Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fad69ad1-43da-3c31-873a-d84fd5b2825f.roa
File:                     fad69ad1-43da-3c31-873a-d84fd5b2825f.roa (raw, json)
Hash identifier:          ktZe45Nyei/JNQxO6PsALD5GXVtek5V3jrY9terzDqQ=
Subject key identifier:   1C:45:E5:BD:26:E5:E0:56:80:0F:AE:F4:BD:4F:D3:14:45:0E:09:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8BA1730446B54A23211BE
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fad69ad1-43da-3c31-873a-d84fd5b2825f.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        75.68.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:ba:17:30:44:6b:54:a2:32:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=1925fe34-9371-4512-b0f4-104b08cd87a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:66:4a:dd:b4:07:46:c3:37:b8:96:63:f1:
                    5d:ab:d0:14:08:fa:ae:d2:63:5f:15:2e:b3:a7:53:
                    4f:08:bd:90:fc:26:5d:f6:92:42:b3:72:bf:b5:d6:
                    78:58:4b:88:99:91:02:45:7c:7f:67:86:20:83:b7:
                    ef:4f:c1:4b:6a:a6:40:dd:82:b3:c9:42:ef:b7:51:
                    96:9e:4f:27:5a:3f:83:fd:23:83:15:58:37:66:6e:
                    45:d0:cc:a3:30:46:4d:83:0a:0e:17:cf:47:0b:8b:
                    56:54:43:db:63:53:13:a5:c3:00:58:49:c7:4c:3a:
                    dc:21:9b:32:ca:d9:53:5c:a9:8b:6b:90:00:7b:2c:
                    05:7d:a2:04:6f:58:06:ea:92:10:cb:b2:ab:56:19:
                    d1:59:70:e3:b2:d1:11:02:1c:2b:c1:b3:fd:8b:c0:
                    41:7e:47:c2:21:e2:e2:38:c2:74:43:d0:7a:e0:c2:
                    89:d9:8c:a2:52:bd:ef:b3:cf:8e:67:b5:0e:da:21:
                    21:36:1d:2d:25:6f:87:93:35:3e:33:45:dc:f5:56:
                    09:b0:a0:93:45:26:22:00:e4:da:ba:b0:07:81:6d:
                    b6:6e:3c:e0:6a:8c:e8:60:7c:af:2a:5e:a2:05:29:
                    13:93:23:b6:37:cc:cd:a6:5c:2c:fd:91:eb:b6:68:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:E5:BD:26:E5:E0:56:80:0F:AE:F4:BD:4F:D3:14:45:0E:09:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fad69ad1-43da-3c31-873a-d84fd5b2825f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.68.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:20:d2:a3:59:d6:e0:8e:e7:f2:c1:cd:64:40:7c:2d:56:3d:
         31:09:f6:49:fe:22:7e:dc:6d:70:57:06:e8:25:3a:44:1a:b1:
         cf:44:c2:eb:87:59:88:08:a5:e7:6b:49:a4:aa:ca:00:15:4c:
         b9:78:b3:a9:92:3a:f4:d4:98:41:06:81:c5:bd:b3:ae:41:42:
         c0:00:0e:38:9b:9c:db:ff:b4:90:39:9a:71:7e:fe:7f:2f:35:
         f5:35:b9:56:2c:f7:93:8d:79:57:57:46:df:89:7e:8f:1c:a9:
         02:4d:d7:d0:e3:a0:37:a2:b0:68:20:fe:1f:fc:fc:44:ca:83:
         80:a3:a6:c2:df:79:f7:80:e4:e3:71:47:d8:f6:e0:0c:3b:33:
         50:87:2a:4c:5c:bf:fe:80:31:14:87:b5:b6:f5:f8:36:94:78:
         7e:67:e2:cd:52:03:a3:98:e9:3b:93:98:2f:69:77:4e:fb:7c:
         5b:f9:a4:a3:ec:98:3a:b6:0d:fd:00:31:09:ff:fc:6c:17:0e:
         d4:03:26:17:d5:7e:3e:8c:6b:49:c9:6a:8d:c8:a4:c0:a6:91:
         06:d7:0a:bf:a0:93:50:12:ce:64:4a:7a:0a:28:57:92:2d:65:
         8b:78:72:fe:be:af:ad:9b:19:02:4c:9a:40:e2:95:78:01:bb:
         99:67:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:39 2025 by rpki-client