Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/55f4f9ac-b99e-3f31-ac6d-369ae7bef7fd.roa
File:                     55f4f9ac-b99e-3f31-ac6d-369ae7bef7fd.roa (raw, json)
Hash identifier:          eqweychqZVPu+Gi3BjFSjfXi18dnxEnGBe2W16ZCkP4=
Subject key identifier:   6F:3D:79:91:EA:92:DB:B6:C0:FC:9A:4A:2B:A4:DE:FC:6F:03:A0:D9
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B0746BAAF994458652877CD80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/55f4f9ac-b99e-3f31-ac6d-369ae7bef7fd.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        67.217.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ba:af:99:44:58:65:28:77:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=6e3b2a8b-b46f-4434-9f90-5b64c8b39111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:75:31:6c:38:e7:38:8a:1e:57:f3:62:ea:
                    7c:f5:ff:b5:d1:35:8c:53:85:4c:33:20:f3:a4:3d:
                    ee:90:68:26:91:8e:ae:10:f4:48:b0:02:6c:35:4c:
                    dd:db:96:b4:82:c3:24:0a:44:e3:70:01:d0:2a:e5:
                    83:d2:37:5e:86:21:0a:bb:38:a9:af:0a:55:af:95:
                    66:fa:b5:05:a3:63:03:c7:01:65:bf:88:1d:b0:e1:
                    d7:6d:5a:db:29:d6:18:77:56:8e:22:fe:c1:b1:87:
                    19:f9:4e:f4:41:1b:46:f2:d6:ad:61:09:52:9e:b5:
                    f7:91:7b:3c:da:c9:d8:b5:2c:2a:74:d5:5f:2f:15:
                    6c:2c:35:71:fc:ae:cc:2f:92:d8:d2:dc:c1:27:21:
                    21:7f:7c:bb:2a:e0:dc:6b:d4:34:7c:e0:c3:13:4c:
                    72:01:6e:80:ef:8b:1a:4d:e4:d8:ea:94:b0:64:4d:
                    94:7e:f6:22:c9:3c:0c:33:be:74:0d:72:d7:1c:05:
                    25:4a:ce:c2:30:06:7a:3b:f0:c8:e0:e8:a4:b1:f6:
                    70:f1:24:89:ec:64:74:ee:37:5a:98:14:48:08:21:
                    b9:7a:53:67:a6:5a:c1:cd:2f:f9:9e:a6:20:42:80:
                    1b:ed:73:68:10:1d:7f:28:46:0d:18:d3:c3:2a:54:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3D:79:91:EA:92:DB:B6:C0:FC:9A:4A:2B:A4:DE:FC:6F:03:A0:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/55f4f9ac-b99e-3f31-ac6d-369ae7bef7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:55:dc:a0:73:9b:ad:e9:da:27:71:52:6b:83:b4:54:9e:84:
         d2:9f:ab:6d:86:cd:1e:42:81:5a:ff:63:af:97:36:46:f5:92:
         d4:aa:d3:29:22:4c:b2:e5:a2:c6:9e:a0:69:28:a2:ba:84:3c:
         73:ce:66:b6:27:98:59:c3:8c:fd:32:93:b3:44:50:2b:0a:1a:
         07:8f:23:dc:48:50:d2:e2:74:23:6b:d3:14:ae:83:ba:b5:cb:
         c0:92:fe:49:97:56:16:89:94:df:9d:e9:53:b7:7a:0e:9a:cf:
         98:9e:37:32:05:ac:3a:7c:4c:43:3d:85:71:02:56:cd:80:d7:
         8c:35:22:94:90:73:b1:48:60:25:09:f1:39:8f:c0:aa:0c:12:
         29:4e:e0:15:ba:43:72:fa:d1:9b:b4:ef:d4:72:6c:3d:74:3b:
         d9:26:cd:89:3a:67:53:aa:81:22:3b:8f:db:40:e9:ae:fd:47:
         4c:ea:e1:de:11:18:01:1f:8d:8b:16:5a:71:45:46:ae:af:02:
         fb:74:c2:ca:32:9c:ac:50:48:65:c4:60:e8:c9:15:3d:da:ca:
         ed:5d:9a:ae:11:a7:b7:14:a8:22:a4:7e:ae:c8:22:4f:fd:e9:
         c2:c6:51:ff:45:e5:b4:32:9b:8e:78:6a:91:95:6f:22:16:64:
         ae:8e:d6:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrqvmURYZSh3zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
NmUzYjJhOGItYjQ2Zi00NDM0LTlmOTAtNWI2NGM4YjM5MTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC11MWw45ziKHlfzYup89f+10TWMU4VMMyDz
pD3ukGgmkY6uEPRIsAJsNUzd25a0gsMkCkTjcAHQKuWD0jdehiEKuziprwpVr5Vm
+rUFo2MDxwFlv4gdsOHXbVrbKdYYd1aOIv7BsYcZ+U70QRtG8tatYQlSnrX3kXs8
2snYtSwqdNVfLxVsLDVx/K7ML5LY0tzBJyEhf3y7KuDca9Q0fODDE0xyAW6A74sa
TeTY6pSwZE2UfvYiyTwMM750DXLXHAUlSs7CMAZ6O/DI4OiksfZw8SSJ7GR07jda
mBRICCG5elNnplrBzS/5nqYgQoAb7XNoEB1/KEYNGNPDKlQxVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG89eZHqktu2wPyaSiuk3vxvA6DZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNTVmNGY5YWMtYjk5ZS0z
ZjMxLWFjNmQtMzY5YWU3YmVmN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlV3KBzm63p2idxUmuDtFSehNKfq22GzR5CgVr/Y6+XNkb1ktSq0yki
TLLlosaeoGkoorqEPHPOZrYnmFnDjP0yk7NEUCsKGgePI9xIUNLidCNr0xSug7q1
y8CS/kmXVhaJlN+d6VO3eg6az5ieNzIFrDp8TEM9hXECVs2A14w1IpSQc7FIYCUJ
8TmPwKoMEilO4BW6Q3L60Zu079RybD10O9kmzYk6Z1OqgSI7j9tA6a79R0zq4d4R
GAEfjYsWWnFFRq6vAvt0wsoynKxQSGXEYOjJFT3ayu1dmq4Rp7cUqCKkfq7IIk/9
6cLGUf9F5bQym454apGVbyIWZK6O1gQ=
-----END CERTIFICATE-----
Generated at Sun Aug 31 22:11:14 2025 by rpki-client