Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3839c1c0-2c86-31e1-8d63-aba71fa45c8b.roa
File:                     3839c1c0-2c86-31e1-8d63-aba71fa45c8b.roa (raw, json)
Hash identifier:          +KUrrgWen5Yq6bZhR2LnMBn10NmqLlPoeGevLR/x8Eo=
Subject key identifier:   11:71:18:A8:B1:08:A8:97:E7:0D:42:77:23:A3:FB:42:D5:9F:71:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF5381E9F08E73DB14FC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3839c1c0-2c86-31e1-8d63-aba71fa45c8b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.60.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:53:81:e9:f0:8e:73:db:14:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=23ac2679-cc1f-41d8-96cf-bc988d67596d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:e2:91:6a:f2:75:26:f9:c3:be:6e:3b:4d:
                    62:c1:db:50:cb:ec:bc:27:f6:6d:33:c5:ec:68:ec:
                    65:4d:bf:2a:c8:98:07:a2:23:3f:cf:d3:8f:54:4c:
                    56:66:86:9e:80:76:ba:0e:67:da:f4:97:09:1f:de:
                    8b:ae:3c:2f:1c:16:88:c9:25:9a:b7:e7:5b:2e:89:
                    7c:a4:15:ee:c0:71:b6:18:1a:3d:91:37:b7:d6:26:
                    7b:c8:fb:82:42:b7:b7:2d:1b:de:e6:60:10:37:f2:
                    ce:fe:7b:0b:95:37:a1:63:2f:f7:24:c8:7d:1d:46:
                    33:a2:65:15:ed:80:f0:c0:60:80:2b:3d:11:73:b5:
                    3a:2f:99:d9:17:48:a5:60:90:84:1f:1f:1a:a4:0f:
                    d7:77:af:eb:80:c9:eb:35:0a:dc:68:a2:c9:5d:2a:
                    65:be:63:20:15:8c:60:b0:e1:18:f6:fd:64:83:e5:
                    42:3a:2a:2e:07:8b:15:82:5e:38:e0:c3:06:07:2a:
                    36:f4:b4:8e:ad:26:44:ea:94:7b:02:3f:8b:fe:c7:
                    13:6b:d8:49:67:e1:64:2a:c4:dc:2f:97:16:7d:19:
                    9e:3b:cc:12:75:10:8c:d4:b1:f1:e4:f8:1b:f5:97:
                    8c:58:82:8d:f8:38:75:a7:8e:ae:df:a0:5b:63:9a:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:71:18:A8:B1:08:A8:97:E7:0D:42:77:23:A3:FB:42:D5:9F:71:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3839c1c0-2c86-31e1-8d63-aba71fa45c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.60.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:84:41:3d:51:f9:d9:5e:af:0b:a9:e9:04:4f:91:26:75:
         af:16:80:fe:94:e2:ce:d1:eb:e2:0a:36:5e:64:da:e4:51:25:
         0f:ac:23:83:86:bc:bc:84:da:58:b4:20:2a:27:37:85:3a:3f:
         b1:79:d0:e8:7f:70:a2:16:e5:fc:ed:d4:7e:85:10:52:0e:76:
         70:14:82:e1:72:f4:95:33:ac:38:d4:0a:02:42:93:94:b5:41:
         f4:b9:e8:ef:44:83:0f:9a:d7:e5:2a:fb:cf:64:81:7f:83:e2:
         54:c5:d8:df:56:1d:5b:f4:b9:15:3c:95:b5:b4:44:1c:27:a9:
         10:6d:45:ce:85:a8:f8:dd:91:41:15:5e:5d:e3:0c:72:4c:35:
         ee:70:f4:39:89:92:e8:00:70:f7:a0:b5:f8:39:df:3b:89:c4:
         2a:1b:e0:44:14:42:00:09:81:0c:cd:62:b7:d0:98:7d:fa:86:
         d4:39:2e:bd:dc:01:82:38:bd:c1:70:fd:00:3b:c0:6f:2c:9e:
         a3:af:35:1d:3e:12:a8:75:2e:de:dd:b0:c3:e8:45:3f:9b:53:
         37:a3:97:2f:8f:87:d7:e8:64:67:17:fa:d1:cb:fe:10:90:b3:
         38:14:47:d1:96:13:95:90:fc:21:98:c5:c1:b8:96:0b:7e:07:
         d6:97:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:53 2025 by rpki-client