Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0f6c19-1de2-3497-9efc-0625fa466343.roa
File:                     7e0f6c19-1de2-3497-9efc-0625fa466343.roa (raw, json)
Hash identifier:          GlI11jFsDZEHgZ1rGbYvd7vgaH/fuXiRy4vUhjLvbpg=
Subject key identifier:   01:E1:BA:2E:75:37:CD:0B:2C:33:FA:5D:4D:B8:F1:EC:B2:39:1F:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE50405F2BB4B1B9539C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0f6c19-1de2-3497-9efc-0625fa466343.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.37.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:50:40:5f:2b:b4:b1:b9:53:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=49a61498-fc6e-4cf2-8efb-28ae7e031f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:96:70:6a:17:e1:b6:cd:9f:6c:9b:46:78:
                    5b:18:52:17:4e:33:7c:70:fb:d3:aa:9b:2c:98:c8:
                    ab:32:d9:92:1c:78:15:66:03:d1:7b:95:62:e7:81:
                    9f:2e:ff:f8:e1:f2:11:c5:41:a4:2a:41:be:37:40:
                    8f:59:7a:12:fd:c0:fe:42:f7:f3:ea:06:34:a8:72:
                    b2:66:07:92:f0:5f:29:cc:28:df:90:c9:bc:1e:46:
                    f7:6e:be:34:12:3e:b5:50:68:e9:55:2a:7c:45:79:
                    38:8d:de:9a:80:05:97:11:f0:9c:0f:14:05:23:d0:
                    e6:b7:3b:c9:fd:20:e0:69:07:93:94:55:83:56:87:
                    20:55:e2:9d:a7:f2:11:7e:7c:b0:db:49:96:2f:16:
                    61:9d:c6:8a:91:96:98:ef:f1:c7:60:13:ce:3c:16:
                    05:d8:a9:11:da:4d:9d:80:ff:ef:cb:ac:63:9f:02:
                    02:d5:a6:4c:54:58:b7:d3:87:5f:18:2c:9e:cf:77:
                    c3:a2:6a:a8:a8:07:df:99:00:df:cc:dc:bd:9c:b2:
                    7c:86:bb:f2:b2:5e:75:d3:a1:0d:f7:89:b8:e9:9b:
                    b5:a2:bc:84:ac:71:68:11:14:7f:13:04:ce:ec:75:
                    f9:62:cd:ee:35:c1:dc:9e:0a:14:9a:dc:e2:dc:b6:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:BA:2E:75:37:CD:0B:2C:33:FA:5D:4D:B8:F1:EC:B2:39:1F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e0f6c19-1de2-3497-9efc-0625fa466343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1b:df:c0:80:b1:3b:60:47:d3:f3:d1:db:8e:5f:b4:f7:11:
         15:02:c4:c0:15:06:35:21:2b:13:33:d1:7f:ae:ac:13:b0:e2:
         0c:16:21:5b:6a:a5:2f:72:6b:6a:dd:2f:57:56:ca:b7:be:3a:
         02:59:c3:2f:5d:f8:94:8c:a9:d0:26:cb:27:a3:b7:36:cf:e8:
         22:1a:6d:92:fb:2e:31:20:6e:80:64:09:7b:13:47:d2:c7:62:
         4a:c3:a1:cf:ca:c8:62:25:99:b0:a0:72:58:6b:3c:30:7e:48:
         bc:87:d5:45:11:21:32:7b:6a:09:84:2e:2b:0d:64:2d:b7:eb:
         e8:43:81:bd:2d:bc:98:3a:16:b8:c1:b8:f9:69:94:93:d5:62:
         00:7b:97:df:10:fa:47:47:a2:78:8e:9e:37:7e:3e:3d:95:7a:
         3c:02:79:18:07:29:3a:14:98:73:7b:39:08:43:87:8b:5d:d1:
         3e:93:e1:82:46:8a:d5:4c:8c:88:ff:64:49:f1:de:97:38:27:
         0d:4d:d6:c1:47:ba:ca:98:f6:9e:8b:97:a3:c5:43:f7:36:d7:
         47:ce:50:97:cb:f5:9b:d4:58:2d:4e:1a:75:99:20:01:7e:5c:
         86:4d:97:cc:03:4d:21:12:78:f4:e2:25:85:89:15:8c:80:40:
         3a:76:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:00 2025 by rpki-client