Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/67b4b5c9-26fe-38f2-834f-385efd935fda.roa
File:                     67b4b5c9-26fe-38f2-834f-385efd935fda.roa (raw, json)
Hash identifier:          VcvaPvOgoXW5P8FrU3Z09n5Uyydggm1WKtkYwPZpT2I=
Subject key identifier:   B7:2B:46:DE:D9:43:67:47:91:EC:F1:25:98:A0:1A:2F:80:33:00:73
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584B79BCB765EBA5AC9F9A17DC80
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/67b4b5c9-26fe-38f2-834f-385efd935fda.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     174
IP address blocks:        199.167.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b7:65:eb:a5:ac:9f:9a:17:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=a2acd527-a2ff-485a-9d80-8dcdc1cd643f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:36:7a:35:6a:bd:fe:97:7c:c2:44:e6:b7:
                    54:87:4c:e9:5d:d7:dd:7e:f7:89:44:00:2c:6a:2c:
                    1a:ae:ca:59:87:79:b3:3b:33:ba:06:79:61:f0:de:
                    bb:24:bc:3a:45:72:4d:88:d3:04:64:5c:c5:23:ee:
                    c7:c7:92:4c:93:4d:cb:17:ce:47:47:74:ef:ee:ad:
                    c7:8f:b1:cd:1b:6d:74:de:10:2a:47:fd:17:0e:52:
                    bc:39:92:40:39:c0:3e:7e:2c:94:86:75:4a:23:c2:
                    f1:3d:4f:c8:87:6a:80:67:10:ff:4c:c7:96:fa:b3:
                    16:9b:2a:aa:c3:59:e1:11:2d:e3:2f:5e:cf:2c:57:
                    fd:7c:01:7f:51:6d:70:f0:97:62:0f:af:95:66:01:
                    8f:2c:d7:24:70:ed:0a:cf:6f:68:be:d1:57:e8:e1:
                    42:aa:f1:ce:a8:77:e2:ee:45:53:ac:42:73:7e:4b:
                    b9:8e:59:57:b2:7c:44:ba:0b:38:9a:da:16:bd:ab:
                    1f:08:0a:a2:c2:ec:43:67:34:1a:e9:e9:80:f5:58:
                    bd:8f:22:66:3c:f1:08:38:28:1e:47:32:ec:92:e8:
                    23:b8:c0:c9:cf:c4:5e:a5:23:c1:38:a0:c0:5c:14:
                    d3:77:ed:e2:09:5b:c8:13:b4:81:aa:3e:aa:cb:2c:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2B:46:DE:D9:43:67:47:91:EC:F1:25:98:A0:1A:2F:80:33:00:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/67b4b5c9-26fe-38f2-834f-385efd935fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2c:e1:3c:65:58:13:8a:fa:25:9a:e7:2c:8f:1c:18:43:a9:
         0f:b3:7f:f3:c1:20:35:85:23:29:c9:23:0e:75:57:9b:70:40:
         12:83:58:a4:ca:81:98:1a:19:bb:79:2f:cb:63:1b:05:86:11:
         10:ba:3f:f7:e2:ae:f6:44:f3:2e:c0:63:09:85:e8:2f:f4:e4:
         5b:0b:3d:e6:17:1a:42:69:04:70:dc:23:bf:47:9f:f9:0e:c0:
         2a:5b:ad:f3:1e:f6:31:aa:22:8e:35:a6:fa:a2:32:15:64:a6:
         2f:16:9b:09:f4:f9:bc:a3:b5:94:02:bd:39:40:7a:18:cc:a4:
         2b:b6:3b:df:6f:2b:e4:73:dd:fd:90:30:20:37:8a:7f:ba:ec:
         d7:54:84:7d:ea:37:f2:77:a9:68:e1:59:29:e1:7c:cc:56:80:
         40:63:81:4f:d0:74:a7:d1:4a:d9:59:3b:a8:9b:0c:8e:fb:35:
         95:29:9a:13:1e:83:62:e9:4f:0b:12:e2:a5:99:d5:6c:2a:25:
         4c:bd:ba:47:e4:7a:5a:3d:9d:3d:79:b1:dc:81:6c:75:a0:f4:
         1d:f8:3f:16:22:cd:14:3d:2a:d8:5b:6d:c3:0b:15:60:70:d9:
         30:ce:56:47:97:e1:f1:da:f6:98:fa:a5:38:dd:7e:fb:30:e8:
         35:00:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:11:00 2025 by rpki-client