Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7092553-9652-3891-a333-5ab0d15082cc.roa
File:                     a7092553-9652-3891-a333-5ab0d15082cc.roa (raw, json)
Hash identifier:          G7iARdOEfcFP2bQkZw5lAzH+4qaVYyXmA9xOpxZFcQA=
Subject key identifier:   DB:88:AD:03:0D:BB:E8:B0:7F:4E:F2:37:C4:E3:5C:12:84:CB:FB:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEFE4C4CBC7905F64528BE
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7092553-9652-3891-a333-5ab0d15082cc.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        68.82.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:fe:4c:4c:bc:79:05:f6:45:28:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=d2281a1b-bcaa-4b87-8221-363b4d82dcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:e9:af:4f:df:7c:5e:de:36:28:d7:73:8e:
                    dc:73:11:3c:e5:a5:de:01:39:15:2c:33:2d:be:a6:
                    84:88:7d:14:e0:14:e6:f7:1f:04:3c:c7:48:eb:fe:
                    cf:da:5a:bd:9b:d8:e5:24:90:06:15:f9:3f:52:5b:
                    34:ee:7a:ae:ef:30:95:94:e7:fc:77:b8:e4:6d:a2:
                    25:a7:95:0b:2d:e5:cd:cd:bc:f3:87:38:d5:78:d6:
                    9d:be:a5:66:e3:83:c2:4c:d5:8a:7e:9a:48:38:78:
                    9a:7f:7d:85:80:8b:8c:36:16:dc:ff:5f:f2:79:58:
                    78:b0:63:c4:2e:02:93:bd:e9:d6:5b:92:1e:b0:1c:
                    9e:82:16:0d:7d:26:aa:43:84:b2:c5:8f:15:00:67:
                    8d:bd:6e:18:fb:86:c4:88:a2:0f:d6:5e:44:b5:c4:
                    65:bb:9d:d8:d3:ce:51:65:b4:51:91:63:c5:a0:8b:
                    84:24:03:3a:6d:a7:48:47:dc:61:49:34:a4:51:55:
                    4f:e1:c2:bf:78:c3:a4:48:8d:57:62:d2:82:84:20:
                    ac:05:3d:8a:8c:85:a4:3f:e5:2f:41:2d:b9:67:b8:
                    f0:0b:db:4d:fd:86:84:bf:bc:8d:69:ca:05:e8:1c:
                    49:c1:86:d8:4e:a9:c3:ff:54:0e:f9:a2:5c:98:39:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:88:AD:03:0D:BB:E8:B0:7F:4E:F2:37:C4:E3:5C:12:84:CB:FB:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7092553-9652-3891-a333-5ab0d15082cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:1e:74:14:08:cc:42:34:2c:b0:aa:3e:dd:ce:de:fa:b0:bd:
         a3:14:74:c6:6c:20:cc:d4:1b:b2:b1:60:d7:bc:ac:21:de:14:
         52:68:d3:f6:df:22:8f:15:b2:b3:e6:df:f0:3d:22:0b:57:7a:
         eb:f4:81:67:7c:f7:68:bb:f5:25:48:ec:41:9a:52:89:7b:c1:
         ce:de:fb:f0:7a:98:0c:77:a4:2e:ce:3a:94:b7:1c:82:be:0b:
         36:c6:eb:43:01:c9:f6:75:a0:96:af:cd:1d:80:c2:ff:8d:80:
         0c:4c:4f:ab:57:6c:53:9a:56:28:32:ff:60:ae:bf:60:8f:57:
         e8:e7:16:d6:00:85:e9:b7:4b:df:e6:8e:d8:7e:11:d6:9e:8c:
         84:ef:7b:60:7c:d8:f0:7c:cf:9e:d3:7f:93:ea:89:68:37:48:
         77:40:9a:9c:f4:eb:13:e2:c0:73:f7:6f:12:9f:3b:96:d3:a7:
         a6:ca:21:22:b1:c0:44:32:15:69:93:27:19:ae:1a:a8:5a:e8:
         28:41:ed:7f:00:b6:9f:79:35:32:1c:42:07:d3:d3:89:52:d4:
         d0:d5:c6:df:4d:35:64:45:66:22:74:ba:a7:5c:f8:ad:2d:aa:
         96:6b:07:a2:81:96:e0:b4:fb:37:65:0e:91:56:ef:bd:76:00:
         4b:b6:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:06 2025 by rpki-client