Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e134b298-b200-3509-8847-0bd4e516f44f.roa
File:                     e134b298-b200-3509-8847-0bd4e516f44f.roa (raw, json)
Hash identifier:          aXFpe4ZPul8sBhdd6CG2Z28z76LqzwiVc0exUWVGm1Y=
Subject key identifier:   55:9E:9E:E4:9A:2C:3D:0D:E3:D2:D7:A3:B3:B2:38:9C:BA:7E:65:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0DD026D6473B214906180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e134b298-b200-3509-8847-0bd4e516f44f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.58.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:dd:02:6d:64:73:b2:14:90:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=73aba1d6-be78-4fab-a78d-b7f657544c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:98:a6:72:73:72:00:bd:a0:c6:8c:ea:5d:
                    55:45:39:d4:71:41:14:76:7f:2d:c9:a0:da:b0:48:
                    97:e6:1d:05:e3:c4:5c:d1:05:8e:f8:7c:40:65:3a:
                    06:5e:47:d6:c0:22:71:0e:b3:91:a8:d9:14:ca:45:
                    1f:d0:73:9b:c4:dc:ad:f6:33:96:a0:22:24:af:7c:
                    5e:46:ed:4b:df:55:a3:d9:42:76:83:af:ce:da:39:
                    cd:3f:52:81:a1:17:b3:3b:18:8c:d2:ef:f3:1c:24:
                    8b:ad:17:1d:c4:4e:e4:11:14:39:13:b5:13:aa:82:
                    d5:de:33:42:8d:0e:91:49:d3:80:9c:8e:57:ac:e9:
                    38:09:57:c3:52:ba:02:0f:47:9a:f1:bc:68:db:85:
                    1a:43:4c:c1:23:50:84:bf:38:70:89:db:d2:f3:4d:
                    94:1d:e8:22:27:e7:28:d4:0e:cc:9c:85:31:42:dc:
                    6e:11:db:d2:2b:5b:66:82:c3:05:2f:32:cd:e1:ee:
                    d8:4e:46:38:73:a3:0f:13:52:e4:ed:69:02:e4:66:
                    f3:3f:03:3c:de:7c:d8:9b:ab:88:6a:23:f6:2a:22:
                    ff:9d:16:c6:fc:d7:11:07:b1:cc:67:25:c5:0d:60:
                    b0:85:da:2a:16:9a:52:07:28:4e:3e:1e:23:a2:7e:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9E:9E:E4:9A:2C:3D:0D:E3:D2:D7:A3:B3:B2:38:9C:BA:7E:65:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e134b298-b200-3509-8847-0bd4e516f44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6b:35:31:28:a9:4e:d6:41:6d:9f:e8:36:a5:e0:ad:fc:20:
         07:59:22:f4:7a:a8:a8:c1:41:ea:8a:ee:ee:bd:3b:de:e1:f3:
         e4:53:68:69:87:8b:e6:37:94:be:c0:8e:11:cb:2c:8f:0e:b0:
         b7:02:8a:ee:31:99:27:30:4d:51:57:ed:fc:9e:0c:5d:e3:e7:
         46:b0:d1:1e:4e:d7:84:cc:d5:d5:81:ec:49:3c:38:f3:d4:96:
         31:b2:2a:68:68:73:1a:25:bb:86:b5:24:34:90:64:0b:f1:f3:
         77:bb:3b:f9:04:c1:8c:60:69:5c:3f:3b:b1:ed:55:48:15:84:
         e3:b6:ab:b5:7b:00:53:51:7b:c3:6d:a2:3a:73:4a:eb:86:36:
         c4:21:4f:6c:71:16:40:92:ca:22:05:7e:4c:6e:20:94:95:49:
         30:76:83:91:5c:83:55:85:63:77:ab:85:c8:b6:3b:03:40:99:
         af:43:67:20:cd:2c:3e:c9:85:90:97:a2:50:ee:80:5d:b4:21:
         eb:43:dd:12:82:aa:c9:ff:e5:a3:3b:50:90:65:68:36:76:f1:
         dd:b1:95:6a:fa:2b:0e:e1:fe:38:17:78:e8:d8:03:33:69:87:
         f4:35:62:a2:0b:54:87:55:f6:e0:67:e7:1c:04:9e:5d:85:37:
         a7:4a:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:28 2025 by rpki-client