Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8106e75-7bc9-3bc9-a68a-9417bd76cb24.roa
File:                     c8106e75-7bc9-3bc9-a68a-9417bd76cb24.roa (raw, json)
Hash identifier:          PzLdYtNaQ5fWpid03i4+I190qFnbjzGURtemfc6D9dU=
Subject key identifier:   61:63:6E:19:A8:04:8A:70:EB:0C:20:92:DC:CC:73:C2:A9:E7:A7:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F77E0D5ACF78CDD0D12D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8106e75-7bc9-3bc9-a68a-9417bd76cb24.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.32.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:7e:0d:5a:cf:78:cd:d0:d1:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=3d53634f-f8b1-481b-aedc-6b0594cee6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:42:d1:ea:93:e0:9f:6b:9c:00:bc:56:5d:
                    51:4d:fd:40:67:c6:3f:06:7f:b2:a7:d9:50:d0:e5:
                    37:21:ef:6d:95:c7:2d:fa:4f:99:f3:c3:7d:88:a3:
                    59:d9:e5:71:fe:26:dc:c1:b4:33:84:2f:3d:92:5f:
                    ff:f7:07:0a:a5:f2:40:82:62:94:b8:94:ae:2a:3a:
                    35:cb:f8:07:0c:cb:0c:97:74:bc:c2:21:3a:6b:68:
                    de:50:b6:df:00:49:98:c7:ec:e7:c8:6f:94:d1:ef:
                    03:cc:eb:40:8c:97:37:60:55:5f:c3:f6:ec:e1:c6:
                    b6:c1:7e:23:8e:06:9a:b6:e0:be:46:0b:e2:92:6a:
                    c5:6b:6f:9a:fa:47:5f:5b:6d:9e:0d:66:7a:db:05:
                    f8:b6:10:74:67:0d:8f:a6:eb:1f:cf:56:ef:f4:7a:
                    65:72:15:fa:77:b4:0e:dc:53:f7:19:e5:77:b2:f1:
                    eb:ff:d6:39:73:45:3d:42:53:45:25:b8:a3:c1:bb:
                    94:b4:cc:c4:fe:9b:b0:ce:a4:80:5f:2d:1b:52:c6:
                    61:59:df:6d:56:e0:80:7e:17:f1:bc:b2:4e:e3:f8:
                    ac:01:11:19:36:59:df:84:88:36:4b:55:31:63:82:
                    17:7d:5a:3f:ae:66:6a:9f:3f:41:4f:43:6e:e0:61:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:6E:19:A8:04:8A:70:EB:0C:20:92:DC:CC:73:C2:A9:E7:A7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8106e75-7bc9-3bc9-a68a-9417bd76cb24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:73:c6:81:73:7a:77:11:76:8b:29:4c:c3:db:80:74:66:
         dc:ee:48:df:bb:c9:43:92:50:80:77:27:34:d7:0b:6a:b7:82:
         8b:84:87:70:54:a5:47:ac:fd:6c:c1:96:b4:b2:dd:df:9e:c6:
         df:00:44:ac:67:66:5c:9e:b1:17:5c:4a:8f:f8:b5:31:e9:f3:
         07:b8:ce:ee:0a:37:05:32:06:d4:ca:f3:85:47:88:a2:f5:52:
         71:97:a5:c5:d4:21:a5:7a:fe:7d:18:0f:de:22:4e:ed:ab:3d:
         de:a1:66:e4:dc:16:1a:85:54:fa:9d:51:15:c3:3c:c6:4f:cd:
         05:30:f0:16:72:d1:cd:c8:2c:c1:f7:22:65:2b:2f:7a:73:22:
         6a:4b:e2:60:6f:c2:e1:38:3e:c7:61:7e:78:d4:b4:1c:98:95:
         c2:67:dd:5a:bc:5f:39:3f:01:cf:06:1d:f6:c3:c3:79:1e:9c:
         3d:11:47:4e:e7:a4:01:40:b3:00:4c:e2:84:48:0e:dd:a9:c2:
         53:3f:5b:4b:9d:8c:09:1b:35:03:5b:a9:8b:13:02:e0:55:e4:
         d3:48:fb:c9:e5:13:08:6f:c3:43:00:f9:12:b9:8c:ad:43:e5:
         6a:03:c7:1b:b8:27:60:64:00:fb:3d:dc:de:4a:aa:27:67:5c:
         df:af:c3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:34 2025 by rpki-client