Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa
File:                     a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa (raw, json)
Hash identifier:          soKBHrJ1TLFtmmkwTpXrwbhMYtSYJHKhDxyvEgAZfMA=
Subject key identifier:   35:60:E9:E1:2B:73:C7:0C:61:46:B3:3E:9A:14:14:8B:AB:18:B2:B3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B35D904377252D35B9E950C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa
Signing time:             Tue 16 Sep 2025 05:22:48 +0000
ROA not before:           Tue 16 Sep 2025 05:22:48 +0000
ROA not after:            Mon 15 Dec 2025 06:22:48 +0000
asID:                     401783
IP address blocks:        67.102.4.0/23 maxlen: 24
                          67.102.8.0/23 maxlen: 24
                          67.102.10.0/23 maxlen: 24
                          67.102.12.0/23 maxlen: 24
                          67.102.14.0/23 maxlen: 24
                          67.102.240.0/23 maxlen: 24
                          67.102.244.0/23 maxlen: 24
                          67.102.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:d9:04:37:72:52:d3:5b:9e:95:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 16 05:22:48 2025 GMT
            Not After : Dec 15 06:22:48 2025 GMT
        Subject: CN=567d4e23-1da1-43e3-b9e7-35672f530786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:18:7a:ab:ec:bf:4a:6c:b2:75:8e:71:cb:
                    75:46:82:ce:6b:3d:9b:19:16:23:84:28:76:b3:f3:
                    33:01:ed:2f:b2:b0:c5:91:46:fa:63:ed:c4:89:23:
                    ae:54:bf:b4:87:2a:ae:dc:8e:39:40:c4:c5:81:be:
                    37:bf:85:37:81:f2:92:cb:a1:85:ab:de:12:0c:e9:
                    d2:f2:86:1e:c5:b8:8a:c9:6a:40:a1:f0:0f:5e:63:
                    a9:06:0b:5c:df:f7:9d:38:39:e4:e9:16:36:32:63:
                    cd:c1:41:7c:1d:75:86:47:83:cb:f4:d9:b6:bd:8f:
                    cc:c5:69:4a:42:c0:36:8b:3a:b4:ea:f6:13:2d:c5:
                    2f:7a:e0:11:79:0b:30:75:14:86:2c:9f:34:6b:b4:
                    05:4c:5d:f9:49:05:76:83:d2:6f:0f:2f:51:08:9c:
                    3d:70:c0:32:dd:a5:0d:02:e1:43:8a:e6:d4:ee:d6:
                    ab:ba:03:77:4b:c8:ed:1a:b6:13:64:92:17:5b:35:
                    8e:7e:0a:f6:03:c8:a7:13:56:01:ae:0b:57:e4:b9:
                    93:e3:58:4d:68:66:f8:8f:89:32:55:5b:68:3d:50:
                    a4:18:f1:2c:44:da:99:d6:19:9c:73:85:82:be:1c:
                    6d:92:48:3a:ab:e4:c3:f1:05:d1:63:33:46:af:5f:
                    c1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:60:E9:E1:2B:73:C7:0C:61:46:B3:3E:9A:14:14:8B:AB:18:B2:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.102.4.0/23
                  67.102.8.0/21
                  67.102.240.0/23
                  67.102.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:54:c9:06:d2:72:f2:23:43:47:d4:3d:db:91:15:2d:e1:
         82:32:f6:fc:39:d6:89:6d:35:48:be:f8:c5:92:cc:11:82:75:
         de:64:67:b7:b9:9d:e1:5e:0e:f7:8e:4a:2e:04:b4:b4:71:9b:
         41:dc:65:bb:34:d7:a0:64:cd:e3:ea:c6:e5:3c:1a:d6:1e:ce:
         e3:13:fb:f3:3d:0a:f4:68:f7:0b:01:cc:4d:b4:03:46:65:2c:
         ad:0e:16:a2:bd:17:11:cf:10:9d:2b:dc:01:04:e7:81:ab:4d:
         11:b8:6a:c2:be:e3:f6:d8:2f:ca:b8:0e:3e:ee:91:ed:e1:c9:
         f3:3b:d9:d9:7b:a2:c0:02:d5:b6:59:89:d2:f4:bb:2e:fe:29:
         b7:f6:c0:77:78:f6:b4:bd:02:9e:29:96:c8:e7:84:fe:02:31:
         6b:9f:e1:9b:16:4f:bf:04:cc:ec:45:4c:8f:01:52:a9:48:42:
         be:12:ab:5b:63:df:ce:20:01:c5:20:48:49:1d:7b:16:15:7b:
         c8:63:f3:69:48:04:7f:0d:b2:35:ca:bf:0f:66:52:3c:96:70:
         78:c9:b1:58:a7:5e:69:b3:75:c2:e7:e9:24:36:05:c5:db:c7:
         50:65:44:cc:91:08:73:c7:98:76:2e:7a:ee:e9:ac:64:44:6e:
         a9:31:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:52:24 2025 by rpki-client