Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8943f1be-826e-334d-80ab-c954063f38f8.roa
File:                     8943f1be-826e-334d-80ab-c954063f38f8.roa (raw, json)
Hash identifier:          X7eY/MuxI761JmZvd81yopnRjNRZqsN+0Qa6bbcZ7qs=
Subject key identifier:   20:25:B3:62:9D:67:B1:DF:9F:99:75:EC:0C:E9:A1:A4:75:AB:8D:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431793E56B11E4F4A22F2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8943f1be-826e-334d-80ab-c954063f38f8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        71.232.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:79:3e:56:b1:1e:4f:4a:22:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=e848152e-443a-4e1b-bf88-2b08e77804f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:62:33:5c:bd:79:65:b5:87:eb:2d:86:be:
                    6f:3a:7b:90:64:db:94:c5:22:80:f5:4a:af:2d:c8:
                    df:2a:aa:95:c5:3c:72:a8:2d:2e:db:97:89:a9:c7:
                    ec:cb:40:aa:7d:9b:da:d0:99:25:37:0f:4d:7b:77:
                    05:3d:09:12:73:6c:c9:84:12:5f:88:c0:0d:bd:ba:
                    7e:ef:d9:11:8c:0b:c4:ea:a2:09:59:37:32:48:d3:
                    33:f7:ae:27:a5:17:99:28:0d:6a:17:70:5f:15:da:
                    f9:b5:3e:38:0f:42:96:da:b7:ee:d4:99:2f:4e:ba:
                    3d:64:23:60:2e:1d:90:3f:43:a8:14:13:54:c9:b9:
                    e2:69:d1:e6:05:04:d2:56:ed:20:47:0c:b8:75:a2:
                    df:fa:ce:9d:87:b3:86:40:f4:89:f4:19:1d:f9:42:
                    7e:9b:f1:39:54:19:97:57:97:3a:98:97:da:64:9e:
                    ff:64:84:13:67:b7:c2:1b:e1:8b:f4:5c:0b:19:c4:
                    cc:b1:4e:44:d1:4d:bd:04:dc:e0:52:9c:fb:7e:04:
                    2a:50:d3:13:a7:e3:a0:f6:7d:ca:c8:64:62:cc:16:
                    6d:59:f6:e5:cd:6a:38:60:58:97:bd:c7:ac:c4:ee:
                    95:bb:fa:03:d7:82:4a:b0:00:57:0d:43:12:a1:02:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:25:B3:62:9D:67:B1:DF:9F:99:75:EC:0C:E9:A1:A4:75:AB:8D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8943f1be-826e-334d-80ab-c954063f38f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:24:05:5f:ab:e0:d6:44:06:c6:47:1d:0a:1c:4b:c3:e5:05:
         13:5f:71:91:d1:aa:96:58:34:24:b6:c1:b0:fa:34:e1:57:89:
         23:d5:21:25:37:4f:ed:d2:26:79:5e:04:21:1e:44:d4:e6:44:
         f2:f1:af:48:37:7e:cf:13:61:b1:fd:00:6d:f6:d6:c7:41:7d:
         27:8d:7a:41:77:f2:d4:3e:a9:60:f6:ae:04:34:c1:e9:c5:62:
         8a:30:22:b4:2c:52:ae:1e:2c:8b:e5:e2:ed:75:00:58:c9:5f:
         81:4b:a3:0c:09:31:d1:8d:01:5c:6d:91:51:fd:27:61:02:3c:
         53:35:ee:4f:db:a4:e7:4f:81:3e:7f:94:79:f1:fa:f0:83:e5:
         86:b3:54:c6:35:28:9b:a0:b5:bc:52:a6:68:4a:af:79:4e:4c:
         57:07:fa:e4:be:c4:b8:dd:bb:cd:a1:44:6a:36:5b:77:87:b0:
         e8:2a:c3:56:0c:8c:77:2d:ae:f5:4e:88:bc:a1:fc:25:17:bb:
         ee:00:69:d9:ea:a3:08:a8:1f:5c:92:43:69:d0:9d:5a:a7:3c:
         cf:a6:6f:4d:b0:41:ba:c9:ce:46:d0:cb:a0:65:4b:12:70:33:
         1b:0d:b4:3e:4e:23:fb:b2:73:54:a5:2c:2e:78:1e:ea:36:e2:
         1a:8b:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:05:05 2025 by rpki-client