Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1852458-4fa2-348f-9ad5-ce08348234ab.roa
File:                     d1852458-4fa2-348f-9ad5-ce08348234ab.roa (raw, json)
Hash identifier:          gL0dpH5ATA9+qIbbesNUSf7b3Bl/HghrogDf4s+RFmg=
Subject key identifier:   4A:CA:2E:F7:10:16:A1:5A:95:72:7E:EA:64:99:6C:F1:5F:4B:07:78
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BAA09E849113654B97EB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1852458-4fa2-348f-9ad5-ce08348234ab.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.68.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:a0:9e:84:91:13:65:4b:97:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=d2325019-413a-4f3d-b87c-becd8389c2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:60:a0:06:6e:50:9f:e7:56:fe:fb:2c:09:
                    1c:8a:78:f5:9c:1f:cd:ad:6a:f7:7f:63:4a:35:f7:
                    94:b6:18:79:48:32:cd:9e:d7:26:da:80:22:67:48:
                    d3:2a:19:51:0d:b9:4d:b0:18:06:15:43:76:d8:09:
                    86:03:88:e3:42:38:a5:cf:86:0e:05:f3:0f:4c:5e:
                    c5:1d:61:eb:34:5a:cf:4f:3c:57:8d:dd:96:97:08:
                    1e:fd:92:c7:25:a5:1f:38:67:4b:38:c1:1d:cd:45:
                    fc:29:93:0f:68:d8:9e:06:fb:ac:a6:76:f3:a6:b6:
                    c4:49:f3:53:a1:63:a9:22:de:00:27:79:6a:7f:48:
                    a4:1f:d9:a7:bb:d7:56:f0:c0:b8:48:14:3d:93:66:
                    9e:cd:a4:6f:21:4a:fe:ee:fb:26:8e:28:2f:34:75:
                    3e:32:29:6c:33:c0:dd:ce:0a:e0:72:c2:2f:ff:b9:
                    aa:58:63:ad:36:d5:5d:b0:62:3f:09:2d:bb:5b:5e:
                    c5:4f:f7:88:8e:37:55:10:e9:a8:44:22:77:08:2c:
                    1f:91:33:e3:97:8f:ce:11:18:48:93:31:49:8f:ec:
                    7a:9e:e4:3b:a1:f6:e2:54:19:01:9d:ba:7a:e0:b0:
                    e9:42:8d:d7:e3:5c:ec:df:20:dd:b0:59:b3:6d:e8:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CA:2E:F7:10:16:A1:5A:95:72:7E:EA:64:99:6C:F1:5F:4B:07:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1852458-4fa2-348f-9ad5-ce08348234ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:be:f1:2f:7f:31:c3:a4:fb:7c:25:4f:50:04:c2:cf:b0:9c:
         98:14:4f:75:b4:63:cf:9c:bf:cf:c8:bb:a4:0b:2e:92:56:01:
         40:2c:3c:fe:0b:34:fb:fb:80:89:7e:3b:f3:d9:ef:b0:7b:40:
         e6:80:0c:7e:f3:8d:e9:9d:53:da:8a:f8:1d:d8:c9:43:fc:7c:
         1b:78:61:4a:86:b4:64:b3:37:7e:d8:97:2c:85:8e:8b:bc:f5:
         77:6f:bf:26:21:c3:5f:1a:f8:7e:77:0d:6f:dc:d9:e6:8c:59:
         14:0d:3f:3b:5f:12:7b:fc:94:96:a2:cd:af:4d:57:cf:96:8a:
         f2:fb:73:b3:49:18:fd:d2:d0:cf:97:90:79:3f:a4:4d:cc:5a:
         f8:c4:e0:03:d1:ec:01:3f:a3:d1:8f:ef:b4:81:fb:9b:a9:0b:
         42:b6:ac:d9:37:ec:7e:2d:fc:2c:89:e1:6b:c0:a8:b5:08:8e:
         b8:8d:69:9e:24:89:1b:c1:be:8f:bd:f3:42:c5:f3:e1:5d:38:
         d1:13:5b:28:4c:2b:1f:d5:af:99:ac:18:a3:c2:56:c7:ac:47:
         56:a6:c5:8d:e7:b6:58:99:b1:14:02:ec:bf:dd:e7:6e:a4:fd:
         5b:7e:51:29:4d:24:ef:76:1f:80:11:b3:12:10:a7:02:82:0f:
         52:dd:6b:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuqCehJETZUuX64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
ZDIzMjUwMTktNDEzYS00ZjNkLWI4N2MtYmVjZDgzODljMmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMtgoAZuUJ/nVv77LAkcinj1nB/NrWr3f2NK
NfeUthh5SDLNntcm2oAiZ0jTKhlRDblNsBgGFUN22AmGA4jjQjilz4YOBfMPTF7F
HWHrNFrPTzxXjd2Wlwge/ZLHJaUfOGdLOMEdzUX8KZMPaNieBvuspnbzprbESfNT
oWOpIt4AJ3lqf0ikH9mnu9dW8MC4SBQ9k2aezaRvIUr+7vsmjigvNHU+MilsM8Dd
zgrgcsIv/7mqWGOtNtVdsGI/CS27W17FT/eIjjdVEOmoRCJ3CCwfkTPjl4/OERhI
kzFJj+x6nuQ7ofbiVBkBnbp64LDpQo3X41zs3yDdsFmzbegRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErKLvcQFqFalXJ+6mSZbPFfSwd4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDE4NTI0NTgtNGZhMi0z
NDhmLTlhZDUtY2UwODM0ODIzNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEREMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMW+8S9/McOk+3wlT1AEws+wnJgUT3W0Y8+cv8/Iu6QLLpJWAUAsPP4L
NPv7gIl+O/PZ77B7QOaADH7zjemdU9qK+B3YyUP8fBt4YUqGtGSzN37YlyyFjou8
9XdvvyYhw18a+H53DW/c2eaMWRQNPztfEnv8lJaiza9NV8+WivL7c7NJGP3S0M+X
kHk/pE3MWvjE4APR7AE/o9GP77SB+5upC0K2rNk37H4t/CyJ4WvAqLUIjriNaZ4k
iRvBvo+980LF8+FdONETWyhMKx/Vr5msGKPCVsesR1amxY3ntliZsRQC7L/d526k
/Vt+USlNJO92H4ARsxIQpwKCD1Lda4E=
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:25 2025 by rpki-client