Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30f7a43a-23f3-3b14-965c-260be7ec3955.roa
File:                     30f7a43a-23f3-3b14-965c-260be7ec3955.roa (raw, json)
Hash identifier:          cxnXG9UkRxjlkaGgmal0P4r8d31/uzXh9JSm4+IfGD0=
Subject key identifier:   0C:F9:74:00:35:36:DF:95:7B:FE:41:22:1C:2A:C1:A6:35:BB:DD:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4306A1C4B486DCE3CD42280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30f7a43a-23f3-3b14-965c-260be7ec3955.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        75.67.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:6a:1c:4b:48:6d:ce:3c:d4:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=1521d8ff-e3ac-40c2-bcb7-91b2023ee2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:db:da:f6:ef:28:b5:d6:06:46:24:3e:97:
                    29:02:fe:a5:64:27:4d:8c:1d:88:2f:ec:5b:5b:a6:
                    65:d0:16:6a:79:db:c9:3d:22:c5:67:c6:4c:19:b1:
                    14:a4:49:1c:99:94:7c:9c:71:d5:72:e1:1a:0e:2c:
                    10:c0:c6:54:80:d6:14:72:8b:0f:d2:bb:cd:e7:28:
                    e3:ee:f8:70:ec:d0:1c:a8:4f:d8:7a:73:65:95:66:
                    75:09:f3:b5:9e:91:5b:bb:79:fe:50:e5:2d:e9:b4:
                    2e:62:3b:0f:aa:55:7a:5a:e3:78:90:6b:55:65:5a:
                    dc:34:ce:60:de:93:aa:6a:6b:d0:ee:eb:a2:45:1e:
                    6c:a0:d2:0b:73:0f:ac:5b:75:29:6c:4b:d5:f8:e1:
                    c4:87:9a:34:bc:63:c5:ae:e6:26:46:08:60:f1:72:
                    73:86:ba:be:5c:5e:10:5c:7f:87:90:15:ad:06:7f:
                    e2:70:17:90:cf:a7:80:cc:fd:cb:e1:b2:3c:9c:33:
                    85:54:fb:c4:36:98:3f:54:89:9c:b0:10:1a:d3:e9:
                    09:8e:7b:0e:39:c9:50:f6:90:87:4b:c2:ac:f3:9d:
                    c5:68:eb:2a:7b:65:e5:af:46:3a:94:f2:13:6b:44:
                    c7:c0:47:14:53:26:24:79:81:5f:72:a4:13:4c:b0:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:74:00:35:36:DF:95:7B:FE:41:22:1C:2A:C1:A6:35:BB:DD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30f7a43a-23f3-3b14-965c-260be7ec3955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.67.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:df:89:d0:3f:1d:dc:7a:a3:ab:7e:23:d9:d4:de:fe:10:63:
         16:ed:69:fa:28:bc:c1:40:a7:24:89:cc:cb:79:76:8b:17:cc:
         02:19:dc:8c:15:3b:12:1f:c0:92:60:12:ff:52:2d:bf:c4:af:
         2c:a4:17:e9:1b:64:47:23:a0:e1:b5:cf:b7:b3:5c:7a:9d:0d:
         f5:07:fa:f4:0f:6b:e0:f1:ec:68:24:81:c0:47:1d:8a:bd:ad:
         7b:e0:a2:0d:24:75:4b:20:d2:df:fe:97:87:7a:1e:7e:0e:2e:
         82:65:7f:9d:a4:15:97:83:99:40:9b:6c:90:66:78:22:7c:cc:
         b2:cb:9d:fc:e3:a6:35:09:8c:f1:a9:50:78:d5:cb:9a:ff:f9:
         65:de:cf:ac:a9:ea:cd:86:45:4a:b2:ec:bc:00:e6:3a:e5:3e:
         44:b4:e3:04:b7:be:e2:0b:ea:7c:57:62:40:9f:d3:83:08:e8:
         3c:f7:8c:3b:87:66:bc:03:a6:c0:8a:0c:c3:07:63:8f:98:bf:
         75:24:45:7a:c1:b6:02:4d:18:36:5e:0f:d8:37:7e:45:49:0f:
         8c:27:2b:e6:5a:9e:08:d8:b2:9c:ae:7f:78:ad:6f:6d:f9:78:
         53:a6:85:89:05:64:87:a7:4f:b6:02:fd:1a:ea:ec:41:06:81:
         28:dd:c3:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGocS0htzjzUIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTUyMWQ4ZmYtZTNhYy00MGMyLWJjYjctOTFiMjAyM2VlMmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3jb2vbvKLXWBkYkPpcpAv6lZCdNjB2IL+xb
W6Zl0BZqedvJPSLFZ8ZMGbEUpEkcmZR8nHHVcuEaDiwQwMZUgNYUcosP0rvN5yjj
7vhw7NAcqE/YenNllWZ1CfO1npFbu3n+UOUt6bQuYjsPqlV6WuN4kGtVZVrcNM5g
3pOqamvQ7uuiRR5soNILcw+sW3UpbEvV+OHEh5o0vGPFruYmRghg8XJzhrq+XF4Q
XH+HkBWtBn/icBeQz6eAzP3L4bI8nDOFVPvENpg/VImcsBAa0+kJjnsOOclQ9pCH
S8Ks853FaOsqe2Xlr0Y6lPITa0THwEcUUyYkeYFfcqQTTLAhawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAz5dAA1Nt+Ve/5BIhwqwaY1u936MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzBmN2E0M2EtMjNmMy0z
YjE0LTk2NWMtMjYwYmU3ZWMzOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS0NAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXfidA/Hdx6o6t+I9nU3v4QYxbtafoovMFApySJzMt5dosXzAIZ3IwV
OxIfwJJgEv9SLb/EryykF+kbZEcjoOG1z7ezXHqdDfUH+vQPa+Dx7GgkgcBHHYq9
rXvgog0kdUsg0t/+l4d6Hn4OLoJlf52kFZeDmUCbbJBmeCJ8zLLLnfzjpjUJjPGp
UHjVy5r/+WXez6yp6s2GRUqy7LwA5jrlPkS04wS3vuIL6nxXYkCf04MI6Dz3jDuH
ZrwDpsCKDMMHY4+Yv3UkRXrBtgJNGDZeD9g3fkVJD4wnK+ZangjYspyuf3itb235
eFOmhYkFZIenT7YC/Rrq7EEGgSjdw40=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:00:28 2025 by rpki-client