Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa
File:                     9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa (raw, json)
Hash identifier:          A8avgYSCQklEJehBvY2iDPJerxKJ6ymQKPZgcZHZcoU=
Subject key identifier:   8E:36:0E:16:1D:66:E5:9B:2C:E4:AC:AA:19:79:E5:69:62:1C:90:F0
Certificate issuer:       /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615
Certificate serial:       010D0C9F4328584AC876311775F6F9BF48DB1700
Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     397127
IP address blocks:        67.218.1.0/24 maxlen: 24
                          2620:13d:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:31:17:75:f6:f9:bf:48:db:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=75ad9df7-3909-43f0-b076-00478ee1ee25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:2e:bf:0f:14:9a:cd:0e:1a:ae:e3:e3:39:
                    ce:03:55:8e:23:a5:a2:f4:a6:4e:93:1f:3a:cf:c0:
                    06:ed:79:a0:4e:39:78:b2:a9:4c:33:a9:93:2a:b2:
                    b4:e6:f5:a2:12:22:52:52:0f:83:de:a6:c4:18:25:
                    47:d7:c6:f7:66:8f:99:bf:8f:33:38:34:2b:25:01:
                    ab:67:bd:08:a4:da:60:e2:86:4a:f1:44:0a:8a:7a:
                    41:f8:f3:95:fd:bb:ac:db:7b:b5:01:b7:c9:89:0a:
                    8d:7f:11:1d:36:e5:ba:9d:2f:68:e0:2c:c5:79:83:
                    05:13:2c:e6:2a:5d:05:22:c2:de:34:8c:3c:72:06:
                    b0:aa:43:bd:80:ff:c8:07:a9:fe:6b:64:fd:e1:09:
                    3d:b0:c0:4c:43:65:56:16:d5:c4:72:81:5c:3c:44:
                    7c:d0:3f:d8:5c:6e:52:1e:5d:57:96:7f:b2:7a:28:
                    97:74:e9:7c:5d:14:d7:05:35:6c:11:e3:a6:31:21:
                    72:99:57:7a:29:f4:6d:6e:af:c1:1b:c2:21:3d:0f:
                    ad:82:96:42:d0:04:a3:15:3b:57:aa:64:20:cb:a8:
                    64:50:74:fa:3f:da:55:d8:a7:d0:d1:d1:c1:4c:0e:
                    f0:d6:29:71:26:06:f4:51:5a:06:cf:49:49:25:5f:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:36:0E:16:1D:66:E5:9B:2C:E4:AC:AA:19:79:E5:69:62:1C:90:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.1.0/24
                IPv6:
                  2620:13d:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:77:2c:d6:52:d0:2c:02:8e:76:07:80:ae:62:e0:95:80:46:
         98:c9:64:9c:73:87:b7:77:ad:2c:1f:77:c6:45:87:39:67:3b:
         0f:cb:d5:80:4b:45:4a:8b:11:9d:6f:8a:a4:2c:41:5d:06:b5:
         ee:57:73:c7:e0:40:a0:a2:20:cc:a5:fb:52:3b:18:25:ff:a1:
         66:8e:08:76:b0:41:f0:e3:8c:77:d3:7e:01:55:01:6e:b3:5b:
         bf:cd:84:fb:db:9b:00:b0:5b:9a:8f:1c:5a:d7:ac:cc:ee:17:
         4a:0f:63:29:65:15:07:2e:6f:0c:4d:c6:18:05:b2:b4:92:48:
         6e:39:35:28:12:90:2f:66:4e:36:3b:ab:03:42:20:e9:5c:2e:
         9e:7f:84:34:f2:80:34:ca:0d:53:63:9b:80:7c:83:61:41:13:
         08:cb:95:2d:f3:e9:b5:88:c1:34:fe:cc:46:db:4a:fb:93:d6:
         76:60:e5:f5:24:dc:f5:47:55:4e:2b:66:dd:84:b5:16:95:f8:
         49:6f:d7:75:04:62:6d:c1:c8:8f:76:0a:a1:12:61:70:fa:6d:
         14:b8:33:bf:5a:ec:92:df:12:07:ce:8a:b3:bd:8b:d2:b0:d8:
         85:68:7e:1b:88:81:48:23:f7:0c:59:47:25:b1:b3:23:03:bc:
         eb:0e:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:28:52 2025 by rpki-client