Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c621b61-c5ed-30f2-a53f-2ce744354698.roa
File:                     5c621b61-c5ed-30f2-a53f-2ce744354698.roa (raw, json)
Hash identifier:          cBJDRUW9ma+n4o819ss3aarfrnIgTMqFay/EXJ6D1Ac=
Subject key identifier:   1C:FD:50:FD:6B:41:9B:9E:B7:24:BF:40:B9:E8:A8:33:9C:3A:A5:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6B79BB6A2FB9940A9A7BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c621b61-c5ed-30f2-a53f-2ce744354698.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        68.47.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:79:bb:6a:2f:b9:94:0a:9a:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=d4685466-d9d4-46c4-b1e5-09b37375f053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:a7:bb:30:cd:95:d5:a6:51:c7:92:72:3d:
                    16:c6:ad:48:50:5a:93:ae:f1:14:19:4b:e5:92:2d:
                    49:26:d9:f5:2c:27:a1:4a:f7:63:05:43:1d:35:cf:
                    78:66:36:18:ae:36:57:79:44:1b:cc:df:7e:23:cd:
                    17:21:6c:0c:62:52:a4:8b:3d:c5:bd:fa:f9:89:51:
                    3a:78:94:b1:4c:c4:5c:2c:5a:cb:cb:15:42:c5:3f:
                    39:0a:67:ee:08:57:8b:33:3a:e3:07:28:9a:32:af:
                    8f:dd:3c:38:3c:ae:4e:18:c9:36:17:26:e6:be:da:
                    f5:47:ad:b0:e8:57:73:99:7e:d4:de:8e:81:4e:b6:
                    d5:e9:63:41:a6:57:8f:f1:06:66:b9:c5:9e:27:92:
                    37:da:70:bd:90:03:db:4f:a7:32:9f:6c:68:7b:1d:
                    25:4c:a8:8d:d9:2a:c1:32:c9:fa:42:9a:fb:99:64:
                    cf:6b:33:a8:59:6d:64:a3:c6:11:40:6c:38:10:a9:
                    8e:d7:a6:9a:b7:72:5f:4a:ae:97:31:e2:75:06:cd:
                    70:df:fc:96:7c:be:67:4e:bd:5d:ea:6d:3b:06:0e:
                    d1:b3:ac:de:17:e1:3f:7f:ea:e6:75:0c:d8:ed:a2:
                    f1:c1:94:15:68:8d:2b:5a:b9:8f:72:07:10:07:c3:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FD:50:FD:6B:41:9B:9E:B7:24:BF:40:B9:E8:A8:33:9C:3A:A5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c621b61-c5ed-30f2-a53f-2ce744354698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:52:ae:33:d4:45:7a:0e:28:2b:92:84:1e:5b:8d:68:7c:f2:
         37:45:ba:cf:2f:dd:02:4e:4c:cc:bb:ae:1a:94:d1:5c:10:2f:
         d4:91:42:f6:fb:1b:ff:85:84:2a:7e:70:90:cb:aa:9b:6d:2f:
         7a:b2:e1:8d:4f:a3:21:23:94:bd:3e:38:53:c9:37:66:21:7a:
         0e:fb:d4:03:9f:01:a9:28:fc:b0:e9:78:b6:b7:7d:45:b5:9f:
         35:53:9a:9e:54:13:d7:57:66:5c:2e:8a:e0:87:2d:cf:3b:84:
         2b:06:cb:ca:d9:a3:2b:2f:89:39:8d:98:9d:b9:14:76:a6:5e:
         4c:fb:d2:2d:3e:4b:cc:5e:69:08:6e:9c:44:a0:32:c8:56:fa:
         ff:a5:3f:8f:4e:0c:c7:a2:4a:9f:f6:31:ff:42:33:54:f7:2a:
         54:e3:93:54:00:63:8c:85:c1:c8:dc:5f:e3:78:27:06:a0:9d:
         76:18:54:25:60:53:ae:13:13:3a:e8:b7:b7:df:23:65:31:14:
         3e:3a:91:8a:52:8f:4f:e2:b1:3d:16:88:cc:ce:a8:fe:6a:9b:
         ec:7a:e8:77:a9:2f:9c:64:e3:70:f2:e9:11:49:95:e8:fe:57:
         e3:69:c9:98:53:b3:1d:1c:87:0d:d9:10:10:0e:db:66:e0:20:
         c4:9b:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:19 2025 by rpki-client