Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fad86486-2a89-304a-9f27-809dd6c9b6e4.roa
File:                     fad86486-2a89-304a-9f27-809dd6c9b6e4.roa (raw, json)
Hash identifier:          kocV01ubDFneVTEdKAQk1tA+vrAqnZpeoW6+uZhb8po=
Subject key identifier:   DF:D0:8A:63:E7:B6:EA:C6:3A:3A:16:7E:F1:A3:3C:10:57:84:0C:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431CB5E2019BF4AF3F78C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fad86486-2a89-304a-9f27-809dd6c9b6e4.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        75.67.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:cb:5e:20:19:bf:4a:f3:f7:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=8d439e4d-3b92-477e-a3ee-3b8064d758b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:19:df:35:47:98:2d:a1:a9:88:47:af:ab:
                    09:56:ee:b0:11:e0:46:5f:d2:2c:41:dd:fe:98:0a:
                    1b:29:98:dd:8a:ed:dc:b4:df:60:61:d1:86:ce:d7:
                    df:1b:6e:d9:90:6e:e9:09:f1:eb:5e:f6:23:20:ee:
                    fe:41:4e:50:a5:a5:43:1e:28:b1:af:f2:4c:7e:79:
                    da:b7:a9:f7:9d:c4:1f:47:f8:68:16:74:16:6a:00:
                    da:41:8a:6f:4e:ff:23:04:c3:8e:38:64:f2:3f:3c:
                    1f:8c:bd:8b:b9:df:f4:e8:d0:14:b8:67:5e:c8:c0:
                    fc:74:eb:fb:b8:df:c3:c6:19:a6:75:c8:4d:c0:cd:
                    aa:7f:c8:a1:5f:92:f9:74:8e:58:6e:ce:d4:2e:40:
                    f8:27:e6:f9:b1:d5:63:be:7e:ab:4e:9b:b5:d0:6a:
                    3c:f2:83:49:a9:72:84:89:56:23:66:97:16:ca:e6:
                    1d:2f:49:fc:e7:57:18:4c:c2:9a:b4:13:0f:b7:35:
                    7e:32:1d:17:33:06:80:47:9e:b7:f9:16:5f:47:05:
                    7c:68:65:14:0e:3c:be:fb:b5:a2:58:1b:d9:ea:5a:
                    6a:70:03:1e:03:09:aa:9a:f3:c5:7e:05:16:e6:e7:
                    1a:d8:85:67:23:5c:6d:0b:8d:63:6f:ae:e9:e9:1e:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:8A:63:E7:B6:EA:C6:3A:3A:16:7E:F1:A3:3C:10:57:84:0C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fad86486-2a89-304a-9f27-809dd6c9b6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.67.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:c2:2d:dd:4d:62:40:76:61:3d:16:04:c3:e7:1f:5c:88:
         c2:a7:d6:87:5b:73:23:60:e8:28:b7:52:0b:0f:19:27:7a:3d:
         f6:49:f1:e1:50:87:e0:bf:86:72:74:5f:13:8d:df:a9:6d:1e:
         b9:81:9a:d0:50:a5:a9:96:dc:33:40:58:22:cc:9c:21:73:ae:
         53:07:de:42:99:5f:57:3d:ab:24:e8:17:fc:71:e2:33:ad:5a:
         c5:13:dd:b6:98:7d:58:eb:09:80:a0:e6:23:83:6c:fa:c9:26:
         6e:fd:a5:d2:2d:61:17:25:8d:4d:81:90:d0:a9:51:96:24:1c:
         bb:46:fb:44:57:db:05:00:25:e7:73:83:5a:a6:d4:c5:c4:20:
         1e:bd:48:60:70:83:5b:f0:fc:18:1e:0c:b0:d5:7e:16:30:50:
         dd:81:56:88:e7:f8:02:04:7b:bc:ca:fc:99:4c:28:68:64:46:
         44:75:dd:e1:bd:13:e6:65:5f:e1:a4:f4:df:27:99:67:7a:68:
         a5:f7:60:19:10:07:ac:5d:f0:dc:04:60:94:1e:d3:22:e1:9a:
         93:bb:b1:5c:1e:84:62:21:43:39:15:36:cd:a0:c9:26:d4:d5:
         50:be:1e:a2:4e:a0:59:a3:a8:e7:b5:c1:49:6b:cc:2f:27:6c:
         d0:d8:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:36:25 2025 by rpki-client