Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47f7e23c-6256-3748-af26-7b2653be218c.roa
File:                     47f7e23c-6256-3748-af26-7b2653be218c.roa (raw, json)
Hash identifier:          n0Y4W/mRkcgQP95IoHiCn1BChVSEq/LwsMdRpRwKIp8=
Subject key identifier:   DE:B6:F2:A8:D3:E7:BD:44:C1:7F:17:8E:81:0D:9D:8E:BF:CA:86:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE60478D40A3957810B100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47f7e23c-6256-3748-af26-7b2653be218c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.48.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:60:47:8d:40:a3:95:78:10:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d2865fc9-bbd0-4a03-9dbd-36d71d298b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:96:07:c0:1e:ab:ed:fe:83:45:41:bc:87:
                    fd:68:d7:41:dc:64:29:57:64:ca:62:f1:92:c9:1f:
                    de:82:54:d8:3d:7f:5a:d7:01:b4:1e:13:c0:c9:c0:
                    6f:f8:23:b5:29:12:e8:86:39:18:29:b4:8e:0f:5f:
                    f4:4a:bb:6a:ee:fe:6c:d4:77:11:d7:54:64:07:42:
                    f1:7d:5f:83:2b:4e:dd:32:43:f5:a9:a8:7a:2b:cb:
                    c9:a3:bf:5e:ff:d1:be:a9:43:db:e4:93:ec:a6:60:
                    26:63:1b:3d:01:35:02:6f:65:12:51:88:21:98:08:
                    e4:cd:b8:1c:c3:66:1c:05:df:62:34:dd:46:e3:06:
                    28:05:89:a1:31:c0:e7:92:fd:fd:a7:21:c3:85:e7:
                    b7:39:04:68:8a:5b:95:aa:56:8b:ed:c7:fc:37:59:
                    5f:b4:42:cc:dd:88:4b:15:c5:40:a2:6b:65:ab:a0:
                    16:ac:43:91:7a:40:b7:98:e5:2c:ed:00:e0:4a:be:
                    14:c3:92:36:e6:9b:33:62:2a:61:07:7b:7c:a3:6b:
                    5e:d5:d9:fd:88:d5:14:3f:9c:5f:9d:7b:67:b8:cc:
                    49:ff:f0:b6:93:ef:b5:d1:53:4e:06:7b:27:5d:9f:
                    95:e1:33:1d:95:58:dc:d9:b1:fe:44:72:76:04:fb:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B6:F2:A8:D3:E7:BD:44:C1:7F:17:8E:81:0D:9D:8E:BF:CA:86:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47f7e23c-6256-3748-af26-7b2653be218c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.48.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:f5:ea:fc:4f:27:75:91:9b:7b:7b:dc:0a:8c:4c:4c:bb:
         58:a8:2e:c6:09:20:06:03:8f:d5:a5:8c:62:dd:a6:ad:61:69:
         03:6f:d1:00:62:0a:57:f9:aa:c3:92:58:19:e2:d4:1b:5c:7e:
         2c:72:27:8c:1a:1a:39:e6:56:9b:3b:34:30:34:e9:0a:68:f8:
         08:dc:00:b0:4d:30:61:32:57:91:44:45:5d:46:0b:1d:dc:82:
         4d:a5:ee:8a:3e:9b:fa:03:65:a1:f0:98:44:f5:8c:2a:33:79:
         18:67:77:83:42:15:8f:af:d9:93:c3:81:f7:ee:97:a8:6a:bc:
         26:8a:c6:5b:99:9e:98:13:ac:e0:e1:5e:5b:74:60:f9:3e:c9:
         89:1b:f2:56:29:fe:e9:27:43:13:26:fa:ec:fa:76:52:b9:e7:
         db:48:ac:33:6e:a8:e7:dd:01:22:db:8b:50:05:5b:38:47:d7:
         db:07:0b:21:7b:b8:d9:1c:e7:2d:23:38:e8:70:fa:c7:7b:b6:
         7e:f3:c6:07:05:d9:b7:5b:2e:c8:5b:08:fd:65:5a:ef:08:42:
         03:92:e8:1b:09:90:65:09:78:38:ef:72:20:58:b9:c5:40:c0:
         58:bc:2b:3a:f9:19:2c:21:de:f4:56:c2:94:d4:91:ce:01:d2:
         1d:e2:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:40 2025 by rpki-client