Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/e15ba17e-b4f4-30f3-aae8-6668908f5151.roa
File:                     e15ba17e-b4f4-30f3-aae8-6668908f5151.roa (raw, json)
Hash identifier:          nDMcozexVOo/Wdc4ZeCBLatd5XFPXIPj4o/vsY94Zhc=
Subject key identifier:   07:5D:AB:77:D7:23:65:7B:5A:2E:31:20:7B:03:D4:B8:03:CE:B8:47
Certificate issuer:       /CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
Certificate serial:       010D0C9F4328584B0D77067976E7D1D9A15E7440
Authority key identifier: D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/e15ba17e-b4f4-30f3-aae8-6668908f5151.roa
Signing time:             Mon 01 Sep 2025 18:13:02 +0000
ROA not before:           Mon 01 Sep 2025 18:13:02 +0000
ROA not after:            Sun 30 Nov 2025 19:13:02 +0000
asID:                     400799
IP address blocks:        68.169.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0d:77:06:79:76:e7:d1:d9:a1:5e:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
        Validity
            Not Before: Sep  1 18:13:02 2025 GMT
            Not After : Nov 30 19:13:02 2025 GMT
        Subject: CN=d6f3857e-7ed3-454c-b8de-5c3ffd5f3ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:e7:f1:b7:e6:64:4e:96:fe:73:41:78:e2:
                    55:0d:fd:a4:a5:91:8e:51:04:c7:3b:f3:0e:54:ab:
                    5b:cb:25:1e:fa:fe:dd:e6:3c:21:d7:a6:9d:01:f5:
                    eb:df:8a:34:46:9f:63:b1:10:5b:3a:d3:76:3a:4b:
                    f0:9b:8d:bf:3f:d8:0e:60:ab:20:da:1d:a8:5b:3f:
                    a8:07:96:fb:f7:a2:b7:ab:e8:e0:ff:2e:5a:fc:ee:
                    66:3d:a3:4e:5b:9b:0f:d0:c4:23:c8:ff:a0:77:74:
                    ee:a4:ed:2c:5c:bc:f8:f7:2a:85:e0:8d:c0:56:b8:
                    d9:df:de:93:41:e1:d5:f4:52:54:4c:ff:98:3b:74:
                    d4:40:8b:f6:44:7d:49:64:34:57:1c:5a:50:41:64:
                    8d:b7:ba:7a:a4:a2:a0:77:e2:b2:a0:ff:09:99:3d:
                    a2:f5:af:0f:3a:6c:47:0a:ca:5e:0c:8c:6f:3f:38:
                    4d:fd:e4:f7:37:ad:90:5d:a9:bc:24:ba:d8:be:dc:
                    7e:2c:fe:12:ab:ed:f1:e2:78:a1:d0:fe:46:37:db:
                    a7:df:5d:5f:af:d9:62:8c:18:3b:fe:a2:d8:a3:7b:
                    27:7d:d1:8e:12:51:4f:0e:39:42:7d:79:aa:ff:a6:
                    e2:8c:c1:b0:bd:04:10:54:13:ec:a8:b3:00:d7:2e:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:AB:77:D7:23:65:7B:5A:2E:31:20:7B:03:D4:B8:03:CE:B8:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/e15ba17e-b4f4-30f3-aae8-6668908f5151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl

            X509v3 Authority Key Identifier:
                keyid:D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:7f:2f:2d:9e:d8:fe:2b:52:a3:26:c2:6d:58:7a:2e:90:29:
         4b:2b:df:3d:36:a4:6e:c7:15:ee:ce:3d:dc:23:a9:62:5f:43:
         8c:49:9d:44:dc:a4:98:d7:3a:b5:42:c9:f8:29:97:7d:a4:a7:
         2d:0c:38:bd:c7:da:ab:1b:7d:de:ab:b8:cd:25:57:b2:82:d5:
         a4:35:b6:1b:61:32:b7:f4:0e:d1:45:86:3b:d2:74:a8:fd:eb:
         78:d7:b4:7f:9f:05:a1:8f:7c:e9:19:bb:ed:8c:cd:c0:9c:72:
         44:e4:e2:37:f6:c9:03:ff:42:ec:a1:fc:ed:35:7d:34:00:ef:
         66:c3:60:42:54:a7:6f:7b:4d:d5:6b:d0:a8:65:61:ec:10:94:
         8b:91:72:6d:53:db:4f:fe:57:5c:bf:ae:89:e6:99:63:3c:e3:
         a5:59:ab:ad:f9:54:4d:17:95:2b:b3:41:57:39:72:a6:e8:49:
         e2:32:85:cc:7d:d7:6d:30:8c:71:7d:a1:10:2c:25:c8:97:28:
         1f:d3:75:0f:b2:68:f8:7a:ad:1e:4d:a4:44:d8:61:a5:24:ef:
         c0:d7:6c:1f:ce:45:d9:49:d1:3e:3d:68:4d:37:c4:e2:85:ee:
         e2:f1:73:a3:b4:1f:13:4f:e5:3e:a6:51:a8:84:17:33:55:97:
         5f:96:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:46:28 2025 by rpki-client