Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec0323a4-66ec-3025-a3b8-c799f396d47d.roa
File:                     ec0323a4-66ec-3025-a3b8-c799f396d47d.roa (raw, json)
Hash identifier:          T/5gGanLQbxqjCv/707Sqpu8C42IXaSY7ensPRnJC+8=
Subject key identifier:   10:26:CF:A3:60:17:DA:AE:F9:2C:B3:4C:86:0B:9A:36:F1:6B:3D:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBE0981857032352DD3D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec0323a4-66ec-3025-a3b8-c799f396d47d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        68.87.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:e0:98:18:57:03:23:52:dd:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1fdf820f-c8d4-4585-9b09-c13377ba6897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:41:33:2a:d0:b5:b6:f8:64:25:a7:e4:98:df:
                    59:94:d3:40:b3:1a:fb:86:70:9b:92:08:c8:82:35:
                    66:eb:70:26:fb:80:e5:ec:e1:8b:6c:1d:41:a8:8a:
                    45:07:fb:36:40:19:74:69:ef:f3:53:b6:32:9d:47:
                    88:91:3a:14:d9:46:3e:70:64:bb:3e:3a:c0:df:e8:
                    3a:14:db:23:00:a4:f3:15:4e:7e:3c:4c:ab:f7:52:
                    b1:10:40:0e:78:d6:b8:15:87:7c:e1:ae:8c:17:26:
                    14:c3:12:66:ba:f1:9f:af:e8:cd:25:a3:04:df:4e:
                    88:90:63:54:d6:09:25:8f:0e:58:e3:bc:01:7f:4d:
                    fb:0f:c6:ed:2d:78:38:7b:c6:2f:c5:a4:d6:c8:54:
                    1c:0e:60:b7:1e:f2:e1:f6:d3:e9:97:be:76:d1:a6:
                    a0:cb:12:de:a1:22:d1:91:92:b6:e6:fe:ee:e1:b3:
                    85:b7:a9:60:31:84:d7:54:be:6f:0d:91:d0:41:59:
                    15:98:ec:7f:44:03:1d:06:6a:25:06:dc:70:55:41:
                    4e:6b:6e:b5:63:65:04:8e:c6:55:a5:24:a9:4e:54:
                    96:5f:fb:4a:2e:ab:f8:58:e1:d8:16:8d:5e:1e:74:
                    4f:5a:cc:27:29:0a:c3:af:3a:44:6a:4e:45:7f:10:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:CF:A3:60:17:DA:AE:F9:2C:B3:4C:86:0B:9A:36:F1:6B:3D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec0323a4-66ec-3025-a3b8-c799f396d47d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9c:70:b8:22:5c:d0:45:9a:43:c6:6c:07:8a:b0:e0:17:3b:
         3a:9f:c5:19:a4:b3:ab:1c:40:99:7f:a7:ea:4e:f7:6d:d2:c3:
         1f:7f:11:f7:c2:dc:17:53:8b:fb:17:16:cd:d1:dc:20:76:38:
         50:64:1f:ce:b2:56:33:22:c4:70:11:40:27:6f:fa:23:7c:60:
         16:64:32:73:69:86:44:a1:4b:76:fe:a6:4d:a4:6d:c2:ec:3a:
         cb:2e:db:05:d0:15:85:ca:4d:fc:b2:a3:8f:16:46:c4:7c:56:
         d8:e5:43:cf:8b:47:a0:ae:a7:b4:d8:33:00:6f:93:67:d9:d7:
         22:8f:f5:e6:4c:29:85:e2:f9:32:66:ea:45:88:b5:04:e0:8f:
         60:13:6f:fd:54:b5:b3:61:59:90:04:e8:f1:bd:bb:ef:e9:42:
         3a:a9:ac:87:a1:25:23:a4:69:84:89:fc:94:58:7a:45:6c:5a:
         31:eb:d5:bc:2a:4f:ed:aa:2b:9a:be:e5:89:30:dd:cd:30:f6:
         ad:88:71:df:c1:a5:1d:4c:f5:95:3e:b7:cb:42:50:9f:75:98:
         84:bd:70:c7:58:89:fb:42:b5:b2:6d:b7:f3:d8:15:5f:a0:43:
         87:89:82:cf:75:c0:aa:7f:5a:9e:95:f9:34:95:37:36:40:ab:
         0b:02:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:34:21 2025 by rpki-client