Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6907fba5-fe73-36d6-a7c0-509fb9579113.roa
File:                     6907fba5-fe73-36d6-a7c0-509fb9579113.roa (raw, json)
Hash identifier:          CIZxo6iWiWriWxoiigJKkBi6gCE2r9ZONBH4fRMcS38=
Subject key identifier:   C9:7C:AA:E7:88:F1:CD:79:C7:C8:A9:E9:D8:35:56:9C:44:FC:FC:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431F91C09B791A485E92240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6907fba5-fe73-36d6-a7c0-509fb9579113.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.42.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:f9:1c:09:b7:91:a4:85:e9:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d883eeb3-7825-4728-a77e-26f01579f8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:4e:85:05:79:13:97:45:fa:01:9b:2d:8d:
                    7a:1c:6b:da:ae:a2:ae:1c:d0:7b:45:66:db:64:30:
                    96:51:0e:56:73:49:9c:2c:24:6c:3e:07:a7:d4:aa:
                    d9:4a:d6:54:5a:a4:83:11:f9:a0:cc:f9:66:d1:79:
                    d0:05:2b:6f:14:ba:b9:67:f4:f9:b7:7e:e3:eb:7c:
                    3c:45:0b:f3:2c:92:c6:99:fc:ea:44:50:8c:dc:76:
                    ed:0b:f5:17:ba:23:c0:b2:85:d4:c7:86:ec:ca:23:
                    f8:75:ff:1c:66:5e:78:09:9a:44:8f:95:e5:9e:af:
                    ba:28:63:e8:29:fb:ed:58:5e:20:81:16:19:9c:46:
                    b6:b8:e3:00:55:bc:d3:8f:fd:1b:19:cf:a0:49:12:
                    32:95:b7:2a:a8:c7:ac:d3:70:3e:1e:cf:56:12:55:
                    ed:28:f7:ba:9f:d2:e7:41:24:13:50:44:84:70:2c:
                    93:d8:7c:f1:4d:3b:42:b3:15:d8:3d:6f:b1:27:7f:
                    65:a0:aa:80:92:54:30:7b:4e:bd:09:e4:ee:9c:b8:
                    f0:a3:f9:f4:c2:2e:2d:74:15:30:34:0a:fa:82:4e:
                    e9:bb:f6:a7:68:11:fc:18:ad:b7:c5:85:03:59:9c:
                    12:de:16:39:91:a6:fb:a2:f2:df:e1:2c:15:c6:47:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:AA:E7:88:F1:CD:79:C7:C8:A9:E9:D8:35:56:9C:44:FC:FC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6907fba5-fe73-36d6-a7c0-509fb9579113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.42.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:63:b6:32:54:f2:2e:1d:75:53:08:8a:68:12:80:93:98:
         aa:01:70:66:b5:5c:d2:b1:c6:eb:2d:2c:6d:e4:ba:53:f3:c5:
         16:56:7a:8e:cb:60:6b:b4:32:4a:b6:29:e4:6a:42:5e:4e:af:
         ff:d9:de:ed:c2:70:d7:3c:4f:4b:46:30:08:51:db:09:db:f6:
         35:00:3e:f5:cf:90:00:3f:5c:6f:47:76:54:c5:78:e5:9c:65:
         74:60:63:fb:32:00:06:41:07:45:11:95:63:6a:6a:4c:05:80:
         9d:86:81:f8:8e:df:33:67:0c:6e:6b:f7:28:5f:7f:0c:1f:9a:
         e4:ae:e5:02:f9:0b:8c:87:3e:61:87:25:0a:d8:a3:f2:ae:59:
         e8:a0:0f:25:47:83:ba:42:5a:9a:78:18:33:e9:df:11:2a:f9:
         3e:0c:57:a3:66:77:96:97:78:44:6c:36:9b:d9:db:9d:fa:46:
         78:3b:af:10:c2:ec:3b:5a:0e:ff:83:7e:3c:41:92:12:63:40:
         bc:dd:fa:99:45:ee:3f:08:2a:f3:64:3d:ff:5a:88:83:c3:c1:
         0e:f2:9e:9f:40:86:ff:8e:07:ea:af:71:a7:05:69:d3:25:2c:
         43:48:8b:8d:96:b0:c4:5a:bf:5d:c1:2f:00:85:0a:7e:1e:c0:
         4a:6f:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:20:10 2025 by rpki-client