Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa
File:                     6efccda5-9898-3892-bc80-aa26d7e3db9f.roa (raw, json)
Hash identifier:          PhUNMiZDQHUQbFaXy/YLfDJB1DormLEi3IOYYfTpEWg=
Subject key identifier:   D4:FF:8A:ED:12:8F:47:3F:C0:FB:77:B6:0D:84:EB:BA:D0:DF:51:41
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584B0E4150267ACD47C72C22C4E0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        167.234.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:50:26:7a:cd:47:c7:2c:22:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=9e8e8ffc-54ff-469b-b456-378b5dbbee97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:f9:21:f6:f1:8d:07:e6:7c:f9:6d:1b:ec:
                    7c:ad:b1:a8:f8:ed:47:c4:51:0f:9e:84:db:85:25:
                    48:5d:fa:3e:09:b7:e0:e7:5e:05:e9:2f:02:07:0e:
                    a9:f8:e0:9d:97:1d:ea:d6:eb:9c:35:21:05:d6:3d:
                    78:4b:23:0f:73:be:1b:38:f8:3b:71:a4:32:7e:01:
                    d0:a6:63:25:34:6f:27:4c:13:bf:d7:74:b2:13:e8:
                    47:b5:66:aa:9a:2b:b7:ac:e8:4e:70:8d:0f:28:0f:
                    23:34:e9:f2:3c:c4:7a:ef:ed:14:ef:59:46:93:21:
                    a9:6e:d6:d6:38:4f:25:f0:89:ca:87:5a:79:29:b2:
                    2d:20:ba:34:aa:b4:93:7f:18:e1:35:eb:7d:f4:06:
                    2e:7d:29:17:26:21:d0:04:c7:22:78:cf:81:b8:99:
                    8f:cb:66:28:8c:c9:62:0e:91:bc:ab:66:f5:bb:22:
                    02:e8:54:8b:56:e6:5a:91:a9:eb:20:32:e2:03:22:
                    6f:5c:48:04:58:c6:30:7a:e2:40:de:9a:a5:b8:a7:
                    aa:60:c0:b2:c9:ae:6d:3c:09:7a:d9:46:93:1f:0a:
                    a1:83:5d:4b:92:4b:11:e8:24:ac:fd:99:41:5a:ae:
                    e1:ed:1e:af:ce:b0:d3:df:05:c6:a3:11:84:8a:64:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FF:8A:ED:12:8F:47:3F:C0:FB:77:B6:0D:84:EB:BA:D0:DF:51:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:15:fe:d9:9b:a9:40:53:b9:aa:f9:12:f0:b8:a4:74:eb:
         12:ec:b3:20:70:16:f3:dc:1e:85:de:d3:0e:20:a2:89:54:09:
         f3:4f:2d:bf:4c:07:9f:0d:bb:36:c2:25:c4:62:a2:28:82:63:
         81:67:61:94:f0:a8:12:93:b9:39:16:41:21:a5:46:2e:4a:6c:
         1a:71:82:68:2c:80:91:23:7b:35:ca:4a:2a:63:d5:90:d3:72:
         49:06:8b:72:20:84:9d:1f:cf:44:e8:40:1a:50:e3:95:5e:72:
         a2:c4:3e:fc:f2:51:88:8c:df:d9:62:90:62:7d:69:49:d3:dd:
         39:fa:82:3d:f0:08:0c:b9:71:5e:d1:cf:dc:3c:d8:05:7e:62:
         e1:12:83:c8:a3:47:21:5d:c9:8a:86:1d:f9:b7:68:b0:ab:a7:
         23:a7:70:a3:e9:38:2a:df:2e:31:79:a1:98:dc:c0:b5:4c:61:
         44:1a:11:81:ae:ea:f8:34:af:00:93:15:44:8a:f1:84:8a:fd:
         6b:1b:c0:0c:ea:4a:ab:95:1e:ba:da:9e:b3:66:ae:e9:36:bf:
         ed:d9:0e:51:76:54:14:a6:ff:8a:33:98:08:88:76:1b:93:d4:
         07:7c:e8:a0:42:43:de:25:42:83:67:b1:94:ae:8f:da:fb:f3:
         6d:a3:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:29 2025 by rpki-client