Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa
File:                     924d1aed-b12e-3c24-a9a0-b65a8555a333.roa (raw, json)
Hash identifier:          vdBIO1uZmHoZ3DEqm4lo10kcY0fUgFpg9b7lToaX2wk=
Subject key identifier:   14:B8:1A:3A:3E:E9:A2:7C:B9:37:23:A6:B4:2B:07:E5:72:CE:06:41
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B3987044D0355EA68C5066F00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     32592
IP address blocks:        67.217.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:04:4d:03:55:ea:68:c5:06:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=bb3056ac-ee40-4d40-b4d4-743a4206167f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:1d:da:fd:85:b6:51:13:15:56:b2:a2:b0:
                    74:da:a3:f4:ed:8d:7a:9e:aa:b6:2e:b3:94:a8:78:
                    5f:84:a6:2f:7f:e7:83:98:da:04:59:c5:8b:c2:81:
                    93:43:e7:2f:8c:b8:2d:00:7a:50:4b:e5:f0:17:41:
                    77:51:04:ad:e7:81:e5:23:fb:53:df:89:66:b7:47:
                    e3:cc:ad:85:c6:76:02:12:a0:bd:b9:49:a6:f1:c6:
                    44:ab:8e:7e:18:85:ef:8c:31:47:5b:c6:02:75:a2:
                    93:3d:ca:e5:df:5d:23:7a:13:cb:9e:4e:a6:99:e1:
                    cd:6e:98:b6:1c:02:11:2f:14:9d:96:f2:24:58:52:
                    49:53:0d:48:08:50:a4:81:a1:6b:08:57:91:27:63:
                    0f:c5:24:40:00:f3:3c:0d:d7:d2:2c:3b:b9:29:ca:
                    6e:09:4a:38:57:2c:12:6f:f8:9e:fa:c3:d5:05:d4:
                    b3:6e:b5:fa:05:79:8a:98:db:db:77:da:8e:36:b5:
                    a8:38:75:02:dd:a1:d7:82:2e:8f:6c:e3:84:04:be:
                    0b:50:25:79:b9:35:1f:f2:43:86:5a:bc:24:ec:b6:
                    3d:9d:98:0f:2b:fb:23:08:16:f6:5c:15:6b:15:ac:
                    0d:4c:ed:36:e2:52:a7:1f:4d:57:68:14:59:22:21:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B8:1A:3A:3E:E9:A2:7C:B9:37:23:A6:B4:2B:07:E5:72:CE:06:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/924d1aed-b12e-3c24-a9a0-b65a8555a333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:e1:90:4c:d9:11:74:ba:77:8b:a1:1d:e7:9b:8f:8d:68:
         c1:86:e7:ff:eb:75:11:cf:51:7b:32:4e:08:cc:2a:41:2c:a0:
         e6:50:3c:e1:46:c3:91:c8:b9:4f:f1:c4:58:53:5f:0e:75:f0:
         97:a1:c0:b5:1b:92:aa:89:d7:84:17:98:b4:2c:a0:8d:1a:f5:
         ab:d0:57:ce:a8:a8:69:fc:f7:a2:48:9d:68:c8:18:bd:f6:82:
         57:a0:01:d9:95:26:28:a0:79:e2:25:29:55:dd:82:90:51:fd:
         5c:00:43:86:6b:28:70:08:58:fb:cc:c8:60:da:3a:6d:a5:f9:
         17:53:ba:ee:15:aa:b0:73:40:b5:a1:ae:de:61:b6:04:f6:31:
         0c:90:df:fd:d8:0c:ff:0f:87:26:82:5c:76:63:d3:b5:a2:c7:
         58:a8:0c:31:b1:be:7b:0c:5c:4a:4b:e6:b0:9e:46:ea:b3:43:
         1f:58:8b:48:9b:9c:4a:d9:f0:47:8b:e0:4b:f2:94:c8:e3:ef:
         3d:d3:53:cf:a9:b6:c6:51:70:4f:c5:b0:2e:5d:b3:eb:61:87:
         8c:93:fd:fe:bb:67:39:27:21:3e:ea:69:17:e9:55:65:40:98:
         e3:cb:e6:da:cd:fa:bc:e2:82:25:73:ab:31:88:c0:2a:5b:8b:
         26:2f:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:22:53 2025 by rpki-client