Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43c086e-c0c3-354a-9db8-644643c9156b.roa
File:                     f43c086e-c0c3-354a-9db8-644643c9156b.roa (raw, json)
Hash identifier:          rya6Jho7TAMs7Dvtt7TuBHqjje7QVckR02rVBoqcHK8=
Subject key identifier:   49:4E:E9:10:72:8F:8B:1E:41:CA:4C:36:51:FA:71:E5:1F:EF:B6:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431F9C52BD7590EDE9221C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43c086e-c0c3-354a-9db8-644643c9156b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.43.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:f9:c5:2b:d7:59:0e:de:92:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ddab85f7-7a48-4e0f-9242-897c43f24d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:08:81:df:df:57:79:a5:cf:4c:13:ae:41:
                    0c:37:8c:00:35:0c:de:bf:53:31:21:56:ef:94:cc:
                    c9:09:01:a9:30:7c:3d:de:5e:17:80:66:1d:84:bd:
                    ce:0f:a2:e0:05:90:61:12:ac:84:b4:0e:8f:08:6a:
                    3b:8f:7d:76:41:d7:c7:31:16:4d:79:3a:f2:11:24:
                    75:53:99:a6:c2:6a:5c:47:7c:77:0d:ae:0b:6a:b8:
                    c6:06:94:bd:09:36:75:ae:00:c8:7b:5d:a1:76:f8:
                    94:6b:d9:51:84:a5:c7:b3:00:af:58:b6:9b:d7:d2:
                    52:1d:a9:1b:22:e3:f6:80:6b:77:fb:b7:6c:02:62:
                    d5:2c:38:5a:3f:a6:e0:83:65:4d:59:84:69:14:26:
                    77:8d:af:e6:d2:28:dd:be:22:e1:5a:6b:62:62:c0:
                    9d:88:fe:5a:34:0c:00:db:2d:57:c1:88:89:8f:b6:
                    1f:5e:e2:d7:9f:53:8b:c1:a4:64:c7:f5:59:76:f9:
                    2e:db:82:af:9e:89:c4:74:2c:64:62:88:2b:ff:e6:
                    5a:33:1f:73:6b:c2:c3:07:97:6e:1f:1e:e4:20:90:
                    83:3f:f6:48:92:69:5c:aa:b3:a7:ff:13:95:c9:8c:
                    63:bc:fd:d8:6d:cb:2e:e6:ef:f5:36:da:05:b3:2b:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:E9:10:72:8F:8B:1E:41:CA:4C:36:51:FA:71:E5:1F:EF:B6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43c086e-c0c3-354a-9db8-644643c9156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:55:44:d1:31:22:43:5b:ac:9e:be:15:70:79:2d:3b:49:45:
         7f:9a:b3:04:15:76:97:82:a2:4a:76:28:43:9c:eb:ca:cb:d8:
         a3:85:6a:44:bf:55:00:93:6e:2f:6f:a4:cd:c2:23:d4:dc:c2:
         f8:ea:29:a9:2b:d9:4f:7e:52:07:16:0a:d5:ee:90:9b:d9:c4:
         c8:9d:0d:9d:e7:63:6a:d3:cf:5a:e8:2e:f4:0c:20:ab:ba:cb:
         89:a8:9b:5f:c7:ee:08:1a:30:fe:04:97:02:28:19:61:a4:c9:
         5f:56:ac:db:c6:ce:97:d2:5b:d1:1a:fe:50:bc:51:ed:4e:43:
         62:93:72:90:0e:28:2d:7b:f7:77:12:02:3d:4d:d2:32:75:bb:
         50:d1:d4:16:81:dc:88:3f:6a:33:fe:8b:40:a0:c6:71:0e:8a:
         77:39:97:04:5e:f5:ef:00:45:d0:84:fa:b3:27:c8:a8:91:dc:
         25:85:1a:a9:14:29:51:c5:a0:9b:03:8c:78:5d:2d:5f:20:1d:
         8a:97:32:90:e5:58:b1:9d:3f:ee:7f:45:30:32:18:f2:a2:e2:
         18:6e:35:0c:12:79:f5:a8:54:77:7c:92:f3:2b:cd:1e:d5:cc:
         eb:a1:5e:ac:7e:b2:56:d3:c8:57:34:41:a6:0b:be:95:c6:09:
         5a:18:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:39:52 2025 by rpki-client