Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2648d037-a086-37eb-952b-ad25f7d2eca6.roa
File:                     2648d037-a086-37eb-952b-ad25f7d2eca6.roa (raw, json)
Hash identifier:          lTni2Z78FpAviDsDHClzUes+PfhneqxmDJqVnfGanx4=
Subject key identifier:   16:67:AE:64:CE:98:C7:31:65:A4:51:BB:D9:A5:AF:88:14:72:C4:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEC11BC5B27622F49F99C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2648d037-a086-37eb-952b-ad25f7d2eca6.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        68.83.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:c1:1b:c5:b2:76:22:f4:9f:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3f2c6139-bcbb-4964-9869-4188fa8e0e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:95:50:48:58:79:63:7e:4f:dc:c0:13:ea:
                    ab:e1:66:f2:0e:2a:bc:ff:cb:61:74:16:d3:d3:eb:
                    1b:44:ec:53:e1:ca:aa:c6:d7:d4:e9:fa:f4:9d:f0:
                    61:8f:10:78:15:7b:88:23:17:e3:c7:4a:0a:3a:34:
                    fa:fe:b6:82:0d:80:63:ff:63:45:7f:d5:6b:b0:8a:
                    06:c8:d3:e2:e0:f9:af:63:bc:23:7c:4b:7e:d9:bd:
                    30:7b:84:c6:4e:e6:a0:97:38:db:5e:4d:9b:e9:13:
                    59:27:0d:8d:fd:72:28:1f:e8:d2:4c:66:14:c7:3a:
                    59:b0:c4:18:e4:0a:67:06:d1:f0:28:73:ac:58:6b:
                    9e:fa:a6:20:12:0d:77:60:9c:da:3f:a1:99:b2:2d:
                    da:59:c0:41:d3:1c:bd:f3:16:f9:7e:06:18:fd:e3:
                    6c:d0:d1:de:8a:97:c9:da:80:b5:25:8a:6e:0c:9a:
                    ab:59:69:43:6e:d2:ed:e8:22:24:24:a0:23:c6:b4:
                    fa:fd:c8:91:7b:c4:53:c8:1f:7e:c7:c1:37:db:f3:
                    41:a6:11:35:d7:07:b2:93:f2:70:22:87:ac:d2:fc:
                    64:b9:46:dc:1c:2b:7c:da:5c:c9:fe:47:4f:72:38:
                    47:dd:98:92:4a:ef:be:77:27:8e:3f:2e:fb:4a:85:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:AE:64:CE:98:C7:31:65:A4:51:BB:D9:A5:AF:88:14:72:C4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2648d037-a086-37eb-952b-ad25f7d2eca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:95:b1:67:7f:ef:0b:07:3c:81:10:81:09:7b:ba:78:fd:12:
         25:2b:c7:25:0d:20:92:67:75:b6:61:00:e7:7b:03:1d:17:18:
         08:e7:70:aa:a3:a6:6a:7d:c5:04:e5:3b:cd:6a:8c:bd:a8:a5:
         c1:02:44:b2:88:7a:41:97:3f:d7:8b:06:d8:6a:30:ac:fb:c1:
         e8:65:e8:ef:05:92:7a:4a:78:32:b3:d5:f5:b5:d3:5e:fe:f8:
         b4:6b:8a:24:c6:ac:e5:7e:a5:f6:af:35:22:39:3f:57:a0:b1:
         1d:62:bf:0c:c6:39:a4:df:48:52:48:4a:28:6d:d6:d6:08:50:
         d6:b3:c0:90:40:fd:f4:7c:5d:a4:75:12:63:87:5a:1e:40:da:
         61:94:76:bd:eb:22:fe:2f:e1:6a:7f:ba:ed:54:d3:32:2b:4f:
         6c:c0:8c:f0:ad:db:1f:7c:53:ab:c4:ed:fe:b3:3a:0b:f4:d8:
         bd:a9:34:79:dd:52:9e:05:83:46:0a:5d:79:e9:4d:e2:91:37:
         55:f1:37:8b:95:1b:29:58:3c:ca:e7:dc:8f:8d:85:ff:00:06:
         39:e1:09:d2:91:39:89:38:60:0e:98:27:d7:00:09:4a:78:82:
         17:f0:c6:d4:76:d9:75:5c:c7:69:d6:24:7a:c5:ba:79:88:13:
         42:1c:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:26:23 2025 by rpki-client