Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2230386e-b10c-31b1-a400-f844a946f7ce.roa
File:                     2230386e-b10c-31b1-a400-f844a946f7ce.roa (raw, json)
Hash identifier:          sakjzNiNt4I4UWt35HSr4bVo6wg/gDj57zJ4KcIgy0k=
Subject key identifier:   64:89:19:37:01:C0:F7:96:A0:E7:03:40:1C:4E:7C:66:C2:10:CA:23
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584B0A115F0F5A8FF4948C5191C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2230386e-b10c-31b1-a400-f844a946f7ce.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     61317
IP address blocks:        67.43.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5f:0f:5a:8f:f4:94:8c:51:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=b15fde14-9b60-435f-9fad-aa38f614c869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:80:0a:47:a6:ff:95:05:e5:cb:93:98:a1:
                    7c:12:ae:d7:49:ba:63:1e:a2:39:3e:77:ee:eb:96:
                    6d:ca:4f:58:19:62:5f:15:91:76:ba:c0:fe:6e:0e:
                    de:bf:cf:e1:1d:2f:bb:99:96:9f:e7:ea:01:c4:ff:
                    09:ea:c8:4b:7d:f0:55:93:4f:4e:cd:c1:d2:c3:97:
                    0a:51:e7:ba:90:3e:d5:9a:8e:73:3d:2b:51:f4:81:
                    c6:85:59:3c:7a:84:f0:01:8d:6d:a0:42:5e:4f:05:
                    bc:53:d1:a1:2e:ce:1a:70:5c:02:5f:9f:af:6f:9d:
                    8b:a9:35:4e:44:f5:3d:7e:af:97:af:5a:1e:db:7c:
                    12:50:5b:2c:16:5a:7a:ee:bb:50:1b:71:85:ab:65:
                    c2:d7:7b:8e:ca:2d:81:ef:f5:c2:40:71:ef:45:97:
                    1d:32:f6:8c:75:11:14:5a:ac:f3:12:75:1b:48:fe:
                    70:93:b8:66:85:45:8f:40:b1:1f:f4:cc:d2:43:4d:
                    59:c4:7c:ae:06:04:a5:ec:b1:2d:f5:94:da:4b:af:
                    46:dc:42:2e:8e:8b:10:01:62:94:a1:db:89:cc:5c:
                    7d:b0:61:1b:0a:c9:ab:a3:d8:08:3a:24:c6:8f:9e:
                    5d:df:3e:8a:aa:8f:e3:b1:87:b0:7b:fd:f3:79:08:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:89:19:37:01:C0:F7:96:A0:E7:03:40:1C:4E:7C:66:C2:10:CA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2230386e-b10c-31b1-a400-f844a946f7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:70:7f:ee:ed:60:ad:cd:e2:e2:7f:9f:84:0e:ae:f2:c5:0a:
         de:97:7f:9b:8f:1f:b2:09:71:6d:09:2e:65:d8:5d:1a:8c:89:
         7f:15:4e:19:99:67:74:10:e5:f1:60:1e:36:b6:8b:27:7f:b3:
         88:28:4c:42:39:04:89:a1:5a:25:07:38:dd:b0:31:81:94:73:
         82:d8:80:e5:cb:81:78:61:87:86:7f:f8:06:1f:64:4e:35:e8:
         34:23:10:46:48:bf:fe:f9:62:32:d7:20:3f:3b:88:9d:40:59:
         ef:c0:37:fd:0c:40:3a:a1:cf:57:60:a3:8e:ba:f4:ae:ed:28:
         2a:9d:36:dd:cb:52:7b:ab:3c:b4:2e:52:7f:a4:1e:7e:fd:d1:
         85:87:95:40:90:34:0c:55:e1:ca:ba:61:63:fc:00:9c:e9:69:
         5d:e1:57:0a:ab:37:ac:3b:f9:cb:97:1e:b1:c4:36:00:77:40:
         2e:bd:b2:17:1f:98:3d:68:03:be:4e:bd:8e:02:12:3b:f1:a7:
         f9:70:6f:53:2a:6b:15:dc:16:6e:74:d1:3d:cc:6a:ce:d1:83:
         f9:56:e3:6d:51:e6:1e:2f:9f:e5:e7:36:f5:0a:bc:73:e9:3f:
         e7:d5:70:6c:7e:75:57:cb:6c:d9:10:06:93:0d:db:76:9e:b9:
         0b:02:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:15:23 2025 by rpki-client