Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/8e650825-c1cc-36f1-85f2-35db853141ea.roa
File:                     8e650825-c1cc-36f1-85f2-35db853141ea.roa (raw, json)
Hash identifier:          615xQOVA/o5NHamPv7z0KUFaMz2filvASOcqHexmGt8=
Subject key identifier:   FF:73:7B:FD:95:A6:3E:5B:FB:DF:59:92:83:04:85:30:1D:19:54:2C
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F432858497279BB2548BFE6E61F1B8F80
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/8e650825-c1cc-36f1-85f2-35db853141ea.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     33356
IP address blocks:        67.59.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:bb:25:48:bf:e6:e6:1f:1b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=1bf3fb51-7f9b-45e9-829a-75748ec03ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:b2:b5:ce:b9:81:a9:9a:9d:c3:5d:69:17:
                    07:b6:c3:e3:d5:7b:0e:89:f1:a3:5c:a3:88:21:f5:
                    ff:02:df:0d:4f:a1:00:6c:58:7d:94:13:e7:4c:71:
                    f3:32:9d:a6:e7:3b:9a:6f:46:bd:2d:23:d8:08:98:
                    15:94:95:2a:c1:a3:09:0c:b4:07:21:54:a3:57:7b:
                    8f:9f:ee:27:fc:c8:8a:93:f1:e2:32:51:8f:36:07:
                    30:c6:60:22:ce:cd:0e:aa:42:ec:40:65:92:e5:e3:
                    cf:90:9c:37:c9:de:64:d6:3b:d6:1f:c2:fd:88:62:
                    1d:22:ee:95:bb:52:24:ce:b6:1c:4c:f1:90:40:ac:
                    57:79:e0:ec:6b:90:3f:f8:30:42:39:2e:7b:1b:f4:
                    6e:fc:08:2a:2c:70:74:02:0c:a7:f0:5c:58:44:79:
                    11:af:1b:b8:40:bc:38:2e:62:7a:06:ee:0d:83:dc:
                    cc:4d:66:88:21:8f:b2:69:b4:c4:ee:21:f0:78:76:
                    ef:fe:8e:17:8f:71:04:5c:36:62:7a:df:a3:f0:0b:
                    09:be:08:c9:8f:30:8a:5a:55:46:4e:0a:8a:bc:b6:
                    a4:74:b4:0b:f3:7c:02:96:5e:3f:32:5d:4c:33:58:
                    3e:88:8e:0a:2b:77:b4:9f:b5:57:b5:80:25:d5:3b:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:7B:FD:95:A6:3E:5B:FB:DF:59:92:83:04:85:30:1D:19:54:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/8e650825-c1cc-36f1-85f2-35db853141ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:71:f0:d2:67:81:32:f2:3f:c6:f6:17:27:6e:98:17:b0:64:
         e9:25:f3:31:00:58:24:92:33:a1:8e:a5:50:15:14:a1:1b:ae:
         fb:62:ed:df:0b:80:6a:05:ad:1e:ef:56:83:fe:89:d8:2d:e7:
         11:c7:b9:7d:20:c4:34:15:4e:2c:47:fe:61:82:e8:8c:e3:33:
         04:83:f4:be:f1:21:cb:9b:c1:62:b5:d7:de:fd:1d:20:d0:19:
         67:17:7a:de:73:c7:89:64:4c:86:f0:15:7e:9e:3f:02:13:21:
         47:d8:f2:e0:81:31:6e:6a:a9:c3:a1:d4:55:92:03:e6:02:7e:
         6c:27:d1:0c:10:2e:d6:a7:dc:3b:19:b3:84:8a:50:29:70:9a:
         82:28:e5:9c:14:07:52:a6:b5:7c:66:c6:58:09:a9:8c:0f:5f:
         a2:5a:ce:f2:97:0b:cd:ba:d9:87:4e:30:8b:e4:6d:7f:ad:8e:
         45:06:2e:a7:45:a6:70:ae:88:c6:64:d6:0d:2b:1d:4d:6a:9d:
         42:e6:7e:c4:b2:4d:2a:23:ea:a9:dc:4d:fb:a7:e9:8e:7f:77:
         70:d0:6c:af:6c:43:7b:65:1a:9a:26:35:3a:92:4c:eb:46:eb:
         4a:06:7b:74:35:85:33:06:35:20:a0:36:03:6e:67:51:d7:54:
         02:cf:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:53 2025 by rpki-client