Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fce2b23-a8bb-3442-ad52-06c554937bfc.roa
File:                     5fce2b23-a8bb-3442-ad52-06c554937bfc.roa (raw, json)
Hash identifier:          F51tpSYgVVy0Osqo19Ch2tJQPSS5yCvnIWEa5CUfl3k=
Subject key identifier:   BE:F8:41:D0:05:26:05:AB:95:6C:3A:B7:15:A9:A4:BD:2A:24:C4:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05E2D347F83C60ABEB9180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fce2b23-a8bb-3442-ad52-06c554937bfc.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.248.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:e2:d3:47:f8:3c:60:ab:eb:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8118963b-c338-4ce7-8d01-3bf78dd38e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:40:e6:e4:a7:31:30:87:ef:15:2e:8f:6b:
                    eb:17:77:c7:bf:bb:c6:49:88:0f:7c:73:18:40:1b:
                    99:c8:f0:2d:90:e0:91:4d:e0:7e:4a:ba:63:af:86:
                    84:37:2d:c4:c6:bb:9a:03:f8:72:4d:79:75:7d:96:
                    29:af:06:89:5f:20:65:66:d7:be:f5:6a:f7:29:90:
                    37:20:74:c9:5b:33:ff:90:6a:cb:35:6b:4f:67:5f:
                    cf:f4:17:24:2b:66:85:63:19:00:6b:0c:68:f2:d8:
                    75:d2:7d:a7:74:d6:2b:8e:fa:e5:2a:81:31:3c:74:
                    e0:26:87:66:57:7e:8e:51:39:ba:ba:31:b2:2d:98:
                    00:23:5e:cd:e8:54:f0:0d:f1:b3:89:7a:40:01:6e:
                    f0:c1:b2:c6:51:ff:bf:71:d2:4b:07:3a:38:c6:b0:
                    63:8f:a2:29:3c:38:17:5c:ce:44:31:bc:6c:4f:a3:
                    b4:32:6c:98:bf:41:39:b5:8a:a8:33:5e:ed:a7:2b:
                    f9:1b:94:9d:97:e2:2a:6f:a2:cf:f7:83:73:e5:75:
                    08:5e:ca:3a:c9:22:40:33:a8:95:67:22:6e:0b:e0:
                    2e:1c:b8:68:59:a5:98:87:4a:bf:f1:da:48:4a:05:
                    0b:98:0f:15:a5:c0:74:b8:10:29:52:ca:af:f1:c8:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:41:D0:05:26:05:AB:95:6C:3A:B7:15:A9:A4:BD:2A:24:C4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fce2b23-a8bb-3442-ad52-06c554937bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4a:c2:9c:08:ba:71:f3:a3:c1:0b:b2:80:c9:08:aa:ed:a8:
         7a:fb:3d:b2:d8:7b:13:ce:a3:11:eb:6b:d7:83:c9:14:db:48:
         bd:1a:9e:8a:72:d3:3a:9c:4a:65:e7:d3:2a:55:b0:f9:0e:ee:
         42:d3:27:e3:f3:7a:f5:92:73:17:6b:d7:26:1b:a5:53:45:0e:
         60:71:c0:e4:ce:1e:ab:61:43:b6:57:6d:b7:98:e4:54:53:7c:
         66:8d:ad:28:8b:7c:db:b8:61:9a:3d:f0:c6:93:e6:8a:be:c9:
         93:bb:45:ac:72:9f:a0:a0:f8:db:25:10:88:83:03:eb:db:97:
         7c:82:2d:33:f9:31:b0:8d:6a:50:1f:76:80:d0:a2:ba:ce:fd:
         dd:7b:ed:a7:91:61:aa:ce:01:5e:eb:45:18:0b:b3:2f:d2:9f:
         44:f9:2a:96:9a:a4:8a:96:0f:1a:c5:68:54:93:78:b0:5b:c9:
         1d:c9:8d:c4:d8:c0:96:11:29:a0:da:75:ac:cc:e2:ea:9d:92:
         ae:49:1a:9b:1c:30:27:36:ad:c8:82:6b:12:23:02:98:a0:ee:
         8e:91:e7:7e:22:f7:e7:72:7e:7f:94:39:73:cf:99:af:4b:0e:
         47:16:48:f3:94:14:a8:73:f4:9c:b6:bc:1b:17:e0:dc:ec:fe:
         e5:f1:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:39:12 2025 by rpki-client