Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa
File:                     4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa (raw, json)
Hash identifier:          C54eQBTmC3pr3dB+v0t7A8OyMeg3XF8lNVXYO1HEg9U=
Subject key identifier:   0C:97:8A:60:95:D0:21:5B:32:F2:41:B8:8C:AB:4A:9F:2E:4D:D4:63
Certificate issuer:       /CN=515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d
Certificate serial:       010D0C9F4328584AD936667D650713B93203D080
Authority key identifier: 54:05:9B:E9:C5:4F:4D:A3:1C:AD:F9:79:AB:E7:ED:6E:63:A9:C6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     399445
IP address blocks:        68.69.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:66:7d:65:07:13:b9:32:03:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=2d5a68ac-50d6-4196-90cd-70336d59afd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:ab:45:b2:02:ee:86:c3:98:1f:f1:e7:e0:
                    47:47:84:aa:74:45:44:ee:10:59:69:ef:4f:1c:c1:
                    58:de:8e:0a:98:c4:02:29:b3:4e:94:b5:c6:cb:9d:
                    08:13:ab:40:ec:9d:81:f6:1a:21:32:75:48:27:50:
                    95:9a:ed:09:da:52:13:95:fb:26:45:30:d8:2c:32:
                    17:be:4b:2e:e6:63:a2:56:ad:ba:9a:1c:d5:76:de:
                    2e:dd:4b:30:a1:6f:da:8d:02:af:50:73:52:ea:cd:
                    e1:c0:90:3d:06:4f:27:86:f5:46:3b:b3:d2:2a:69:
                    97:4e:ec:3f:3a:bb:20:2e:5c:7f:ab:bd:27:c6:af:
                    68:95:67:5e:36:1f:af:45:f6:43:26:d6:93:70:63:
                    9a:92:07:e6:8f:78:eb:67:29:be:15:bf:b8:2c:35:
                    d7:71:94:fc:07:70:42:ea:e9:89:9d:db:97:e1:d5:
                    00:e6:d2:93:27:38:10:b0:40:29:a9:f5:b6:85:e9:
                    9f:89:74:49:f5:2e:9e:ec:63:b9:b0:b4:85:0e:5c:
                    3b:8a:c2:e3:4b:ce:dd:0c:ec:40:db:41:d1:24:de:
                    c4:91:19:d2:37:87:30:ec:b9:01:f5:0a:b6:fa:f6:
                    9b:c3:fc:b6:1a:89:48:ba:22:86:db:9f:5a:0f:d7:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:97:8A:60:95:D0:21:5B:32:F2:41:B8:8C:AB:4A:9F:2E:4D:D4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/4e38c8c5-62b6-31ad-860a-72d4a6cf0cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.crl

            X509v3 Authority Key Identifier:
                keyid:54:05:9B:E9:C5:4F:4D:A3:1C:AD:F9:79:AB:E7:ED:6E:63:A9:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/515cd3cf-4c47-412e-8c3d-c9ba4fa0fb6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:84:e0:54:b0:39:02:7e:b9:1c:d6:af:b1:99:f4:fa:07:
         9b:df:70:b7:01:68:1d:ab:57:08:3e:28:10:2d:63:0a:dd:e1:
         bf:a0:03:46:7a:f2:12:91:d1:30:06:9f:68:4c:a0:08:55:c4:
         7a:2b:54:78:f0:f9:20:57:39:97:75:87:b3:e7:78:bd:b5:43:
         d6:64:05:c3:70:3b:7a:8e:1f:f4:6a:cc:57:e3:dd:07:4a:e6:
         67:f4:98:2b:6d:1b:7e:cc:a3:37:8f:bd:98:59:86:d4:7b:f0:
         7b:c8:dd:62:b7:09:e3:63:86:18:a9:b2:ae:d8:94:0b:d3:1d:
         db:63:dc:f1:f1:f5:53:50:c7:7b:d4:ba:91:cf:20:a9:28:b9:
         ed:76:47:e5:ed:a5:8a:7e:00:23:2f:0a:40:0b:10:43:62:ac:
         22:1c:e7:bd:65:32:9b:a4:6b:c8:c6:31:93:b1:35:62:f5:7f:
         6a:cc:24:19:fd:6a:62:e2:79:c2:af:2a:18:70:d5:c8:8a:0f:
         ab:e7:b0:21:0d:da:27:86:fa:a1:0e:dd:11:f0:06:b0:40:cd:
         87:27:5f:03:e9:ef:b9:5a:ae:f5:f3:a7:ef:34:73:39:d3:2a:
         3d:30:58:b0:3c:15:c3:59:92:f9:50:d8:71:f7:ea:97:fe:cb:
         4d:be:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:55:02 2025 by rpki-client