Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6eac941b-f478-32c3-95c9-c80b2c8c2f87.roa
File:                     6eac941b-f478-32c3-95c9-c80b2c8c2f87.roa (raw, json)
Hash identifier:          cUE72zsWtyps7SYAMV/Li0zlPcWhZMeam/zlVGPMf3Q=
Subject key identifier:   D8:A8:54:C9:47:FC:BC:85:ED:57:29:73:CC:F9:13:CC:8D:9C:E1:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8BC15A3A9F019EE60EB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6eac941b-f478-32c3-95c9-c80b2c8c2f87.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.41.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:bc:15:a3:a9:f0:19:ee:60:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=300e9460-832b-4675-9dc0-4148d9341b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:31:c6:1f:36:6b:62:84:92:b7:68:0f:a3:
                    90:22:d8:de:4b:97:cd:01:04:67:44:4f:a9:62:3d:
                    fe:be:75:ac:7c:7e:1c:0e:9c:bd:48:a5:a0:ff:7c:
                    9a:54:8e:76:04:19:10:81:4e:2a:4c:42:7e:95:1d:
                    91:2b:25:99:9f:bc:7e:9d:bf:66:0b:f9:ab:65:1e:
                    d8:7f:a0:76:ea:f8:2e:a4:5b:37:50:4e:bd:8e:a1:
                    b3:03:6c:09:90:f3:bb:00:e8:9f:20:76:15:4d:e5:
                    8b:f7:b2:d8:4d:05:3c:67:1b:7e:2a:cf:17:1b:43:
                    e7:d8:be:5a:41:8b:a0:ab:4f:7f:d9:4c:5c:cc:ec:
                    47:c6:39:5b:2c:89:c0:16:d0:ee:26:d9:26:96:c7:
                    e2:44:82:ec:9c:8a:c8:ce:d2:8b:92:3e:53:23:16:
                    d4:98:d4:d4:06:f1:24:11:fd:71:b3:34:03:41:41:
                    b5:a6:1b:49:f1:47:d8:a0:e8:85:2f:f3:5c:33:10:
                    9b:fe:6f:f7:71:a5:42:af:0c:cf:4c:59:51:e0:a0:
                    8c:24:4a:b4:74:4b:88:a3:ff:65:60:b1:ac:6e:92:
                    12:d2:6e:2b:96:51:88:60:05:e9:56:62:42:0d:6e:
                    a7:84:0d:3d:c3:c6:9e:4f:cc:e9:40:72:5c:d7:c4:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A8:54:C9:47:FC:BC:85:ED:57:29:73:CC:F9:13:CC:8D:9C:E1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6eac941b-f478-32c3-95c9-c80b2c8c2f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:ac:72:29:ec:cc:e4:3f:31:df:30:6a:c1:cd:b6:8a:c7:
         10:28:3d:bd:e8:dd:61:33:a6:e4:b4:59:57:3b:27:ad:47:7f:
         31:17:bf:8d:c6:f8:44:2c:13:66:fc:55:a0:4e:35:a3:e8:eb:
         c8:6e:d3:4d:d7:08:63:10:f5:b5:36:ba:f3:3e:12:a6:1f:06:
         0c:cb:28:da:c8:a2:64:25:83:9e:42:d5:1c:dd:1f:c8:6e:ba:
         cb:1f:cf:69:ad:26:cc:5c:5a:4e:bd:c6:06:3c:78:d3:e5:81:
         1a:11:12:27:86:65:03:45:d3:1f:2c:79:62:87:99:30:11:d2:
         1e:11:9d:cf:92:9d:17:91:b0:6a:b7:04:60:16:b1:f4:5c:3e:
         7c:e6:63:97:0b:6d:01:5b:a2:a3:b9:31:49:d2:62:a1:41:71:
         7a:9b:95:8f:a7:05:45:7d:ab:32:1f:44:77:56:28:74:bb:8b:
         c7:4d:49:3d:27:19:2c:84:3d:6a:5d:46:6e:cb:c3:02:09:ee:
         b4:20:2d:76:1b:d0:b8:bf:00:4a:dd:b4:32:77:74:2a:62:c0:
         4a:da:5d:1c:a2:43:fd:15:40:d2:59:c9:02:e9:af:0c:c9:35:
         13:73:4e:8c:3d:c7:eb:29:8d:26:53:14:cd:f1:21:21:9b:f2:
         29:99:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:28:50 2025 by rpki-client