Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcc7d9b5-b72b-36bc-b405-5252a4fed2ce.roa
File:                     bcc7d9b5-b72b-36bc-b405-5252a4fed2ce.roa (raw, json)
Hash identifier:          ARcATnaAgIwkXk+l6HNPgzaUlzYJ4f6REsKj0ruVkcQ=
Subject key identifier:   72:34:0B:D2:C4:C5:09:B4:D4:EF:C2:07:93:1B:3D:0F:E7:B2:31:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431F514731EACB4E59FB200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcc7d9b5-b72b-36bc-b405-5252a4fed2ce.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.40.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:f5:14:73:1e:ac:b4:e5:9f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=a00054a1-c7a6-4ff2-84ce-6b863b03fe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:a7:cf:67:cb:e9:8f:06:15:de:06:fa:82:
                    19:a7:ba:0d:b6:26:69:2e:ec:c4:15:1a:5a:81:d5:
                    ab:0a:73:f2:97:be:96:ef:7e:5b:46:7c:56:d4:39:
                    d4:f3:0c:37:9c:59:f3:b5:8e:5a:c1:19:88:7c:ff:
                    a8:06:51:79:34:71:af:c1:fa:13:5d:ce:3c:99:80:
                    30:3b:cf:ac:02:09:36:34:12:f2:09:58:8d:3a:d4:
                    13:81:76:58:eb:4e:21:65:c9:f0:16:aa:33:8d:b3:
                    f4:52:e6:c1:50:72:20:c3:03:60:10:0e:20:7f:a7:
                    34:53:09:ae:c3:71:83:f5:9e:9d:8a:b0:c8:cc:29:
                    cc:25:1d:8f:da:c5:0e:de:f8:4d:21:dc:b0:0b:66:
                    bc:db:c1:e4:da:c0:25:50:d5:d5:a6:7d:ca:68:bd:
                    5d:1e:71:64:cd:65:3a:79:93:78:fe:01:6c:3f:48:
                    93:68:d0:26:85:61:c2:c5:53:49:9c:28:d4:e9:91:
                    f6:d4:b1:87:36:c1:78:09:70:e1:1e:dc:b3:b4:95:
                    42:59:3b:b1:36:1b:f1:59:14:b2:5c:ec:72:fb:4a:
                    8d:dd:21:16:da:53:4f:f8:0d:22:47:1a:de:08:bb:
                    31:00:75:ea:64:7e:84:d7:bf:20:1b:dc:08:9d:cf:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:34:0B:D2:C4:C5:09:B4:D4:EF:C2:07:93:1B:3D:0F:E7:B2:31:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcc7d9b5-b72b-36bc-b405-5252a4fed2ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:56:5f:7c:32:0b:ae:ce:20:0d:0d:29:6e:4e:14:19:46:5a:
         19:c8:fe:3f:6d:5b:95:c7:8d:83:a7:53:a1:c1:4f:bf:46:6a:
         57:75:3c:7f:2a:d8:e2:3c:7b:1a:0b:59:ca:73:3e:40:43:34:
         6f:0e:c5:0d:a5:35:a0:42:b3:a4:f6:c1:dd:c7:6a:51:be:52:
         e3:ed:63:43:3e:40:52:42:2f:29:94:e9:68:0b:33:6b:44:06:
         f7:e9:d3:ff:bb:ff:c5:39:9e:a9:16:31:b3:fd:fd:55:ac:59:
         de:16:c9:5c:15:04:a4:a4:ce:5c:8a:ff:06:80:5a:dc:6f:89:
         90:71:a5:b9:12:ec:37:e8:83:a0:fc:1f:67:0a:c6:ff:a1:a1:
         b8:7b:98:f7:90:d9:6d:f2:0c:56:0d:45:d2:40:67:23:f6:8d:
         38:2e:24:46:5f:e3:80:df:7b:d0:e2:c8:cc:03:83:a5:e5:62:
         e6:11:56:0f:7d:ac:9e:af:b2:23:1e:ad:4b:36:10:2b:5f:35:
         97:52:02:ab:76:25:4d:5c:e3:05:5c:55:cc:2d:4d:ab:0b:22:
         c7:04:5b:20:29:96:1c:b1:33:9c:46:e7:e7:cf:33:3d:31:47:
         0f:40:3b:3d:a3:a4:fb:a7:0b:60:a9:2c:45:2d:39:55:4e:b9:
         3f:07:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:24:06 2025 by rpki-client