Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fcb1574-1f0f-30e1-bff9-be362b7a307a.roa
File:                     9fcb1574-1f0f-30e1-bff9-be362b7a307a.roa (raw, json)
Hash identifier:          SAqSfB0lBnaaVus66nOHjJ2xCBF/eaR75TmJr1hun/A=
Subject key identifier:   57:A6:23:53:C0:D6:9E:CC:A6:24:43:0F:BE:95:51:38:17:FF:ED:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECB78DC9762DA4B7F26800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fcb1574-1f0f-30e1-bff9-be362b7a307a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.58.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:b7:8d:c9:76:2d:a4:b7:f2:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d86e5228-9157-4977-b025-86900add1581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:8e:80:93:31:e7:36:a5:b6:a0:da:2d:a6:
                    74:6b:5f:27:83:51:ff:fb:3c:35:2f:1f:06:03:dc:
                    92:84:80:1e:fa:a7:a7:12:6e:35:29:d0:62:85:66:
                    09:c4:d8:af:8b:e5:e2:9a:eb:02:ed:5b:82:6f:07:
                    39:e7:ef:86:4a:fd:f7:b7:3e:8b:d0:5a:e4:e9:7f:
                    bd:92:95:1e:b2:ee:bf:01:5c:fb:7c:1a:22:c3:e7:
                    9c:c9:c4:39:69:a4:62:4e:58:a5:fe:08:2a:00:2d:
                    c6:6f:3a:8b:4d:d8:33:85:80:e1:79:cc:5c:33:ca:
                    89:40:dd:c4:d6:b7:52:b0:f1:7a:da:73:ed:c2:7b:
                    f4:5d:79:0f:c0:21:86:5a:d8:ba:59:73:d1:0f:eb:
                    7f:71:08:36:1f:b7:8c:08:a7:06:ff:58:62:9b:ca:
                    63:a6:c5:6f:6a:49:0f:ab:3f:dd:c8:be:fe:c0:60:
                    ce:ad:81:6d:39:c2:e5:f2:40:cd:4a:30:a5:7f:db:
                    dc:ad:6a:44:5c:a1:04:f7:62:ac:e0:da:21:93:b0:
                    4a:49:fa:84:79:5b:7f:49:04:f4:99:b0:db:d6:87:
                    71:c1:8f:b3:e6:2a:70:b7:f5:aa:ea:ab:aa:03:99:
                    dd:e1:a3:2d:63:7f:d5:cb:fe:c3:8c:58:06:9f:fd:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:23:53:C0:D6:9E:CC:A6:24:43:0F:BE:95:51:38:17:FF:ED:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fcb1574-1f0f-30e1-bff9-be362b7a307a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e4:a9:25:f3:d9:36:74:7e:6f:54:27:8a:28:97:75:78:bc:
         23:e7:6b:58:03:b3:34:20:93:a5:24:a0:a4:79:7e:f4:82:04:
         75:08:04:b9:5a:a9:b7:14:e7:ff:f1:32:6d:bc:f2:55:ba:48:
         61:ce:c6:fc:af:af:7c:bc:15:5e:f4:2e:e9:b1:64:a8:d3:25:
         98:2b:15:dc:b3:e8:76:28:e7:3c:fb:fe:bf:18:d8:a5:fe:cb:
         5b:fb:7f:9c:84:a7:47:93:da:ea:23:b0:ce:73:22:e3:49:50:
         a1:68:5e:cc:4d:24:d2:ff:b8:0b:a8:b6:29:22:2a:c8:5a:49:
         f8:b7:95:7a:fa:5c:4f:97:2a:6a:95:4f:13:ab:db:d5:8a:dd:
         77:7f:c3:ea:71:0b:c3:5e:cd:76:9d:61:85:6e:4d:2a:2f:a5:
         12:25:cf:d5:c9:4b:ea:27:d3:38:f6:c2:d3:04:3d:ee:65:91:
         dc:57:02:5b:fb:e7:79:c5:2f:a4:1f:8c:dd:75:87:60:d3:04:
         23:51:5d:db:45:8e:f0:5f:13:69:31:42:c0:0a:dd:bb:b8:1e:
         55:db:8c:9d:90:a5:b5:35:ae:79:d3:d4:f8:33:93:1d:62:a2:
         76:9f:4f:ab:db:9c:55:1a:c4:e6:1f:32:b4:f7:fa:1a:2a:19:
         1a:aa:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:03:14 2025 by rpki-client