Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa
File:                     fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa (raw, json)
Hash identifier:          jnJZwApavZKVZSHmS3lpnZ339hDj8SBzys5P1n95hPg=
Subject key identifier:   F6:69:D3:41:78:F6:25:82:8E:DC:BD:E5:7E:85:B0:36:DC:22:A7:46
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F432858492E13BB42A0CAC02A77659080
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     26506
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bb:42:a0:ca:c0:2a:77:65:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=0e0bdc40-9d9b-4c79-b0ec-ba79dc2b99e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:c8:6c:96:27:3d:ab:fe:8a:87:d5:13:17:
                    6c:c7:89:ed:40:26:bf:07:02:db:12:80:e3:3f:06:
                    ab:86:9a:c5:de:b3:4a:a6:0d:07:af:7d:20:ae:d4:
                    1b:67:a5:30:ad:82:b6:f4:91:ed:a0:66:a3:6e:0d:
                    29:bb:f9:dc:cd:51:d5:08:61:92:af:00:9f:34:3e:
                    e7:b3:d3:8f:02:34:0e:8e:c0:a2:79:43:13:4c:41:
                    15:d0:b3:9d:9e:ce:ef:0d:5f:3c:63:a1:96:9b:cb:
                    70:39:1c:48:25:e5:58:46:41:11:f1:19:27:7e:91:
                    d3:f1:8e:b9:9f:75:0a:cc:f0:a9:f5:87:ec:6d:b2:
                    aa:5c:44:c8:28:3f:83:10:63:f8:cd:88:11:40:9f:
                    88:fb:6e:c2:aa:28:d3:fb:d7:e6:e4:ad:35:09:36:
                    2b:cc:e2:10:be:8f:3c:aa:29:8b:8d:68:0c:17:8b:
                    05:30:c4:ef:31:52:e1:7d:a8:a0:3e:84:3b:29:2e:
                    74:ef:b4:7d:6b:1d:9a:ff:6a:01:05:55:26:8b:2c:
                    10:3f:e2:72:7e:3e:e7:5b:24:fc:25:14:fc:19:73:
                    47:9f:5f:cb:37:1c:bf:4d:bc:d1:fd:ea:3c:60:e0:
                    05:2f:8b:48:04:19:f0:56:fb:a9:16:fe:00:7d:ca:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:D3:41:78:F6:25:82:8E:DC:BD:E5:7E:85:B0:36:DC:22:A7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/fbe0054f-c4aa-35a8-a7bf-dfbeb61f629e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:c5:05:87:45:59:f7:2b:de:98:a5:1c:89:93:52:c2:0b:
         e1:b6:33:f0:0b:c2:9d:1e:fb:0a:df:8c:fa:8a:d6:f6:ae:da:
         c9:f7:b9:c3:49:ea:f1:02:0f:a9:44:94:8e:98:9b:89:f8:79:
         25:99:28:60:04:2e:35:4b:51:5c:4e:f0:3c:d6:3a:37:8b:5e:
         5a:b5:72:a8:73:66:ff:ad:eb:78:43:b6:6e:db:b5:dc:fe:a5:
         a5:e1:b0:e9:cf:ff:f7:49:bf:38:b3:b2:b3:4a:6c:d9:2f:1e:
         3e:bd:7d:e6:0e:19:05:44:c5:0f:b1:98:a5:fa:48:f6:b4:00:
         75:6c:23:d1:88:0c:b6:6d:9c:9d:81:55:4a:b9:fa:eb:c4:27:
         46:5b:68:df:6c:83:98:34:44:5c:4c:99:80:0e:e3:51:13:86:
         da:72:06:57:bf:34:82:98:b2:7a:6c:3f:3f:51:3c:0b:37:27:
         4a:b1:86:a8:1c:a1:5a:20:1e:7b:e7:ff:0a:ee:27:47:27:6b:
         d3:6d:40:4d:2b:e7:05:b1:b7:d4:98:18:0b:ec:78:ec:cd:7c:
         b0:65:f2:ea:8d:08:e2:88:f9:45:57:70:6d:a3:b5:fc:43:f4:
         28:17:46:bb:c8:f3:65:4c:e4:6e:78:1f:89:b8:35:e2:85:53:
         b9:5c:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:47:03 2025 by rpki-client