Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/f5c37739-2637-3781-ab0f-8a26b2076766.roa
File:                     f5c37739-2637-3781-ab0f-8a26b2076766.roa (raw, json)
Hash identifier:          oEzFufyH4Z1CG2xosTtiaEjiWybB7xkNA3Gu0pPOkic=
Subject key identifier:   1B:F1:68:CE:C8:61:71:06:2F:E4:73:AC:9D:A1:8D:8E:6A:E3:A9:E2
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584A62909EE2E5933A9EF80C5E80
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/f5c37739-2637-3781-ab0f-8a26b2076766.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     33548
IP address blocks:        67.204.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9e:e2:e5:93:3a:9e:f8:0c:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=5cfd40f3-abdd-4058-b0da-d735dad4d47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:a3:01:6c:56:4d:b1:b1:0a:17:67:ed:6f:
                    4f:6b:3b:31:ed:17:98:78:d8:7a:b2:a1:5c:ed:58:
                    6c:c3:7e:ea:69:51:f9:5d:9d:21:48:41:82:43:9b:
                    a9:a0:c7:99:32:c2:6d:57:18:0f:74:c1:61:a4:c9:
                    3d:11:cb:81:36:59:c9:67:23:8a:0b:f2:ca:d7:b0:
                    97:7d:bd:bd:4e:e6:ca:95:21:52:2f:39:fc:00:c8:
                    b1:f9:0a:53:47:04:ab:62:85:fa:ba:11:cb:08:6e:
                    c9:6e:c8:52:a5:b2:36:f3:57:ec:6f:d2:c5:d9:d8:
                    d8:f6:26:6e:6c:5c:4a:6a:a8:de:79:3c:9d:a4:bf:
                    a2:10:ab:38:59:0d:af:31:35:d0:b7:70:b4:6d:0e:
                    41:fd:0e:8f:98:6c:a4:89:ee:57:e2:4e:53:22:4f:
                    23:94:0e:2b:3d:a4:aa:07:6d:f1:dc:dc:58:f5:db:
                    02:9a:11:8b:6f:8b:33:9b:d3:01:8b:4c:00:c9:2d:
                    45:df:47:16:48:8c:89:9c:73:e0:9b:2f:95:b3:d0:
                    f6:60:ed:fc:fb:20:a7:51:c6:c0:a9:ff:23:41:4c:
                    d7:f9:b3:5a:7f:d7:f1:fc:f1:86:f2:1c:c1:97:35:
                    40:e6:5d:54:5b:3c:af:2f:7f:16:07:17:a1:0c:b7:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:68:CE:C8:61:71:06:2F:E4:73:AC:9D:A1:8D:8E:6A:E3:A9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/f5c37739-2637-3781-ab0f-8a26b2076766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.204.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:15:bc:d1:c6:26:71:ab:3c:45:d9:2f:e9:aa:83:75:cc:f3:
         c6:26:4e:ab:c6:0f:18:37:aa:b4:16:75:1d:53:63:4d:e8:eb:
         0a:01:6d:0e:a9:2b:0a:c4:36:93:d3:0e:25:a3:7e:63:8c:f5:
         5b:8b:00:41:b4:a6:cb:e2:d5:64:f5:d5:06:16:ee:3a:19:7d:
         e2:31:ca:90:38:2f:78:6e:90:94:38:5c:96:5d:e0:95:cb:79:
         d8:87:bc:38:8c:91:b1:dd:7e:60:d0:77:00:09:84:05:49:b4:
         b9:62:33:39:75:d8:cb:65:cd:4c:29:dd:79:dc:2c:85:a4:24:
         bf:a1:9f:e8:10:7b:d6:27:d3:22:43:71:e2:b3:46:dd:6a:3c:
         89:bd:ec:73:a2:19:ea:6b:ba:e7:f2:d3:4f:83:c5:22:30:d8:
         7b:7a:c2:a1:30:cf:ee:d9:af:f3:51:1c:e6:af:c9:6c:d2:3e:
         79:65:88:21:12:15:32:6c:48:e7:a9:04:9c:8e:8f:25:fb:47:
         6b:e5:5d:cc:c9:e7:e0:c7:16:5d:f3:60:7b:12:34:d0:02:e1:
         7a:74:c4:86:c1:f7:b3:c0:69:d8:a1:26:45:8b:e9:36:c5:15:
         56:82:a4:8f:a1:92:76:d8:da:a4:bb:5a:6a:fe:f9:52:2d:81:
         ed:9a:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:06:31 2025 by rpki-client