Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89427f1-3a6d-3bfa-b9a0-073deef94794.roa
File:                     f89427f1-3a6d-3bfa-b9a0-073deef94794.roa (raw, json)
Hash identifier:          Xfaam+BPdu6KfMraRtIZDP8TNizG6EmhbVBknb0mHmQ=
Subject key identifier:   E3:85:5E:79:14:E1:24:D3:D9:A8:C2:C3:58:6F:D3:50:45:D4:44:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4320687DAED4C7E94A3AE10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89427f1-3a6d-3bfa-b9a0-073deef94794.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.61.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:06:87:da:ed:4c:7e:94:a3:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=011c6dfb-e8f1-4688-b397-f48c97c3b3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:2c:b6:bf:b8:7e:23:ed:be:72:f2:21:e4:
                    9e:52:b2:f3:47:9a:5b:81:67:9b:aa:7e:dc:46:d9:
                    06:4c:ee:8a:3b:07:83:6a:a8:20:a2:aa:6d:84:bb:
                    52:dd:e5:53:58:13:5b:62:25:a4:71:c8:23:85:3e:
                    b4:3d:da:dc:c5:c2:60:25:e8:c9:9a:30:7f:ed:82:
                    1a:dc:0b:05:51:a1:17:26:8b:a7:a6:7b:70:ae:3b:
                    c6:c9:76:b9:f2:0d:5d:87:98:c1:52:5e:3d:3a:3e:
                    9d:35:81:c2:f6:4f:8e:ff:08:31:6d:2f:d8:b2:46:
                    40:00:08:b8:c1:97:ce:86:35:02:37:bb:c9:18:b9:
                    d6:25:35:77:e6:79:3f:e8:50:f6:cd:82:40:45:61:
                    b1:3d:d0:39:b9:9b:68:66:96:4f:0c:17:27:a1:ba:
                    18:d9:31:f2:ca:e3:19:48:c3:ef:f0:47:f2:cb:b4:
                    0b:34:ea:8e:09:03:7e:a5:fb:7e:00:bf:b1:05:e3:
                    1c:dd:70:06:ad:e1:94:c6:df:b1:2b:27:cb:48:77:
                    59:eb:ea:70:0e:c0:76:92:44:bb:79:38:ec:93:f6:
                    83:9e:ae:09:01:4d:a8:73:a3:dd:6f:48:41:79:23:
                    21:c1:23:af:e7:cc:de:8c:c7:e1:74:2e:91:6d:b9:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:5E:79:14:E1:24:D3:D9:A8:C2:C3:58:6F:D3:50:45:D4:44:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89427f1-3a6d-3bfa-b9a0-073deef94794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:df:4d:98:91:fb:90:21:dc:bc:f5:96:5d:df:45:6d:9d:
         c8:31:f9:54:ed:40:37:2d:65:c2:54:15:c1:2c:f3:cb:ae:28:
         e6:cb:5e:c0:1c:f0:1f:5e:93:d5:39:0a:4c:da:f3:a0:d2:3d:
         70:1c:0f:fe:ac:d3:b4:2f:6f:49:f6:10:b3:57:1f:c1:61:c9:
         a3:b8:d9:66:bc:ca:e9:ed:b1:59:af:3a:7e:b4:45:a2:2a:22:
         83:31:cb:24:b9:ba:91:88:d0:a2:7d:4e:f3:26:73:81:77:87:
         ad:f0:a2:59:ac:e0:bf:fa:c1:ee:13:57:10:0a:cf:9b:48:3a:
         2a:0f:6b:ea:46:f5:d4:22:0e:25:8a:89:97:bb:5b:67:dd:59:
         e8:a2:d4:f4:ed:00:e5:32:7f:65:b8:4b:11:7a:07:20:29:21:
         92:fd:3b:6f:59:7b:74:56:b2:bc:53:9a:52:9f:45:81:00:eb:
         75:e4:91:f1:6a:a5:f4:9f:ce:cf:ad:d4:43:1f:92:79:fd:5b:
         a1:9f:a1:8b:47:6f:78:8b:70:14:e3:dd:f5:61:f1:0e:9f:c5:
         49:ac:76:f2:4b:f5:41:07:1b:c7:ae:b9:40:7a:6d:60:5d:18:
         1a:ea:2a:69:98:9a:89:f1:fa:62:ec:bd:a6:3a:f9:76:36:b9:
         34:44:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:37:59 2025 by rpki-client