Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/680b2429-b10a-3515-aa61-8bf7a50f424e.roa
File:                     680b2429-b10a-3515-aa61-8bf7a50f424e.roa (raw, json)
Hash identifier:          kOmuRJwbqJ43upHCTokmYki5/7gwUDom0j42aWiuDe8=
Subject key identifier:   A5:BF:A5:2C:A2:A9:D8:27:C8:EF:CD:82:FD:B6:4C:72:D7:50:C9:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07101BCEF6CC47280CC000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/680b2429-b10a-3515-aa61-8bf7a50f424e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        76.133.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:10:1b:ce:f6:cc:47:28:0c:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=484f7cd0-533b-43d7-8d0a-abdefd8ac982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:d0:e3:42:24:47:56:0e:6a:10:16:e9:bc:
                    61:e2:48:4e:4b:fc:c1:16:9e:da:f8:27:b0:3f:5e:
                    a2:90:75:44:f5:db:31:fc:34:96:01:ab:58:18:ca:
                    5f:04:7c:a9:6d:43:22:0d:5c:5d:be:10:f3:5e:62:
                    15:6e:2a:55:cb:cc:09:25:35:29:ee:e8:81:bd:97:
                    67:5d:44:21:92:9b:2b:71:97:a7:70:d6:fe:ef:36:
                    02:7a:12:f6:de:41:e2:8a:8c:fd:38:03:08:c6:60:
                    47:22:44:87:39:77:d1:11:23:fc:50:3d:24:64:20:
                    95:83:1e:7a:7d:66:ad:54:2d:5a:f3:58:2c:b3:13:
                    e2:23:d7:0c:a0:f8:cb:21:85:30:4d:1b:97:f5:79:
                    5b:7e:0c:8a:01:8f:83:64:26:ce:08:2c:91:93:1d:
                    c5:fa:52:0e:e3:21:d8:f5:92:b5:dc:f4:d4:a4:bf:
                    ef:16:e7:df:64:4b:59:07:dd:db:a9:80:4a:b2:bf:
                    ed:30:f6:ed:c5:ae:b4:a9:08:2b:90:e4:89:9b:4d:
                    6a:53:a0:37:39:d0:44:c2:d6:7c:0d:13:85:a4:ed:
                    ab:ab:b4:f7:1f:ba:d4:6a:e5:91:61:9b:9f:18:d1:
                    66:90:1f:46:7e:a0:e8:28:d7:82:95:e2:9a:e2:9d:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:A5:2C:A2:A9:D8:27:C8:EF:CD:82:FD:B6:4C:72:D7:50:C9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/680b2429-b10a-3515-aa61-8bf7a50f424e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:a9:40:96:3e:f4:2b:4b:3a:36:c5:0f:74:07:49:cb:b1:4f:
         ce:8b:3c:a6:86:b8:50:3a:a3:5e:58:a6:46:e5:91:f7:45:99:
         d6:09:e4:10:b1:2f:65:56:cb:64:9e:76:05:86:f9:17:19:f3:
         e3:eb:5e:f7:41:7f:7d:20:bf:0b:4e:a4:ef:85:10:c6:45:0b:
         6c:c4:82:ed:f7:83:58:36:21:10:18:b6:42:20:83:74:02:9b:
         2f:df:7c:10:b9:bf:62:03:8f:b9:7f:93:dd:23:9c:d7:c9:6b:
         fa:f3:80:c7:a5:19:24:3e:9d:3a:ce:73:b1:9c:9a:5a:f6:b5:
         ba:95:40:0f:51:57:7d:e2:08:75:ad:4d:45:47:db:7b:f3:cc:
         c8:e9:f5:35:1f:50:47:c7:11:7d:3c:9c:3b:4b:77:d4:f4:35:
         77:42:e8:37:d1:16:dd:55:ad:73:71:f5:58:f1:5a:55:06:f7:
         0b:84:54:14:c2:71:ef:1a:95:45:e1:78:c0:df:15:07:14:a3:
         60:69:53:66:5e:82:86:e4:8a:09:4e:45:9a:e6:35:de:0f:e0:
         b3:ad:4b:3d:0e:1c:9e:85:98:c7:e3:8c:ed:e3:84:2f:e7:83:
         d9:50:07:39:ba:a2:3f:7a:cf:34:3e:48:6b:94:51:72:8b:80:
         97:fa:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:47:38 2025 by rpki-client