Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b48fb5f-8814-3019-973c-64c4c6c59622.roa
File:                     5b48fb5f-8814-3019-973c-64c4c6c59622.roa (raw, json)
Hash identifier:          oziYVsP0go+YrZJdnx0+dAzQSx9upmW/DnFe+M+FXQM=
Subject key identifier:   6A:6F:FF:EE:0A:25:AA:CB:B4:D2:68:62:88:EC:E7:24:9E:4A:FD:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECB030E56877D4F490AD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b48fb5f-8814-3019-973c-64c4c6c59622.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.51.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:b0:30:e5:68:77:d4:f4:90:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=86344510-ef66-4006-b17a-6448c8e83ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:de:83:22:a7:eb:db:e2:61:a6:d8:50:50:e2:
                    b2:63:a9:13:32:ff:ea:81:c5:66:d5:3c:c8:ff:8e:
                    94:e9:f2:13:2b:26:5d:31:07:c1:a1:a8:5d:bf:2e:
                    e6:93:35:96:62:16:af:98:f9:f2:21:09:33:55:36:
                    44:e5:b6:95:c5:fb:83:0a:27:5a:98:e4:ce:f3:46:
                    ab:05:6b:f8:45:aa:61:82:3c:3f:68:d0:39:75:bd:
                    d8:aa:69:6b:74:b3:e9:9d:23:41:db:16:b6:9c:8a:
                    33:df:38:e0:3d:c6:f0:c8:93:0a:8f:08:78:5c:88:
                    64:8f:36:d2:06:f3:3a:7f:20:e9:49:66:38:8f:db:
                    f7:95:07:de:f2:9b:0d:6a:9c:89:51:27:a4:b4:ce:
                    87:b9:6c:31:d2:be:6b:79:35:d8:7b:a7:10:de:18:
                    7a:dc:b3:46:d3:d8:a3:fe:75:ff:1e:6b:e4:10:dc:
                    68:e4:aa:35:b5:23:40:1e:bd:08:3a:a9:27:84:58:
                    2c:29:d4:a4:5a:18:27:1c:dd:89:92:5a:22:3a:c9:
                    51:c9:9e:3a:be:c6:72:df:67:47:68:a6:80:2d:5d:
                    71:50:5e:35:18:ac:c0:07:c5:4e:db:dc:80:d3:9d:
                    21:fe:d7:85:24:79:35:52:36:a3:1c:34:89:bf:43:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:FF:EE:0A:25:AA:CB:B4:D2:68:62:88:EC:E7:24:9E:4A:FD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b48fb5f-8814-3019-973c-64c4c6c59622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:cf:5c:b4:6f:b1:4a:2c:d2:d6:88:f8:ce:1e:ea:ba:e9:7a:
         49:68:83:a8:81:7a:40:4b:de:d1:4b:38:16:c0:9b:61:21:bd:
         86:28:f4:62:d1:2b:e9:be:fe:53:0a:03:ca:a1:fb:82:bb:2e:
         5f:15:21:9c:a8:d8:26:4a:d3:6e:ce:43:4a:b1:bc:ce:5a:9d:
         7e:64:69:14:85:42:30:e0:24:28:61:71:c4:56:e5:50:c7:69:
         85:20:df:47:0d:bb:e0:a5:60:07:f1:d3:64:1d:22:e4:94:2c:
         ee:77:d1:d6:ca:2e:63:6a:3c:25:a9:3d:7d:17:98:39:c0:de:
         06:36:2c:3f:6e:24:55:7f:6b:b8:76:d0:80:c4:a9:ed:2c:25:
         d0:a0:b6:35:5e:e7:7a:41:a8:3a:09:8a:10:7c:07:65:9d:7e:
         5b:82:23:85:5d:df:15:6c:69:89:39:36:10:78:55:9a:73:f8:
         b8:39:eb:a8:63:d1:d2:d0:a2:16:c2:4e:a1:e6:64:eb:4b:14:
         86:87:8e:d6:88:49:d1:10:50:58:3e:df:bc:a0:2a:45:ec:d8:
         a2:be:64:34:21:cb:67:b0:ed:b5:5e:64:c2:c6:db:6d:ee:68:
         b2:86:3a:d4:f2:36:41:7c:83:5f:2a:fd:c6:09:84:39:0c:ac:
         20:51:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:19 2025 by rpki-client