Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/68bf5e52-08ad-328a-a598-e2824a5c775f.roa
File:                     68bf5e52-08ad-328a-a598-e2824a5c775f.roa (raw, json)
Hash identifier:          jUNr2/SEnin777HPhZTgYAfOaUErMOplYSS7fB2P/uc=
Subject key identifier:   5D:F6:84:C0:00:40:AB:70:17:DD:85:AB:49:82:D3:F8:91:26:6C:E1
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584B328C387D9E720853ACF10D00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/68bf5e52-08ad-328a-a598-e2824a5c775f.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     6621
IP address blocks:        67.46.0.0/20 maxlen: 20
                          67.46.48.0/20 maxlen: 20
                          67.46.112.0/20 maxlen: 20
                          67.46.144.0/20 maxlen: 20
                          67.46.160.0/20 maxlen: 20
                          67.46.192.0/19 maxlen: 19
                          67.46.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:38:7d:9e:72:08:53:ac:f1:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=86b44b9e-44cd-4e90-85c2-8ec1c169e396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:4e:b9:9f:92:e6:f4:fb:f6:ea:5d:ed:ee:
                    5d:7c:41:fd:18:ba:fd:a7:8e:a1:7a:25:23:fe:e5:
                    9d:a2:c7:3c:ec:d2:98:d1:49:89:a2:64:65:54:d6:
                    b6:e6:ef:87:7d:02:6b:21:ce:43:f0:a8:46:6b:05:
                    99:20:9d:9c:53:1e:e5:91:62:a1:60:9a:14:8e:a5:
                    f7:b4:91:da:d6:ea:fe:13:c2:7c:b6:61:0a:b8:1f:
                    69:fb:4a:c8:83:6c:7f:38:6b:c1:38:ed:f7:68:86:
                    e6:e0:8d:75:95:22:f2:ad:23:a2:18:e3:2d:d1:98:
                    cc:e5:f7:19:f8:4f:42:7f:b4:95:84:f2:42:2f:e8:
                    fe:8b:e8:47:55:83:cb:be:b3:39:a2:0b:13:3b:64:
                    35:a5:51:f0:ce:03:3f:58:00:ba:3e:f6:e8:22:7c:
                    c3:2f:60:e6:0f:d2:db:64:4f:c5:52:0b:b9:e7:0c:
                    48:80:04:d2:5a:9b:ff:a9:7c:0a:52:b5:ba:3a:d6:
                    23:88:21:39:fb:46:f4:55:2e:b3:ef:fc:96:c0:90:
                    fa:1d:34:04:36:8e:e0:bc:44:d5:31:82:e4:8a:e0:
                    e3:28:e5:fe:0b:b5:46:f3:f7:9c:9b:d4:d5:bd:d2:
                    fe:5e:bc:60:c1:bb:43:58:c7:96:df:a2:b9:4b:70:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F6:84:C0:00:40:AB:70:17:DD:85:AB:49:82:D3:F8:91:26:6C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/68bf5e52-08ad-328a-a598-e2824a5c775f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.46.0.0/20
                  67.46.48.0/20
                  67.46.112.0/20
                  67.46.144.0-67.46.175.255
                  67.46.192.0-67.46.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:d0:be:bf:f9:d9:85:46:29:26:f5:a5:02:d3:a7:d1:cc:
         3c:be:ed:34:7a:61:e9:a5:08:18:0c:89:71:44:11:e0:f1:1c:
         fd:b7:e2:33:a8:b5:93:f0:37:b9:f0:ac:18:14:43:71:4d:03:
         c7:69:a2:63:63:62:cb:f7:47:5a:2e:b4:3e:6f:e2:d6:a8:91:
         73:d9:d7:b9:ab:11:c7:54:07:0c:af:f7:24:8f:63:2a:1f:07:
         99:87:a5:33:53:a1:fc:1e:c8:35:f8:66:4c:c7:df:0c:1c:ce:
         0c:4c:98:d1:da:31:4a:69:c7:a3:20:01:fe:c2:eb:4f:4c:b5:
         e8:72:1c:c5:a8:ee:cf:57:f2:3e:94:48:38:3c:1a:a1:26:5f:
         b7:04:cb:8b:93:fd:a9:3c:5f:f4:0b:7e:b3:1d:99:6a:a7:76:
         da:62:f0:2b:6e:ca:ab:c8:3f:16:97:f4:5a:42:6d:3e:ef:e3:
         f4:f0:a0:58:dd:bd:62:b3:97:ca:42:12:44:7f:ff:91:22:40:
         e0:e6:d8:eb:b1:35:b0:3d:25:89:08:1c:41:60:3e:36:92:d6:
         b6:69:e6:59:0a:59:ac:d7:89:8b:e1:ab:ec:71:b6:a7:37:70:
         80:87:88:02:cf:b7:83:02:2c:a4:b1:bf:bd:df:28:2d:ac:85:
         9d:7d:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:29:54 2025 by rpki-client