Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/71b19f0c-7fe5-3a22-9740-6fef089cc262.roa
File:                     71b19f0c-7fe5-3a22-9740-6fef089cc262.roa (raw, json)
Hash identifier:          39KAo76M7oCmeGCV6V2H1bSA7pPweTj0oPRVfFA5dxw=
Subject key identifier:   AA:4D:8C:38:51:39:68:23:2D:27:AD:1B:E8:F6:E5:5B:A2:28:F5:D9
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584A90A0A7B0A43B8422082E201C
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/71b19f0c-7fe5-3a22-9740-6fef089cc262.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     199527
IP address blocks:        68.64.144.0/24 maxlen: 24
                          68.64.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a7:b0:a4:3b:84:22:08:2e:20:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=0d50dda5-9970-4712-91d8-ad4f419d2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:ab:9f:fa:7c:5d:20:78:b3:20:fe:08:86:
                    52:07:b3:b9:bd:79:81:6d:07:96:7a:07:32:e2:92:
                    e1:8a:e0:88:9d:a9:56:c7:8c:08:d5:ef:fb:ac:cd:
                    53:7a:04:bf:13:38:3e:e4:1f:ac:8a:57:8b:85:73:
                    0f:fc:bf:02:46:43:78:63:9d:10:0b:f8:4d:08:51:
                    fd:8b:5d:aa:9c:52:25:3f:ae:14:57:e8:bc:31:ae:
                    70:17:44:8b:07:58:af:75:fe:76:5d:3b:68:24:f6:
                    42:80:9d:5f:87:21:8b:74:2e:bc:a5:c2:a4:32:43:
                    ed:a5:8f:27:14:c0:73:b1:81:34:df:14:35:db:32:
                    5b:a5:68:24:62:f1:48:bf:66:56:ba:5a:f1:31:cc:
                    5c:20:8c:01:8b:aa:d0:ea:e0:3c:2e:72:ec:ac:5b:
                    9f:9d:ef:78:36:8f:6c:be:09:31:10:65:4f:26:f4:
                    e8:e4:55:2f:ab:00:dd:b5:e8:30:72:7d:b0:ec:01:
                    0a:57:fb:7e:61:cd:62:ed:94:c0:26:ac:7a:37:c6:
                    b5:16:25:90:79:b4:eb:d3:0b:5e:1e:d2:ad:e9:ef:
                    eb:51:6b:5a:61:70:92:70:10:a4:86:88:49:36:2e:
                    72:e8:11:87:9d:e7:ec:97:f0:91:4b:d7:3e:37:af:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:8C:38:51:39:68:23:2D:27:AD:1B:E8:F6:E5:5B:A2:28:F5:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/71b19f0c-7fe5-3a22-9740-6fef089cc262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.144.0/24
                  68.64.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:95:f3:68:88:8f:db:bd:ac:da:b6:da:8b:12:f2:b9:9d:f9:
         9e:9f:f1:cc:e1:1d:f5:87:0e:07:fe:ea:56:c3:54:5f:6d:cc:
         ea:f2:d5:25:8c:11:11:06:c1:43:39:c7:9e:ff:a3:7b:2e:8d:
         d5:ba:86:eb:93:39:7e:02:b8:6e:6b:a2:3a:26:61:41:89:e6:
         87:94:91:d3:01:ab:cb:75:77:95:fa:68:c6:20:3d:c8:eb:8d:
         eb:33:4c:e0:2a:e0:a7:25:8f:ab:cc:f6:7f:17:77:07:9a:e6:
         9c:f1:bf:0f:26:d8:29:8e:dc:44:e9:de:0f:d6:88:55:7c:ac:
         35:3f:aa:f1:53:e6:03:26:bc:24:a3:46:21:b5:ca:27:80:a9:
         c4:b3:50:44:14:40:79:4e:3e:6e:7f:93:c8:ea:63:41:97:28:
         df:a7:9d:96:eb:46:37:df:19:47:5e:95:41:db:d4:24:e7:18:
         3a:fa:4c:5c:f9:ea:1f:71:e0:e4:07:32:df:6b:e9:07:39:eb:
         ee:bc:0c:46:25:bf:4c:a1:20:0a:03:70:93:02:fa:6c:64:d0:
         92:8f:42:f8:20:8d:68:10:bd:68:57:d6:f9:56:6d:32:fc:d0:
         14:52:5a:81:be:88:58:76:43:ad:b6:86:d2:56:62:ee:8d:62:
         ec:4a:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:01 2025 by rpki-client