Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a57528d-e786-3c9c-878e-0b218c9f5514.roa
File:                     0a57528d-e786-3c9c-878e-0b218c9f5514.roa (raw, json)
Hash identifier:          WiZBgSP94coImHUKZEh9XsNG5kHZIvLeC9XcazlX7VI=
Subject key identifier:   17:7E:70:F1:5D:F0:F2:22:7F:EC:69:E0:7F:A3:FF:99:A4:04:4A:EC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B13D6C4E434880B1A4E99D400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a57528d-e786-3c9c-878e-0b218c9f5514.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        67.227.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c4:e4:34:88:0b:1a:4e:99:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=80350a81-945f-41aa-a0da-f24f89fde756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:e8:0d:cd:39:29:52:03:24:93:b4:c9:8c:
                    72:24:df:3e:79:c6:95:7f:1c:df:41:d5:42:1b:ec:
                    16:25:fa:4e:41:d7:94:6e:b3:dc:22:c7:aa:0b:1e:
                    ff:ea:1e:9a:fb:b8:3e:ae:e0:bd:a5:ce:27:bf:e5:
                    97:e6:16:f3:b4:53:e5:6f:08:fc:45:8a:58:16:2a:
                    c6:05:f2:22:dd:00:1a:5f:27:dc:67:09:a2:38:66:
                    4e:1b:45:31:24:5a:cc:5f:a8:33:a2:e7:95:f3:e6:
                    63:97:4b:98:5e:7e:1e:80:71:45:8f:75:80:1e:6e:
                    b2:18:66:13:24:d9:70:28:50:2d:23:f5:55:79:4a:
                    74:80:9e:28:44:62:e4:e2:b3:d6:91:ff:af:0f:ee:
                    10:5e:7e:a1:65:72:67:ea:a5:07:e1:54:9d:5f:88:
                    31:02:b5:9e:13:0c:8b:89:f9:54:a5:da:15:9b:fb:
                    86:1e:b2:f9:39:14:19:f8:ec:50:56:e7:d2:28:64:
                    a0:d6:82:cf:3e:2c:8e:d9:c2:e4:e7:f7:c5:a2:c7:
                    f0:40:88:a1:eb:ff:ef:6e:3f:3e:d0:34:28:a7:79:
                    97:c6:19:61:4e:b3:01:13:05:18:67:34:ba:68:ec:
                    33:42:88:f8:25:54:a0:fc:05:79:ca:2f:82:95:f5:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:70:F1:5D:F0:F2:22:7F:EC:69:E0:7F:A3:FF:99:A4:04:4A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a57528d-e786-3c9c-878e-0b218c9f5514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:92:28:8c:c1:14:e9:70:92:59:1d:4e:1a:a0:37:fd:98:c7:
         f6:a1:21:c3:da:38:1b:04:b3:37:73:f3:34:5b:e0:b3:83:9f:
         4f:9e:24:2c:ee:40:e0:3b:9d:98:6f:1a:32:72:28:89:d6:64:
         a6:3c:7e:fd:b6:42:3a:20:93:b7:f5:ed:a1:ae:43:40:6d:11:
         0e:5e:20:cb:5a:d1:4e:cc:50:67:1a:90:61:ea:16:5a:fd:01:
         e1:09:60:30:c8:8a:f0:d8:1e:a6:ef:b5:ff:ff:55:45:f2:f5:
         c0:4e:f1:7b:4f:3a:bc:7d:02:0e:22:9c:c0:92:a3:07:cc:6d:
         67:41:b6:9d:29:a3:f9:77:69:d5:b5:4a:d1:bf:19:71:76:49:
         00:a2:cb:2e:77:9d:31:25:ff:1a:d2:68:b6:3e:6d:92:ec:00:
         b1:f6:61:70:64:c5:e1:4a:85:9e:0a:e3:3c:7e:59:bf:bf:c2:
         cb:af:35:55:a5:97:64:25:16:e8:51:01:00:bb:e2:70:d6:d7:
         e9:6b:e3:3c:4f:ac:13:9c:dc:5f:64:dc:01:76:53:99:9a:36:
         b2:4a:3d:b8:52:82:3b:8d:c7:f9:30:25:40:11:d6:d2:0f:a8:
         88:5b:40:41:f9:ba:9b:a0:05:bc:36:ee:68:d1:2f:32:1d:ef:
         cd:ca:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:16:11 2025 by rpki-client