Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa
File:                     7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa (raw, json)
Hash identifier:          P0U9imAUC2T17UO7vmfADobfz283R7a+XW326L2a+rw=
Subject key identifier:   1F:BF:B5:C5:D8:6F:32:10:5C:5B:8A:0F:25:39:7A:75:9D:31:ED:F3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A7A4B47557890D04C35E15340
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     397630
IP address blocks:        67.216.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:47:55:78:90:d0:4c:35:e1:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=7b1be505-ae8d-4c91-97ff-44f8da0eb756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:39:13:48:0d:af:1d:a7:a6:b4:1c:a9:63:
                    2f:d2:f4:07:89:b8:a0:38:b6:92:a8:a2:58:e2:cb:
                    e8:9f:05:e4:40:96:7a:d7:8e:f9:ec:e9:e6:07:0c:
                    34:63:ce:14:11:2f:c0:18:03:c6:ff:e1:f9:28:13:
                    03:eb:be:c5:c1:5c:8b:e6:7f:19:08:c7:bf:0a:ec:
                    ce:ce:74:93:ef:7b:6f:b9:66:22:4c:a6:25:b3:c9:
                    a3:74:fd:c2:1d:b2:6b:d0:cb:f0:93:1b:fa:74:8e:
                    a0:19:21:37:99:75:4b:e2:91:2e:96:05:ad:f6:21:
                    ca:bc:a0:32:e4:3c:5c:58:c0:9d:50:b8:4c:72:f1:
                    cc:d9:cc:2a:4f:ac:85:5d:6f:7f:a4:d4:6e:d5:c5:
                    44:fa:83:a2:0e:32:48:e3:43:0b:63:83:9e:b0:19:
                    6e:59:25:64:9a:fc:fb:1b:7f:1e:8b:e5:56:8e:94:
                    58:5c:42:9d:6a:07:8d:ff:ac:10:44:0d:46:14:8b:
                    0d:6a:eb:7c:84:e2:a6:54:27:e7:f3:2f:79:99:b5:
                    8c:06:6c:f0:bd:02:18:46:dc:66:29:32:97:16:ff:
                    2e:45:95:c0:b8:ef:2c:3e:b0:80:0a:54:55:1c:d0:
                    e4:6d:06:84:20:31:ca:72:3d:54:59:1d:f3:28:6e:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:B5:C5:D8:6F:32:10:5C:5B:8A:0F:25:39:7A:75:9D:31:ED:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:de:49:52:f0:84:7a:49:d4:0f:64:1a:ec:1f:d7:8c:6e:09:
         c8:f1:1d:e4:44:a2:06:da:c5:28:49:73:ec:9f:97:5f:d6:ce:
         f6:66:a1:d9:5e:bf:c6:7c:aa:d1:29:ad:c6:e2:d5:2c:01:da:
         4c:e7:f9:97:ca:bf:e4:39:58:b6:16:38:99:a9:94:69:a7:b7:
         dc:3c:d9:28:d5:30:28:94:a0:34:d0:09:b4:b5:44:f1:ad:8a:
         dd:e4:6e:19:b4:6a:aa:dc:18:30:df:44:c4:39:6e:b6:11:f7:
         97:e9:f1:25:e5:57:4d:76:23:01:56:f1:83:fe:bd:a7:bd:45:
         dd:8f:20:ad:df:54:c6:87:f7:2b:33:84:2c:2f:27:1d:e3:f0:
         97:87:81:c6:56:33:ca:e7:fe:71:75:21:da:68:4e:fa:f9:da:
         f2:a4:4c:cf:d7:95:18:8e:c6:36:61:ab:6e:f0:9c:40:ab:d7:
         5a:94:41:7f:19:ef:7c:ea:eb:9e:c6:fd:0f:cb:d2:00:1b:81:
         37:36:92:fe:54:75:87:b0:95:01:03:63:7a:c9:35:cd:b0:35:
         79:6b:81:ec:3b:23:f9:38:26:e6:56:f6:7c:66:87:9b:bd:4d:
         37:ce:d6:82:67:76:bc:91:66:7e:25:ca:be:a5:8d:86:bb:7a:
         d2:c3:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:25:38 2025 by rpki-client