Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac03219-6b95-3b38-9522-f9c793f571f6.roa
File:                     cac03219-6b95-3b38-9522-f9c793f571f6.roa (raw, json)
Hash identifier:          KEp3/f57fRUo73s6Gye+/haZLwXyRZJxzStzxTwlixg=
Subject key identifier:   45:47:E5:42:A0:AC:08:41:30:93:A3:00:C4:AC:27:B4:35:40:4C:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBE69DB7182D18CF8D90F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac03219-6b95-3b38-9522-f9c793f571f6.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.91.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:e6:9d:b7:18:2d:18:cf:8d:90:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=b0f2171c-abd2-443c-8448-2f06b843b572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:00:6a:b1:d5:c9:67:35:f1:82:eb:4b:f4:
                    ff:f6:4c:ec:1c:77:58:3f:3e:ac:8e:d1:b1:23:39:
                    07:4a:cd:df:7b:8c:29:73:ed:56:a3:26:9f:52:e7:
                    d6:49:39:d8:16:1d:18:f7:07:34:3a:9f:d7:ca:64:
                    04:49:49:b4:77:db:6a:0d:bf:06:6e:cf:53:67:26:
                    ae:d8:c3:a5:1c:f2:fd:b3:3c:b8:5b:00:8b:24:44:
                    89:ad:b4:16:9c:31:30:7f:9b:ce:d1:a0:c1:f5:f0:
                    53:a4:06:97:24:b6:36:16:53:f3:98:0c:a2:4d:12:
                    72:18:ec:6e:86:a5:cb:db:eb:05:51:99:37:31:19:
                    38:21:8f:fa:77:f2:78:be:d9:0c:46:94:ee:80:08:
                    28:b0:a4:96:30:3b:18:23:16:da:02:86:37:b4:b0:
                    cc:f2:1e:23:1d:64:c2:f9:11:5e:89:31:24:f8:5a:
                    d2:b5:4e:24:ea:13:8d:76:9e:b5:b7:ba:92:90:3f:
                    f4:a4:a5:53:39:16:bd:df:0f:61:c6:a5:e3:0f:1e:
                    b9:c8:b9:51:85:61:2b:15:b5:d3:75:0c:e6:ea:bf:
                    9c:26:72:9b:18:c3:b7:cd:3a:98:ff:c2:96:a8:58:
                    dc:19:7b:82:3a:06:2e:af:01:a5:a1:66:66:79:7f:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:E5:42:A0:AC:08:41:30:93:A3:00:C4:AC:27:B4:35:40:4C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac03219-6b95-3b38-9522-f9c793f571f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:44:ef:fd:6b:e8:84:10:1b:20:7c:28:1c:e3:0d:2d:27:59:
         05:62:99:86:24:7f:f4:c3:74:aa:59:cc:5d:a8:89:d7:c8:40:
         6d:95:fb:2f:1e:a4:64:7a:eb:83:4f:93:8f:7d:e6:b2:b6:15:
         9a:7b:6b:eb:c8:00:25:1b:23:9a:88:b0:ce:81:93:c5:63:a0:
         a1:60:dd:38:08:c0:bb:9d:2b:b8:c3:2d:ed:50:45:da:a9:86:
         64:0f:71:73:9e:de:53:94:2b:93:1f:7d:b2:99:98:c6:59:6a:
         9e:7a:fb:f5:f9:93:52:87:2c:4b:9f:61:51:2b:62:40:05:eb:
         fd:82:d5:ab:ec:51:f3:18:d1:79:92:77:0f:65:f9:8e:cd:8f:
         d0:90:fe:ea:c9:ef:fe:68:2b:2f:09:23:af:13:52:66:84:d7:
         97:ce:d0:0c:2b:fb:33:06:01:6b:da:4d:3c:9e:0b:20:24:bb:
         cc:e7:0a:5a:d6:3e:59:31:8c:e5:ea:b1:e2:bd:b2:38:2e:29:
         78:1f:fc:56:8b:20:45:4d:10:be:3a:3e:14:13:ec:d1:63:8b:
         66:80:18:04:d2:84:d1:78:0d:92:67:07:5f:d2:f6:4e:d2:79:
         c2:c0:24:67:98:23:9e:f7:55:e5:00:2c:0e:0b:e2:7b:9b:5f:
         06:c9:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:18 2025 by rpki-client