Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b06d97-226e-35d7-b331-b2f7173f4317.roa
File:                     b7b06d97-226e-35d7-b331-b2f7173f4317.roa (raw, json)
Hash identifier:          4G9f7qgnjISaRqYbZnSnwUcG8BV9nejVooyK1T6yHwM=
Subject key identifier:   BA:09:1D:43:FC:85:83:A1:A9:1E:29:7B:68:D9:10:8D:12:8C:B9:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05810F040153590B97B860
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b06d97-226e-35d7-b331-b2f7173f4317.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        67.177.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:81:0f:04:01:53:59:0b:97:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7a3c5f97-83e3-4a22-8d9b-fac73cbed8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:6a:fe:fd:dc:e1:b5:99:e5:7c:81:e3:be:
                    a4:02:3d:a7:28:b8:46:6c:d3:29:91:ea:e5:8f:dc:
                    a3:7d:75:7b:95:2d:82:04:0b:79:9e:f6:b6:83:ef:
                    1d:aa:3d:df:32:da:3e:b5:f3:dc:ef:26:40:f6:6e:
                    32:43:d5:85:49:ad:3e:6c:51:33:32:0a:fd:aa:6f:
                    2f:45:6c:10:04:1d:24:d6:e0:79:25:cc:dc:8b:7e:
                    54:ed:2a:20:55:29:0b:9c:81:24:cb:e5:8d:de:0f:
                    91:1c:a9:64:96:43:34:65:d1:3f:6e:60:86:50:d2:
                    d7:03:ce:63:37:1a:d7:cc:81:ef:ae:d2:d0:30:10:
                    05:d4:6f:df:40:6a:a1:3e:da:fa:7e:35:34:85:50:
                    ab:b4:ba:ce:d3:72:bd:47:36:ae:0e:7b:2f:4e:3e:
                    25:bb:84:8f:d0:5f:d8:99:6f:94:a7:25:7f:35:9c:
                    1c:66:76:18:8f:a1:be:4c:8a:4d:48:0b:a8:ef:5f:
                    13:6a:f8:a4:c2:49:f1:15:93:13:55:d8:c9:20:de:
                    91:01:71:14:cc:c9:8b:d3:0d:1d:4e:a0:88:41:31:
                    4f:a0:eb:f4:78:5f:91:6d:3e:87:b7:ce:c6:32:1c:
                    ec:87:b5:e3:f7:e4:c9:77:93:59:67:c6:74:70:e3:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:1D:43:FC:85:83:A1:A9:1E:29:7B:68:D9:10:8D:12:8C:B9:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b06d97-226e-35d7-b331-b2f7173f4317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.177.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:db:91:34:55:d9:d5:2e:35:36:52:d2:7c:d1:e4:b8:53:
         a9:a1:87:77:ab:25:b7:b5:b8:1d:38:5b:9b:6d:3b:20:b6:7c:
         68:ec:82:50:f7:29:6b:a8:52:bf:19:ae:d7:d9:67:3d:86:3c:
         c4:cc:ef:ae:76:95:5b:66:10:fc:e4:99:62:59:aa:83:b3:3b:
         71:b6:2d:2f:80:7c:36:04:b4:ee:4f:8f:e7:48:8c:c2:fa:ed:
         6c:0b:f9:28:39:09:a9:1e:99:22:c1:77:09:2c:a6:d5:37:4e:
         7e:b4:ed:af:b8:b3:77:9a:be:f4:72:68:87:72:a3:16:09:17:
         a4:be:21:95:cc:c6:8a:ea:82:fe:58:e3:29:19:4d:c2:a4:4d:
         e0:85:4a:59:d2:08:2d:ba:04:34:e2:f8:7f:59:95:ba:c1:12:
         b5:4f:53:46:b2:f5:a2:87:19:4d:d1:f1:1e:fc:b5:f9:5e:3e:
         48:4d:d9:02:d3:6c:2b:a5:5f:1c:19:a8:55:3a:e0:cb:00:92:
         4d:d5:67:91:3e:e9:b2:d2:d3:aa:38:b0:30:87:a9:d2:12:f7:
         32:43:05:ad:1c:2e:2a:a0:cb:67:79:e8:3d:bf:73:35:bb:5e:
         1a:87:70:55:89:51:55:94:0d:f5:dd:3e:11:a9:bb:e9:11:7d:
         60:05:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:50:36 2025 by rpki-client