Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa
File:                     1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa (raw, json)
Hash identifier:          NHpZy4oS/i5I8b+3CMHz5jSzdD+BtGQKt0bxuVQOXwk=
Subject key identifier:   A8:ED:85:6C:7A:75:E1:EE:49:95:10:11:47:EF:B5:93:13:B4:5F:4E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B0B76BC32BC79259C2032D080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     13332
IP address blocks:        67.227.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:bc:32:bc:79:25:9c:20:32:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=33b4e120-a42d-4c1f-8022-f4a242e58191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:48:1a:67:2a:c2:a3:40:07:ab:b4:0b:ee:
                    9e:89:8d:ea:d1:10:8c:49:2e:4e:c0:5e:53:c8:cb:
                    32:c9:f2:15:1d:1b:e4:44:58:55:a8:3f:19:0f:c2:
                    49:46:b5:e9:0c:eb:2a:7d:e2:48:e1:93:d6:02:b4:
                    6c:e2:dc:b7:47:f5:a5:6e:b3:b2:28:e7:68:66:4d:
                    0c:f6:4c:d0:21:fc:d3:ac:ca:40:7d:5c:3d:bf:66:
                    8a:31:e2:2d:7e:27:ce:c6:71:0b:50:05:bc:83:ef:
                    d1:63:63:ec:e9:de:7a:60:b0:3e:93:30:22:df:a2:
                    b0:85:38:c9:0c:42:7e:8b:c4:78:75:d5:71:89:2a:
                    5f:fa:c5:8f:c8:ae:50:de:18:ef:0b:9d:1b:08:87:
                    ca:eb:d6:9b:eb:20:a2:80:b2:cb:64:48:6e:30:55:
                    2c:ac:80:8d:1a:eb:d2:ad:ab:5b:87:f4:c2:bc:e2:
                    59:a2:56:08:c7:18:80:3c:97:ad:e0:14:5a:b2:d2:
                    bf:71:86:b7:c2:e0:7a:2b:2c:28:bb:11:e6:88:63:
                    64:9b:e8:10:22:49:2f:d6:ea:85:aa:85:f7:a5:a2:
                    65:e8:9b:6d:40:72:5d:78:34:ec:12:f7:89:a1:03:
                    fb:f5:6e:f4:88:27:b4:2c:fb:ec:b7:0a:05:e2:ea:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:85:6C:7A:75:E1:EE:49:95:10:11:47:EF:B5:93:13:B4:5F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:0c:93:66:aa:5e:1a:35:64:14:40:a5:f8:7f:36:4c:28:
         76:b3:bc:a8:96:32:b6:41:d2:77:c6:8e:99:6b:62:8e:a0:12:
         fc:db:09:2a:e2:78:92:72:75:77:3c:97:59:ea:2d:f2:7a:cf:
         4f:f0:8a:2a:a7:6c:50:cd:09:bf:9d:d9:1e:d6:26:f4:1a:4a:
         1e:a4:51:ca:1e:1e:e1:1b:ce:2d:8a:9c:ef:b1:55:2a:3c:aa:
         54:b4:ef:48:da:95:f0:76:5a:3d:34:6f:a8:0a:8a:7a:d4:0c:
         00:b7:55:f1:60:ec:2f:fd:e0:e6:80:9f:c1:b6:64:7a:8b:af:
         84:f6:0b:da:88:4b:15:ea:a8:3f:71:a5:7f:44:aa:ad:ad:2b:
         95:ab:90:ae:ef:b2:4b:99:06:82:3c:f9:4b:d8:46:26:88:53:
         fe:1c:a3:38:15:c2:c7:c5:59:c3:f6:ad:aa:6f:2c:af:37:eb:
         b3:92:fc:1c:41:ec:ed:0b:a3:f2:6f:bf:ee:36:95:47:fb:9a:
         a4:82:51:3a:03:8a:a6:98:0f:67:80:c4:2b:ce:12:61:08:38:
         90:9b:70:9f:01:67:6c:cd:b1:56:2b:d5:53:6a:26:e8:73:ef:
         7f:38:8e:9a:23:1c:15:ee:93:08:ce:0a:c1:70:5f:30:9e:af:
         8b:58:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 18:04:52 2025 by rpki-client