Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b466fd9c-005a-3750-9fc8-930de3efd865.roa
File:                     b466fd9c-005a-3750-9fc8-930de3efd865.roa (raw, json)
Hash identifier:          LwlHvV0O7wRXsjohukz7QEEPvdpX96menP2SmYCMQno=
Subject key identifier:   41:67:75:AF:2B:05:DE:A5:02:23:D4:6D:85:BA:97:3B:96:DF:1B:FD
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285849218410E0A6FB451940957A80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b466fd9c-005a-3750-9fc8-930de3efd865.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        68.170.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:10:e0:a6:fb:45:19:40:95:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=4c63be5d-dc99-4870-bb4d-11eee0ace5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:10:1d:15:59:39:a3:91:0d:37:c8:e2:89:
                    72:c8:a3:c7:e7:58:be:52:1b:d1:2b:28:27:3e:55:
                    1b:cc:a8:42:3e:b4:f1:f5:27:d2:27:bc:a3:bb:76:
                    09:20:86:f2:26:5a:b0:d6:1b:c0:19:a7:f6:c1:f4:
                    69:fd:0e:5f:ca:07:f9:77:03:5c:e3:dd:7b:6a:3c:
                    d0:b3:01:24:66:0f:a2:b6:10:c0:2d:1e:20:c8:5d:
                    ce:a1:49:13:03:69:29:21:bc:48:4e:f8:91:bd:88:
                    08:a4:5a:ce:f6:e3:28:69:9a:3d:d0:88:2d:c4:e8:
                    85:e3:1c:ee:b4:cb:a2:a5:86:66:1f:35:a3:a7:4f:
                    f5:64:4c:ff:a2:0a:41:ec:4f:b8:31:70:08:9e:af:
                    2c:ca:4e:76:d4:26:0c:39:ba:50:f3:c9:f1:e9:a8:
                    b8:6d:47:7a:53:1e:bb:6f:ea:88:5f:1f:78:1e:ed:
                    8c:dc:66:87:13:13:07:5f:81:17:9f:8d:29:ea:41:
                    2a:42:fb:b1:23:85:23:ee:c7:d4:a0:27:ae:98:ff:
                    28:f1:2f:20:1a:fb:aa:d6:09:19:d6:87:7a:ef:11:
                    27:f5:38:1c:0c:1c:2a:95:87:f6:7f:fa:48:1e:92:
                    08:c7:3f:d3:9c:42:7b:a7:98:aa:ee:df:48:8f:8c:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:67:75:AF:2B:05:DE:A5:02:23:D4:6D:85:BA:97:3B:96:DF:1B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b466fd9c-005a-3750-9fc8-930de3efd865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:2b:02:4a:6c:96:d1:ea:e5:e8:0f:3d:ee:24:62:37:5e:
         de:3d:c0:ce:09:6a:82:52:a2:aa:86:21:3a:ea:e9:1a:4d:6f:
         9d:16:74:c0:9d:83:e9:0f:dd:e4:bb:9c:c4:43:27:25:c3:72:
         79:9a:7b:e0:ed:27:ad:d4:18:96:0d:af:b5:ae:2c:6f:23:4c:
         a2:4b:97:51:76:54:11:f9:98:09:9f:c6:b4:6f:ab:c2:b7:19:
         68:e9:aa:55:b2:c9:59:d0:fc:a2:f8:6f:cd:97:2d:d4:77:9c:
         84:b3:46:40:7d:1e:e5:2a:3a:5c:92:e9:61:95:5a:ec:82:5f:
         ba:82:69:5b:96:21:37:92:38:14:e2:80:2a:02:b7:b1:5c:e2:
         a8:64:0b:7c:09:a2:c7:fa:31:70:b5:9d:35:48:c6:03:df:6d:
         18:b5:18:cb:72:20:9a:37:8b:fb:8f:3c:55:73:27:b1:90:14:
         89:8b:8a:62:7c:41:bc:34:71:14:bb:be:27:23:cd:22:6e:05:
         3e:39:1d:99:dd:dd:82:b8:5a:cf:18:c9:98:9f:0e:11:70:78:
         b6:4b:3a:96:2c:45:83:12:aa:6e:d0:1a:b3:a8:fc:64:b6:e7:
         cb:f9:c3:80:f8:26:56:96:20:d7:3b:c8:71:f7:c1:ec:07:dc:
         b1:b1:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:49:45 2025 by rpki-client