Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/1b562222-fd8e-31cf-97d3-15363f849741.roa
File:                     1b562222-fd8e-31cf-97d3-15363f849741.roa (raw, json)
Hash identifier:          PTWcZvFZ7+mACecGiORFio65w4hOLFISwv/4B9WxEC8=
Subject key identifier:   0B:79:47:AB:99:B2:55:C4:BD:03:2E:13:22:7D:5E:CE:C8:B5:F7:26
Certificate issuer:       /CN=d51683a9-b5b7-4347-877e-9bc1487de10d
Certificate serial:       010D0C9F4328584A63F5B755953B3CBF7416DD00
Authority key identifier: 51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/1b562222-fd8e-31cf-97d3-15363f849741.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     21925
IP address blocks:        104.245.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b7:55:95:3b:3c:bf:74:16:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51683a9-b5b7-4347-877e-9bc1487de10d
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=7ab1c5b8-1c16-47dc-b3db-8b24c702a65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:36:17:ef:4f:b3:63:21:45:ab:d9:9a:98:
                    92:fd:ca:68:0c:62:6b:1d:f0:4e:fe:86:6d:54:12:
                    b8:db:f4:24:0f:9d:03:c9:f4:c3:f8:da:85:76:be:
                    fe:7e:e6:f0:33:10:af:cd:b7:2e:ed:c2:f9:aa:47:
                    3f:f7:8a:44:a9:4b:c4:9a:49:b4:d0:71:0d:e3:10:
                    f5:33:b0:97:14:d0:fd:2f:69:31:1c:e5:12:05:ed:
                    18:6c:52:43:3a:ea:f3:a7:3e:ec:b1:6a:e2:9f:c0:
                    28:c0:d8:96:ff:77:af:45:25:89:d7:23:89:de:dc:
                    ea:59:20:c7:ae:8b:3b:30:34:a8:33:fb:da:f9:67:
                    27:38:bb:93:31:63:5a:38:eb:e4:8c:29:49:ae:f9:
                    5a:2d:90:83:63:d8:bd:62:4f:4b:91:18:b6:55:1f:
                    8f:4d:64:25:e5:1a:d3:42:c6:ed:d0:3f:88:cf:62:
                    91:e2:bd:21:a9:49:d6:a0:64:a5:0b:57:68:d4:9d:
                    50:28:5c:6a:b3:5b:c9:bc:1d:b3:21:42:6d:ce:ad:
                    98:7a:89:95:e0:f5:8e:0d:c5:8a:16:6a:de:1f:0d:
                    a5:a6:dd:08:43:72:35:e4:5a:0f:90:8c:5b:28:5f:
                    f2:e0:c0:a4:5c:db:3c:dc:92:ab:d3:9d:91:0d:b5:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:47:AB:99:B2:55:C4:BD:03:2E:13:22:7D:5E:CE:C8:B5:F7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/1b562222-fd8e-31cf-97d3-15363f849741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.crl

            X509v3 Authority Key Identifier:
                keyid:51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:29:6a:fe:09:9f:b3:1b:f1:c5:5a:42:3d:02:7e:7d:0b:
         f7:a0:6c:5e:e6:a5:92:76:a6:7f:2e:07:7b:61:62:88:72:3c:
         b4:ca:2f:63:bb:8b:5e:9c:72:5a:34:dc:6d:1f:64:40:10:96:
         b8:5b:82:7a:75:e1:cc:0c:12:8d:a1:69:27:12:33:1f:b5:a5:
         60:ff:6d:ce:72:71:8b:6f:25:b9:fa:ed:99:84:4c:c8:d0:b2:
         02:c8:46:2a:67:b4:cc:e2:f0:5f:fd:a5:4c:19:43:0d:b7:91:
         e8:9b:26:eb:da:bc:f4:76:87:d3:6b:34:bd:3b:ca:5b:e0:e5:
         65:e7:28:3e:96:6b:66:f0:b9:57:65:9a:b2:91:57:d7:2d:bb:
         cb:bd:43:39:63:45:ee:1f:d1:7f:17:07:12:6d:20:32:85:2e:
         d6:af:d1:9d:3c:54:52:d1:39:bd:5e:ed:62:25:ab:ba:e9:48:
         f1:50:19:77:08:41:db:35:59:58:78:2e:95:85:94:7c:2e:0a:
         14:36:2e:e7:59:3b:76:f2:7d:93:6a:c6:ff:62:b5:2a:af:85:
         f5:9c:59:d5:7d:8e:3d:c2:6f:ae:34:2b:b7:5e:22:46:82:b7:
         e2:84:30:f7:85:d1:97:55:95:12:71:87:0c:c2:8c:6d:36:15:
         ad:db:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:45:11 2025 by rpki-client