Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b34847e8-e932-39e6-85ba-34422a1c5e83.roa
File:                     b34847e8-e932-39e6-85ba-34422a1c5e83.roa (raw, json)
Hash identifier:          9hojC4AXg79RJIhNwx+TTY5Af33bzQnS7dt+ZF1KLK8=
Subject key identifier:   D6:D7:28:8C:31:3A:39:E0:40:55:F7:09:DE:28:E0:1D:EA:C4:E5:3E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A8CEADFFE8B0F4B8871914E00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b34847e8-e932-39e6-85ba-34422a1c5e83.roa
Signing time:             Thu 17 Jul 2025 17:07:11 +0000
ROA not before:           Thu 17 Jul 2025 17:07:11 +0000
ROA not after:            Wed 15 Oct 2025 17:07:11 +0000
asID:                     46772
IP address blocks:        68.182.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:ea:df:fe:8b:0f:4b:88:71:91:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 17 17:07:11 2025 GMT
            Not After : Oct 15 17:07:11 2025 GMT
        Subject: CN=d4df6a6c-23e9-4cb4-8570-db72367862ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:97:72:7c:4b:1a:c7:19:a0:00:a5:f0:85:
                    8c:21:91:3c:09:55:8f:76:04:f0:84:9a:e1:ae:19:
                    14:94:46:ed:6c:b0:af:60:01:ec:65:d2:fb:de:53:
                    ab:a2:88:63:6f:29:84:b9:46:f8:4a:e8:bb:57:0f:
                    a3:21:4e:44:29:ef:21:f8:f8:29:2c:4b:57:8a:5f:
                    d1:2a:32:0b:ee:1e:3c:b3:b2:c0:8e:5a:5a:69:ef:
                    fb:08:f3:47:f6:37:f0:70:f1:6d:fd:5a:83:5b:90:
                    66:f9:98:8e:84:f1:2b:e7:87:d3:bf:23:b3:2d:7e:
                    b3:b8:9e:a7:6d:64:63:27:3f:40:81:16:54:90:b8:
                    90:9b:c0:60:2e:7b:e7:1d:f0:46:2f:a6:9b:02:da:
                    59:1c:75:e4:64:32:6a:ad:0b:2f:93:d1:63:ec:95:
                    ef:30:31:96:0b:db:7e:27:80:ac:8c:ab:c1:c8:f4:
                    1b:d8:6a:88:a8:74:98:39:fe:4e:d8:b5:c8:d6:37:
                    19:6c:8e:fe:36:82:d1:6d:00:71:ee:d7:44:48:40:
                    39:6d:2c:18:af:72:bb:21:ea:f4:9a:4c:fd:25:e1:
                    42:5e:9c:76:26:c2:a8:c1:af:8b:be:d7:83:b4:5e:
                    3a:5c:9e:9d:a7:26:af:f7:b6:ba:9b:80:3c:0b:8f:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D7:28:8C:31:3A:39:E0:40:55:F7:09:DE:28:E0:1D:EA:C4:E5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b34847e8-e932-39e6-85ba-34422a1c5e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:f6:6b:44:0a:fc:c4:f2:73:e1:3a:91:68:a4:91:6d:c6:
         cf:58:c3:b0:43:f4:ad:67:5b:81:27:0c:83:e6:b1:0b:15:65:
         a9:cb:47:9e:43:69:0e:05:05:dc:8d:ec:ba:a5:f5:3c:7f:46:
         70:e4:ff:0c:73:50:ff:49:7a:76:e8:5c:77:dc:fc:00:38:c4:
         8d:4a:31:85:21:7e:d0:42:64:7b:73:33:08:f9:f2:b3:40:96:
         7e:33:e6:fb:0f:26:b7:d5:0b:32:6f:43:b5:51:89:16:36:c8:
         e0:ea:30:8d:52:37:a1:4b:be:0f:bb:64:af:ee:b7:69:04:3d:
         9f:7b:7d:cb:d7:67:22:74:28:75:97:0b:5c:9e:c6:71:f2:a6:
         00:fa:76:a9:55:9e:bb:91:a0:fd:21:76:4f:31:54:00:f7:29:
         22:b7:88:89:72:ae:56:c6:f7:2c:c8:cc:2c:ab:e3:13:d3:1c:
         d8:55:0d:a9:f5:7d:16:ac:61:5e:dc:c4:5c:a2:4f:f6:ab:60:
         63:6c:2a:88:b2:c1:c8:23:3c:5f:bc:be:95:4c:2c:d8:51:9e:
         31:8f:e0:3c:56:67:14:51:95:1d:d3:b0:cf:b2:e5:e6:0f:6a:
         b7:0c:7a:e2:51:63:63:fb:3b:00:b4:cb:79:12:e3:90:7e:cb:
         47:f2:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:28:00 2025 by rpki-client