Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e3198fd-f8bc-3ee4-8082-417c088dc3e2.roa
File:                     1e3198fd-f8bc-3ee4-8082-417c088dc3e2.roa (raw, json)
Hash identifier:          cA/WPDRKL5P3PWVEPaCOctCWa6bBFiIMdVXdlxst9Gk=
Subject key identifier:   8F:93:63:A5:C1:0D:62:10:22:E3:A2:18:25:6C:6A:FB:57:BE:1F:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC64A19D2B1A8102FB1060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e3198fd-f8bc-3ee4-8082-417c088dc3e2.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        75.68.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:64:a1:9d:2b:1a:81:02:fb:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=544bfcd8-a70f-4f4f-ba78-2475acefec13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:71:a8:ac:53:b2:f7:d5:73:ad:36:ff:a6:
                    e1:6b:fd:e2:fd:29:2d:74:78:04:40:ab:dc:bb:74:
                    6d:26:dc:d9:d5:37:d1:69:f4:96:92:ea:b7:5f:ae:
                    76:cb:9c:4f:0a:91:5a:44:c0:5a:b1:da:3d:25:a3:
                    39:69:4c:cf:b5:ee:f3:2e:e1:00:34:48:4f:9d:bc:
                    ca:f5:af:71:fb:f8:e5:91:e9:f0:e6:aa:a9:6e:d0:
                    d7:6e:51:61:10:b9:0f:8d:67:84:06:7d:dc:0c:50:
                    08:a9:a9:4d:a4:8a:e1:c6:a1:80:68:2c:d0:05:d1:
                    68:c3:56:bf:e5:db:96:52:e8:be:f1:1b:77:52:94:
                    e5:09:6f:7c:4c:4c:27:c5:a4:4d:f8:7d:4a:b9:39:
                    d8:ee:7f:2e:71:6b:a5:08:89:cb:2f:b4:9e:48:fc:
                    0e:ae:d0:7b:fc:48:1a:09:a6:ae:92:65:e6:71:54:
                    e0:a3:60:0d:09:18:78:78:5d:89:c0:f6:67:4c:f6:
                    36:0d:77:15:ff:77:4b:e0:1e:d1:13:ba:5a:aa:c4:
                    5d:ba:6b:2c:4a:00:6c:f5:0b:1b:06:50:e8:d8:3e:
                    e8:17:5e:18:85:10:66:a7:0b:01:a1:b2:52:a8:46:
                    a8:36:db:da:49:6e:d5:b9:88:5e:f2:c6:d8:6e:a1:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:93:63:A5:C1:0D:62:10:22:E3:A2:18:25:6C:6A:FB:57:BE:1F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e3198fd-f8bc-3ee4-8082-417c088dc3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.68.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:a8:fa:33:7f:c8:9f:4d:10:08:71:e0:2e:77:3c:44:1a:
         c9:4b:35:f6:82:f0:7f:de:fa:02:f5:64:1a:3a:f4:f4:d4:83:
         74:47:df:6c:98:31:d2:ba:aa:86:bc:f3:43:93:76:7e:7e:a9:
         bb:f2:64:f8:0b:a7:c1:b2:5c:e4:ee:18:f8:9d:cd:11:6f:88:
         b3:22:8f:c6:63:36:6e:b6:70:7b:e0:cf:fb:be:73:e6:db:75:
         a4:39:01:bd:d3:f9:1a:26:c1:cb:e1:7f:30:14:98:e1:a5:5d:
         bc:a1:e9:a1:08:5e:f3:e5:c7:7b:22:44:73:ca:95:22:2b:fd:
         42:81:03:b0:a6:a2:81:af:52:de:b1:f2:67:b8:2e:9c:06:47:
         d3:86:e5:4f:40:61:8e:b9:5a:b6:54:fb:ca:32:01:08:81:f9:
         15:5c:c3:95:8a:17:b0:06:43:33:d4:3a:f2:90:9f:93:ab:19:
         ee:6b:0a:a3:65:4c:e6:f7:6b:be:88:75:60:0a:c6:bb:c9:10:
         ab:99:e9:5e:a0:4c:2d:6f:38:30:bc:30:1b:03:79:43:51:d2:
         c6:b7:b6:f4:d1:6a:ad:c8:2a:c5:52:da:ad:5a:5e:4e:e7:75:
         7c:6c:63:ba:45:9e:22:ce:94:c0:d4:e7:a4:cf:33:10:46:6e:
         5b:2f:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:30 2025 by rpki-client