Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b615aa4-3bad-3754-ab5e-ce7c943d5cd1.roa
File:                     2b615aa4-3bad-3754-ab5e-ce7c943d5cd1.roa (raw, json)
Hash identifier:          SInTPhwCXp40H5VPF20yNn8oDj8IlMrfwaO31buGGmM=
Subject key identifier:   19:DA:D9:96:DB:B9:1F:92:FC:65:80:18:2D:19:95:43:54:14:2D:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C95DD0FA84811A5E48880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b615aa4-3bad-3754-ab5e-ce7c943d5cd1.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        68.35.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:95:dd:0f:a8:48:11:a5:e4:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=945524a8-9108-4cb3-9516-0fa6c44b495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:4b:0d:1f:d5:75:46:2a:c0:76:4c:27:dc:
                    7a:37:f4:52:50:de:2b:d4:f6:1c:6e:9a:66:66:ba:
                    f9:94:be:4b:26:4b:b7:4f:c3:86:8e:30:b6:4d:4f:
                    2a:6d:c2:f5:6b:cd:62:02:dd:be:45:ee:10:50:bb:
                    cb:17:9f:12:b2:03:d1:25:2b:c0:31:f0:c7:e3:1a:
                    aa:fe:6d:70:9a:f9:ca:d4:6a:3d:bc:d1:05:35:c5:
                    d8:cf:06:37:c3:da:3f:d5:09:2f:8b:bf:da:13:93:
                    a9:08:38:07:27:98:82:c9:8a:d8:72:39:ea:12:bf:
                    fe:e8:f5:40:c1:2d:b0:0d:4a:3d:2f:b8:3a:c9:e7:
                    17:f6:4e:d6:f2:33:f9:d5:8d:8e:b8:8c:1c:ca:dc:
                    40:3a:32:53:58:88:78:52:d2:89:b6:3f:14:97:27:
                    7e:ac:b1:25:ff:2a:b6:cc:41:6b:73:ee:5d:0b:fd:
                    01:f3:4b:fd:ac:8c:b4:7b:df:0d:ec:be:ea:92:46:
                    9c:a3:f0:97:a2:25:89:b1:b9:b3:ca:30:5e:87:60:
                    10:9b:62:6e:ef:a3:89:dc:92:db:24:f2:5f:16:aa:
                    c5:e3:ef:57:ac:fa:ea:e2:33:47:87:53:ec:b8:b2:
                    40:aa:c7:4f:9f:4c:23:c5:28:e8:4c:18:2f:35:77:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DA:D9:96:DB:B9:1F:92:FC:65:80:18:2D:19:95:43:54:14:2D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b615aa4-3bad-3754-ab5e-ce7c943d5cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.35.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:4c:20:40:e4:52:83:aa:2e:60:8e:3f:90:80:82:10:2c:
         d1:a4:dc:e2:d6:33:46:55:f7:c5:c8:a9:4c:fe:20:f5:a2:06:
         f3:a2:de:80:e5:2f:ec:dc:44:81:c0:dc:34:08:9a:5b:56:48:
         bf:bd:43:3d:2d:31:5b:ca:9a:11:9c:ef:5c:59:7c:f7:f5:21:
         de:6c:58:0c:ee:9e:42:75:f7:81:ae:f2:8d:62:73:e7:92:a1:
         b5:56:df:a0:b6:f0:12:a8:86:11:1a:99:d7:73:2b:38:85:8a:
         65:ae:6d:b2:f5:d3:a7:be:40:c4:46:f5:ed:2f:c0:29:3b:94:
         e4:f2:47:01:3f:b4:f2:be:25:3c:71:16:18:62:e5:e1:f6:c7:
         1e:82:39:d5:89:ed:b1:b7:6c:1d:e9:c6:89:54:f1:33:e2:8c:
         63:85:ba:b2:95:4e:62:b2:a4:96:fa:a1:fa:25:26:0d:c8:b5:
         c4:97:18:f7:6e:e9:64:7b:36:32:14:90:0c:62:b7:c8:11:db:
         f6:56:53:48:2c:12:95:eb:ef:92:83:27:c7:e6:4d:5e:68:d8:
         98:80:32:31:18:4c:56:24:72:df:c7:af:8d:12:09:7c:c8:f0:
         7f:8c:bc:ff:ec:f6:fb:4e:d1:d4:32:47:98:07:4a:e5:a8:91:
         c3:2d:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:57 2025 by rpki-client