Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
File:                     ebce2800-71e6-302f-a9a7-77ba35072652.roa (raw, json)
Hash identifier:          wZ/ztfcSYi17A/hrTAIItabqjpT/69E6jeihnNykM4o=
Subject key identifier:   0B:F9:B3:42:99:55:D8:24:CB:1B:4A:C5:5C:56:1E:F0:D7:80:7D:C1
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584B328C3425C0E16831706AE300
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     15267
IP address blocks:        68.69.224.0/19 maxlen: 19
                          68.69.224.0/20 maxlen: 20
                          68.69.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:34:25:c0:e1:68:31:70:6a:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=6dc36fc1-88ca-465b-ab3d-e8a14877874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:ad:ad:22:7a:51:23:07:53:c2:15:9b:ea:
                    ec:00:46:41:d7:93:79:a5:8a:9d:f1:54:2a:92:0f:
                    44:3b:ed:cb:8b:4a:2a:f8:94:84:61:8e:8a:c6:d8:
                    cd:17:e3:db:ef:bc:be:6a:64:84:61:60:45:0a:5d:
                    3b:6e:cc:68:d9:1c:31:43:d0:2e:e4:34:45:c6:e8:
                    2c:4d:ec:47:9f:b6:83:a3:47:9f:b9:b8:cc:84:7d:
                    8f:c2:ae:1d:7b:51:48:f3:46:a6:4d:3e:58:05:38:
                    12:2e:23:7a:1a:d7:a2:3e:89:17:8f:05:93:fd:38:
                    51:e3:5d:60:24:a3:e7:2e:9d:0e:6f:dd:39:91:6e:
                    e4:50:ba:a5:65:bb:23:c8:76:fe:3d:43:1d:14:15:
                    ff:f0:e8:74:0b:52:18:f6:16:ea:1a:2c:f2:8c:13:
                    3a:d2:c6:85:f8:6d:ff:ff:b6:26:da:26:29:f0:01:
                    c1:bb:a6:e6:34:7a:55:6a:61:82:c6:ce:40:fd:95:
                    27:a5:d8:66:5b:c3:8a:80:95:ad:24:ff:93:ae:78:
                    30:20:76:8e:f9:a6:f7:b3:72:15:35:f2:22:af:4d:
                    04:b6:88:d0:5f:d0:46:a8:8f:45:2e:cc:b2:46:a1:
                    af:9c:5a:1a:e0:b7:d4:8a:ff:b4:27:b9:6c:48:af:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:B3:42:99:55:D8:24:CB:1B:4A:C5:5C:56:1E:F0:D7:80:7D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:c8:b2:7c:35:58:83:c4:b2:23:21:76:06:50:1f:21:6b:
         04:70:6c:64:5e:48:49:b8:ae:f2:19:05:d1:25:d8:20:8e:bb:
         c4:68:4f:7e:cb:07:74:a3:d6:d8:07:6d:61:56:0b:d9:2f:95:
         b6:6f:27:5f:90:5a:fe:29:38:51:be:a1:df:2f:83:14:b5:3f:
         17:03:ab:5e:bc:fc:30:59:3a:bd:2a:6e:eb:26:2c:f1:90:5b:
         2f:47:1a:fb:e9:6c:7a:28:39:9b:bb:2c:e9:41:16:7a:32:24:
         51:c2:4d:8e:c7:e9:31:74:a6:3f:3f:4d:67:c0:d1:cc:15:fa:
         7b:60:e4:09:61:78:e2:79:c7:06:c4:2a:c0:89:ec:93:a5:e1:
         10:d8:67:cd:8d:fd:61:e0:09:c6:1a:82:73:e8:59:04:70:b9:
         b3:93:0b:f0:9d:ad:c0:ed:85:11:60:b3:ea:c1:2a:b1:7c:58:
         d6:46:a2:d5:38:e8:42:68:4f:95:47:d4:28:e4:4a:af:b9:5e:
         1e:7b:bc:c2:80:b2:8f:9b:0d:70:b8:50:47:fa:b2:b8:bc:80:
         b1:33:cb:de:86:27:82:54:3b:35:8c:16:6c:82:5c:b5:0b:42:
         e0:22:e3:35:0b:be:35:e1:34:44:6b:e2:54:fd:2a:e4:52:cc:
         af:a1:1e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDQlwOFoMXBq4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw
OGU3MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
NmRjMzZmYzEtODhjYS00NjViLWFiM2QtZThhMTQ4Nzc4NzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqmtrSJ6USMHU8IVm+rsAEZB15N5pYqd8VQq
kg9EO+3Li0oq+JSEYY6KxtjNF+Pb77y+amSEYWBFCl07bsxo2RwxQ9Au5DRFxugs
TexHn7aDo0efubjMhH2Pwq4de1FI80amTT5YBTgSLiN6GteiPokXjwWT/ThR411g
JKPnLp0Ob905kW7kULqlZbsjyHb+PUMdFBX/8Oh0C1IY9hbqGizyjBM60saF+G3/
/7Ym2iYp8AHBu6bmNHpVamGCxs5A/ZUnpdhmW8OKgJWtJP+TrngwIHaO+ab3s3IV
NfIir00EtojQX9BGqI9FLsyyRqGvnFoa4LfUiv+0J7lsSK/VmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAv5s0KZVdgkyxtKxVxWHvDXgH3BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1
MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvZWJjZTI4MDAtNzFlNi0z
MDJmLWE5YTctNzdiYTM1MDcyNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3
ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh
MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj
NmViYTA4ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFREXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvKyLJ8NViDxLIjIXYGUB8hawRwbGReSEm4rvIZBdEl2CCOu8RoT37L
B3Sj1tgHbWFWC9kvlbZvJ1+QWv4pOFG+od8vgxS1PxcDq168/DBZOr0qbusmLPGQ
Wy9HGvvpbHooOZu7LOlBFnoyJFHCTY7H6TF0pj8/TWfA0cwV+ntg5AlheOJ5xwbE
KsCJ7JOl4RDYZ82N/WHgCcYagnPoWQRwubOTC/CdrcDthRFgs+rBKrF8WNZGotU4
6EJoT5VH1CjkSq+5Xh57vMKAso+bDXC4UEf6sri8gLEzy96GJ4JUOzWMFmyCXLUL
QuAi4zULvjXhNERr4lT9KuRSzK+hHvo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:27 2025 by rpki-client