Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/6e09433c-a03f-3162-9dcb-d527c79f3782.roa
File:                     6e09433c-a03f-3162-9dcb-d527c79f3782.roa (raw, json)
Hash identifier:          0ypRci21rPiKnzgxsJ/aNhOGpqGQZH26KcSQ1sPQe4U=
Subject key identifier:   3B:18:1E:07:74:2F:49:B2:04:A4:CE:DA:41:D2:AD:55:A2:3B:43:2C
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584B328C3E2DACFFAA15B49B3080
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/6e09433c-a03f-3162-9dcb-d527c79f3782.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     31778
IP address blocks:        67.59.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3e:2d:ac:ff:aa:15:b4:9b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=e9c312ce-cc8e-42de-a045-801eb084121f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ee:3b:a2:f9:b3:69:7b:50:3c:a7:9c:59:70:
                    7d:5f:eb:68:1d:65:98:25:e8:01:81:1a:ab:f7:0c:
                    79:d6:d9:ac:36:b6:db:06:a6:7a:9b:8b:dc:51:46:
                    df:82:34:9f:b4:5f:1e:9a:74:f0:bd:1f:a5:70:3b:
                    f8:d0:6e:8f:13:83:f3:bb:81:69:78:db:82:50:9d:
                    7c:2f:b6:33:f0:02:74:ba:2c:b6:70:1d:c7:cf:b9:
                    5d:cf:8d:ca:b3:4d:6a:6c:a2:84:6b:fd:4c:89:77:
                    96:a9:bf:13:6e:29:47:73:0a:52:9f:5b:e8:7a:7a:
                    d4:fc:8d:ad:fc:93:3b:6f:b2:88:67:b9:ae:14:41:
                    8c:bc:69:ce:0c:ab:7e:23:e4:62:ac:e2:82:39:73:
                    03:8a:5b:fe:b8:1c:54:3b:85:ab:6c:28:47:9f:9b:
                    64:b0:d9:6c:46:2a:bd:ae:59:e2:85:5b:6a:c4:01:
                    6c:65:ae:57:a8:4f:e3:b0:ec:39:8f:2f:fb:0a:d1:
                    87:67:2b:ac:a5:ac:9f:e8:dc:d7:88:ad:43:15:1f:
                    d5:8b:7c:d7:d6:12:6b:57:ff:6e:80:20:d2:6e:6c:
                    3a:60:3b:45:77:65:52:96:cb:4b:fa:0d:68:5a:13:
                    b2:64:b2:2f:8e:f9:09:a0:12:2b:7f:a3:af:8c:58:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:18:1E:07:74:2F:49:B2:04:A4:CE:DA:41:D2:AD:55:A2:3B:43:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/6e09433c-a03f-3162-9dcb-d527c79f3782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:0b:b5:9c:07:f8:75:2b:ad:b6:68:4c:d5:da:57:d7:74:
         96:2f:b3:b9:3e:61:86:26:1d:03:51:ba:a6:e7:11:6b:aa:45:
         03:e2:c8:7b:9e:84:f3:aa:9c:70:59:0b:08:f6:d2:00:cc:f3:
         dd:d7:ed:74:13:86:21:38:de:fb:25:2d:93:37:31:2e:89:c6:
         66:f8:b0:83:8c:19:56:ef:94:95:40:b1:f1:36:5f:6c:15:5a:
         2b:76:2d:1a:9d:19:9c:64:41:cd:17:30:1c:cf:8b:38:11:00:
         81:2d:56:53:91:07:33:56:39:e9:48:ea:94:da:62:5e:5c:c5:
         f2:de:5f:cf:98:f9:45:c1:04:e7:74:42:35:71:34:eb:84:f7:
         a1:e5:df:cf:0e:97:da:87:9a:0a:fe:26:6b:89:78:5c:49:db:
         3e:23:82:66:0c:ea:60:51:c4:9c:66:ae:78:6e:d4:a9:23:28:
         da:8d:27:60:c5:a8:ba:83:e9:96:14:c8:72:13:26:72:5c:9b:
         76:41:6a:91:43:ec:9c:35:09:65:51:8a:78:6c:5c:98:9c:95:
         9f:64:4e:38:5c:df:bd:76:a8:cf:28:05:97:e5:dd:d2:b4:3e:
         48:4b:be:58:bc:0e:2f:b0:72:ff:7f:02:70:ca:38:fd:56:67:
         07:ca:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:48:47 2025 by rpki-client