Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ccc02be3-e111-3185-9ac5-7d2b007373cd.roa
File:                     ccc02be3-e111-3185-9ac5-7d2b007373cd.roa (raw, json)
Hash identifier:          VlANfbNB43J7JQv/i1+tDYQH93+qKN9ChPtpC+A8UEc=
Subject key identifier:   36:53:74:1C:7D:53:4F:AC:97:8D:17:EF:7A:F7:B2:6B:D4:FB:A0:A9
Certificate issuer:       /CN=e02eda8d-679a-4d59-95c2-5097086d9468
Certificate serial:       010D0C9F4328584AB13DC0BF767BD456A97EC300
Authority key identifier: EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ccc02be3-e111-3185-9ac5-7d2b007373cd.roa
Signing time:             Wed 30 Jul 2025 17:23:16 +0000
ROA not before:           Wed 30 Jul 2025 17:23:16 +0000
ROA not after:            Tue 28 Oct 2025 17:23:16 +0000
asID:                     33647
IP address blocks:        67.213.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b1:3d:c0:bf:76:7b:d4:56:a9:7e:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02eda8d-679a-4d59-95c2-5097086d9468
        Validity
            Not Before: Jul 30 17:23:16 2025 GMT
            Not After : Oct 28 17:23:16 2025 GMT
        Subject: CN=b91d2134-c15f-4135-9426-5691da753cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:65:1e:e3:cf:14:37:0d:ea:e7:fc:42:3d:
                    cd:c4:9e:f3:d4:32:31:b6:8d:cd:01:23:68:51:66:
                    54:2a:57:28:c6:d3:45:7c:db:19:89:94:f2:79:59:
                    8a:51:1f:9c:93:3d:3d:29:8f:65:38:07:7e:b8:c4:
                    94:d4:47:e7:3f:24:a5:fd:dd:53:76:6e:de:fd:7d:
                    25:84:2a:4a:5d:a7:bd:20:79:fb:20:24:09:5d:66:
                    3b:d1:ca:53:71:89:67:fd:6d:b2:17:ca:57:d5:01:
                    9a:d8:c2:c3:7e:f1:4f:88:f6:58:1e:ff:56:23:6c:
                    fb:ab:0b:4c:11:c6:89:91:39:4a:b3:4f:4f:03:c2:
                    ac:23:8c:41:74:15:5c:34:f2:1b:98:f3:95:23:7d:
                    cb:1c:23:cf:c3:24:f3:4b:63:85:06:0a:82:4f:a2:
                    2d:7a:0d:9c:c6:e3:76:22:f6:75:b6:be:be:19:e3:
                    37:e3:4b:b0:e3:03:77:bc:d9:c4:b7:7d:73:d3:2d:
                    a2:a9:61:6e:64:23:e9:20:3a:72:99:70:e0:3e:58:
                    5a:8c:af:34:8c:37:d5:0f:8f:75:df:b6:94:2d:9c:
                    25:1d:f2:3f:7f:af:de:83:ec:c7:fc:42:7c:7d:55:
                    1e:75:eb:6e:d5:f0:14:cb:08:c0:d5:55:bd:67:b5:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:53:74:1C:7D:53:4F:AC:97:8D:17:EF:7A:F7:B2:6B:D4:FB:A0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ccc02be3-e111-3185-9ac5-7d2b007373cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.crl

            X509v3 Authority Key Identifier:
                keyid:EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:e9:e0:84:ac:3a:46:ff:16:87:c7:66:56:83:e2:b2:01:
         28:04:63:88:de:fb:cb:ed:eb:aa:e6:2e:01:12:ab:62:91:1c:
         c3:b0:8e:21:c1:ad:09:89:b4:cc:bd:59:c8:b7:01:1a:68:7e:
         f7:ed:9c:49:03:0d:19:cd:33:ef:4d:b3:1e:3f:8d:39:73:ad:
         41:d9:1d:12:ad:ea:cc:ac:66:3c:87:87:cb:3c:4a:64:da:51:
         58:51:d3:d2:fa:94:4d:57:1a:9c:75:fe:bb:05:ee:be:23:d1:
         29:7a:db:9a:7b:1f:c9:45:a9:46:fa:cd:0c:a8:a3:7e:85:d1:
         c9:ff:f5:2c:fa:a8:bd:f5:84:eb:19:80:fc:c6:9b:df:8b:18:
         63:62:64:db:fe:a8:66:cb:98:f1:c9:69:e2:19:4e:d8:a5:59:
         0f:ee:f5:ae:df:eb:0f:6a:42:99:9d:9d:f2:da:3f:99:51:bb:
         c7:ec:80:31:7a:f3:e3:73:32:75:df:85:de:a9:79:20:7d:c0:
         15:89:76:5f:7f:db:16:c1:2d:17:92:3b:e1:d0:05:f6:d9:8c:
         01:b7:26:7f:bb:4d:d9:b7:a5:e5:ae:18:93:15:04:36:9a:ee:
         67:7f:48:26:ca:84:54:31:da:28:29:19:97:42:13:48:e0:ec:
         0f:5d:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:38 2025 by rpki-client