa6402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:03:a8:96:bf:6b:f4:f3:f1:bc:f8:53:b5:77:31:b7:0b:
         eb:8d:e4:14:a0:31:d4:69:77:23:51:7c:45:e4:28:70:55:35:
         ad:e0:b1:b1:29:ac:f1:c3:b4:49:cc:ac:d3:53:48:bc:85:2b:
         95:db:ab:4a:be:aa:7e:a9:1a:49:d0:23:9d:9b:d6:c5:09:87:
         80:d3:12:b8:e6:ab:05:fc:e5:1f:9c:5f:0b:a7:64:be:9d:55:
         48:60:75:1b:aa:db:46:01:04:1b:de:c4:d0:4c:9d:3e:0e:48:
         e3:f2:c9:94:72:8d:7f:51:99:e2:88:9c:4c:b7:84:45:4c:0e:
         4a:5d:d7:7e:e8:c4:d8:e4:7a:dd:98:4a:f3:9c:58:8c:52:1e:
         60:3c:13:af:97:0b:14:bf:21:73:8c:cf:53:f6:0f:a7:5c:85:
         c3:29:53:ad:3a:83:c0:ed:6b:84:b0:73:b7:2b:a3:03:fc:a5:
         d7:4c:92:a4:c1:72:62:d2:8c:50:e1:07:6d:4c:a5:0a:d4:92:
         32:18:78:1e:b0:82:15:5e:a3:b9:d1:4f:b1:a4:3d:2c:cb:7b:
         75:0c:1a:c4:a3:d7:b5:55:6f:74:d6:89:31:ca:36:e3:11:3c:
         12:5c:f1:5b:09:18:f1:aa:2a:44:bb:23:2f:39:83:92:90:9b:
         dd:f4:cc:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAEb52tYIB60xBOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk
YWZlZmJkZmMtZGI4MS00YWMwLWE3MGUtMGRmOWY0NzhlMGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JEPxI0OG/Us8O72OubolKi7AjfGQB1mxiLX
S1kzPmoT1Kl2+m0Wy3YUkY6kkmFq0VBTSWSUXIdCGZVdpTsUJwOvKDm4dTPPAquV
xzjAoD79l8DX/ElsfY5pKKE6NBQX9L31F7K++KT8RiDapgqLAoeQWL8KhiJFTCPV
HoELPj7KEOy3QE6uG4QPh/6PWg2JWpxFeUW+hNFqQAWHKJfsAarXjqwgUWdKQZep
PeONdVcom/SMeHK8nkpemqNFbHapvd4QShXe69egEl0mN8ySLciVUBUoTe4frKW+
s42SASLGjFLBu8jUygwCiaTZQfyefuJQVc6W2dbUtlk6ayXGYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXHnX6h0FPYeEzOgbH3Mo4DBeXiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGRkZjAxNDAtZGFkMy0z
ZTdlLWEyMDctZWI2NmQ5YWE2NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8+8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGqA6iWv2v08/G8+FO1dzG3C+uN5BSgMdRpdyNRfEXkKHBVNa3gsbEp
rPHDtEnMrNNTSLyFK5Xbq0q+qn6pGknQI52b1sUJh4DTErjmqwX85R+cXwunZL6d
VUhgdRuq20YBBBvexNBMnT4OSOPyyZRyjX9RmeKInEy3hEVMDkpd137oxNjket2Y
SvOcWIxSHmA8E6+XCxS/IXOMz1P2D6dchcMpU606g8Dta4Swc7crowP8pddMkqTB
cmLSjFDhB21MpQrUkjIYeB6wghVeo7nRT7GkPSzLe3UMGsSj17VVb3TWiTHKNuMR
PBJc8VsJGPGqKkS7Iy85g5KQm930zKs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:10 2025 by rpki-client