Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa
File:                     f6c9df29-3b43-3fad-b06a-619bbb47b781.roa (raw, json)
Hash identifier:          1suFFTlPRF0GUvsBXyYgyDK2Hi5G7mGcHOlIwQ//MQI=
Subject key identifier:   94:CE:2E:3A:61:35:C5:B4:0A:39:F4:66:5E:28:3A:0F:16:44:68:45
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A14655EA57884DCD442B93A03
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     10747
IP address blocks:        68.65.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5e:a5:78:84:dc:d4:42:b9:3a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=c9da160e-043e-48d5-b292-9bc3e375a189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:6f:a9:fa:b5:1b:8f:71:e3:de:91:06:40:
                    ab:77:cd:ed:cb:4c:85:cb:0b:e5:e7:5d:8b:ab:7f:
                    a0:65:f3:8b:66:1a:aa:50:cb:87:18:7f:b3:4d:ea:
                    e8:30:a3:90:d8:2f:4e:0a:12:53:98:ce:c1:2e:bf:
                    2b:4e:8b:f9:02:0b:97:7c:73:59:a6:39:4e:66:09:
                    5a:f5:e1:d6:85:e2:a9:b3:d1:f9:5c:5c:c3:45:70:
                    d5:e7:11:e3:06:55:2b:93:93:79:c6:37:ea:ae:38:
                    38:49:47:08:6a:dc:61:bd:03:2c:61:0d:3e:88:aa:
                    df:3c:8b:16:32:f9:6c:7c:96:fd:36:70:e8:0c:9f:
                    4c:b5:7c:40:41:b2:02:a1:2e:9f:8d:0a:35:04:7c:
                    ed:93:68:fe:08:81:db:23:32:f1:27:d3:5a:9c:db:
                    5e:b2:a6:9f:f3:eb:9a:e9:1d:3d:a2:20:49:23:75:
                    80:be:ee:3f:56:39:76:16:25:ab:ba:e0:ce:c1:31:
                    7f:85:c0:d2:ba:66:f4:e7:aa:e8:7e:17:04:b6:49:
                    b0:57:05:b6:64:8c:22:17:5e:96:0e:7b:3b:33:f4:
                    1e:be:5a:1c:1b:84:6a:59:d6:63:44:7e:4f:77:97:
                    77:bc:cb:ee:66:1f:99:8d:5c:d4:a8:ca:6f:b9:07:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CE:2E:3A:61:35:C5:B4:0A:39:F4:66:5E:28:3A:0F:16:44:68:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:97:9d:c0:f1:b7:83:ec:ea:1d:8a:7a:65:6f:92:07:7d:42:
         c9:bc:50:af:50:db:57:2c:e8:d6:e9:08:33:62:0e:20:7b:9b:
         1e:05:9f:a8:e1:e4:34:0b:b8:18:d8:ef:2f:6c:f6:bc:a0:6a:
         4a:c8:2b:21:99:d0:cc:88:dd:88:de:97:24:f2:e3:59:62:66:
         72:39:ed:67:b0:4d:ec:18:98:ae:61:37:4e:cb:27:a4:34:75:
         d8:33:a7:1f:9f:29:00:b6:c2:14:41:0b:38:c6:96:4a:d0:c6:
         17:26:54:96:ea:41:e4:10:12:07:49:30:0f:7f:d5:95:a8:a0:
         e7:23:78:ba:09:88:d3:0d:ea:11:ae:65:00:27:c1:41:cf:3b:
         27:a4:87:1d:0e:4d:94:ab:43:7e:62:27:ba:56:4f:01:93:63:
         4b:2e:fc:14:65:13:6d:8e:71:fd:f4:4c:5f:08:20:3b:ab:53:
         42:cb:b2:5b:38:7c:83:db:71:7b:41:ee:56:34:c6:29:03:4d:
         a0:94:98:a8:c0:5e:c1:c3:4d:60:a0:1f:91:54:f7:e5:81:64:
         2d:54:b2:1a:1a:ee:04:64:18:b2:69:57:b2:4e:b9:a2:60:66:
         01:81:8a:03:b1:a5:b7:d3:4c:cd:fa:8b:9e:1d:9e:b3:32:b6:
         fb:5e:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:30 2025 by rpki-client