Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e1f8a97-cd46-37c3-98f9-d68c95c7ba94.roa
File:                     9e1f8a97-cd46-37c3-98f9-d68c95c7ba94.roa (raw, json)
Hash identifier:          eOlUiYiHhKX8pbnW+lcKE5tdvw5oOgsiofVW8eJZ59g=
Subject key identifier:   B2:87:F3:EA:A1:A9:66:B1:65:6A:4D:5F:C9:FC:B2:0D:9D:60:E2:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430B9D295C23A0082352040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e1f8a97-cd46-37c3-98f9-d68c95c7ba94.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.56.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:b9:d2:95:c2:3a:00:82:35:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=89655f54-5af5-43ad-93a0-973bfff12cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:46:bc:99:94:c5:70:dd:ff:47:65:9a:70:
                    a4:1c:9b:15:2f:2c:58:65:ce:0c:05:32:cf:a5:92:
                    ab:a7:45:df:47:ba:0c:d9:ee:7e:b5:2c:f9:96:83:
                    24:98:3c:4f:ff:a1:a0:a1:92:04:de:83:f6:31:65:
                    f9:aa:e0:bb:e7:2a:a6:1a:75:3c:e8:ae:6f:54:ac:
                    a4:d1:6b:80:0c:16:e6:91:31:30:c9:e0:0e:39:99:
                    16:af:71:09:57:9c:5d:1a:bd:b2:68:cc:34:c8:9b:
                    fe:25:dd:16:e9:da:e1:22:9b:53:23:af:72:64:1b:
                    65:b0:58:1e:42:f0:e3:5f:8a:51:3f:e3:52:8b:1b:
                    c9:69:04:40:4b:b3:0d:63:4c:ac:8f:68:1d:74:5a:
                    e9:ca:e2:e4:1e:b5:dc:b9:8d:33:96:9a:b5:94:54:
                    cb:09:df:5e:e3:4e:16:cc:26:ca:1c:45:4a:20:9a:
                    82:24:bf:e0:88:96:d7:e0:3f:93:3a:ff:c7:15:16:
                    62:b0:26:63:38:3d:d6:60:ab:a8:78:a7:8c:4a:ef:
                    74:06:84:90:f8:1c:a2:9a:bc:f2:fb:88:88:89:60:
                    f8:29:01:4b:71:29:53:ba:bc:c2:eb:c8:73:96:a2:
                    da:98:26:40:c7:29:bf:e7:f3:70:30:55:e1:b8:02:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:F3:EA:A1:A9:66:B1:65:6A:4D:5F:C9:FC:B2:0D:9D:60:E2:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e1f8a97-cd46-37c3-98f9-d68c95c7ba94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:5a:96:4d:f9:98:3b:9e:a2:b1:6c:c6:80:e9:a3:ca:03:
         c0:05:a7:33:3b:3c:de:d6:44:43:aa:ef:a9:6b:dd:cc:04:05:
         ad:3b:c0:6c:c2:50:c9:4d:61:ca:f8:00:e4:f8:37:c5:64:c6:
         1f:1c:2a:e2:ad:cc:04:a7:3e:a9:55:ac:75:e9:13:a7:b2:a7:
         06:ec:75:74:69:b6:a7:c8:51:5d:69:a2:aa:51:84:18:1f:f3:
         ea:cf:f2:15:ec:54:55:9b:c3:bd:6d:1f:dd:db:f5:d5:03:d1:
         a4:55:6d:f3:59:33:af:ef:bb:98:6e:a0:4e:84:e0:9a:24:56:
         5e:96:1d:9e:0c:4e:39:76:a7:fc:49:a7:2e:69:ed:3a:a9:19:
         dd:cc:01:69:71:67:2a:9e:f4:5f:20:f3:1c:ab:88:b8:69:6e:
         ca:97:4a:a8:9b:8b:70:ad:6c:f3:3e:b9:7a:82:8a:83:15:ac:
         e4:5d:0a:94:39:23:ff:c8:4e:7b:9e:ea:5a:e2:00:89:8b:50:
         fe:73:00:2a:bc:bd:1f:97:62:0d:30:f5:1a:44:1b:5b:a1:ac:
         9f:ed:53:b4:e3:5b:91:bf:a7:5d:54:71:cb:f8:de:e9:49:52:
         0a:10:58:63:50:d2:78:fc:43:6d:f7:e3:cc:5b:9d:80:5b:85:
         42:66:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:11:07 2025 by rpki-client