Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef61fcdb-7fbe-3307-b317-766c033ee2ce.roa
File:                     ef61fcdb-7fbe-3307-b317-766c033ee2ce.roa (raw, json)
Hash identifier:          RgzKtus1hhkNjWHjiSPvcJ4yp2GhWkAVBL93hwf1e2A=
Subject key identifier:   5F:22:DF:31:FE:27:3D:C7:D3:87:EB:96:FE:E7:EB:3C:2C:31:A3:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE67A83552ED104FD68800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef61fcdb-7fbe-3307-b317-766c033ee2ce.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.56.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:67:a8:35:52:ed:10:4f:d6:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9f79f679-7cf2-4c92-8f22-785df4b5e860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:76:9b:58:5b:af:0d:ee:31:8a:1f:bc:3c:
                    d1:fa:2d:4b:3e:54:df:9e:8e:dd:84:25:e3:7e:8a:
                    87:c0:0d:1d:0c:2c:28:b4:54:d2:9f:62:60:be:2f:
                    e1:88:aa:2f:00:5d:22:a7:f1:54:72:a2:37:91:02:
                    43:bb:a6:ec:92:b2:b3:f3:61:6e:9d:bd:2f:fa:f4:
                    5a:ec:ff:dc:3c:75:67:39:4e:dc:03:77:93:e2:df:
                    c9:b7:6f:9b:05:93:d5:cc:46:b7:1e:a5:26:8c:3a:
                    04:0a:b1:32:67:30:77:82:1c:98:b7:40:25:aa:b2:
                    b7:d9:f0:8e:13:d4:87:2a:f0:fa:db:32:9f:69:89:
                    09:24:50:a8:cd:ce:83:98:e6:ec:ac:8d:cd:ef:1a:
                    7d:ba:6c:0f:ae:03:33:ae:14:03:d9:0f:dd:d6:5f:
                    ab:2c:a1:3c:9d:cc:1c:9a:bd:c0:90:5f:ea:d1:87:
                    60:21:75:9c:7f:ad:7e:6e:c6:84:a9:15:59:4d:4f:
                    34:69:bd:9a:cf:4f:21:9f:f8:4e:d7:67:70:49:2a:
                    62:4c:ed:c8:8a:ec:f8:8c:68:87:7f:2b:c2:af:06:
                    e9:81:4e:f4:b9:fc:eb:49:5f:f5:31:50:af:8a:6f:
                    fd:cc:11:6c:cb:38:0a:0f:53:f6:9e:ce:94:59:a1:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:22:DF:31:FE:27:3D:C7:D3:87:EB:96:FE:E7:EB:3C:2C:31:A3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef61fcdb-7fbe-3307-b317-766c033ee2ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:27:99:e1:57:4a:84:18:38:7b:93:2d:79:42:71:db:03:
         37:92:7c:fb:bf:1d:72:2e:89:bf:f4:92:bd:1a:11:c4:28:89:
         30:5f:21:74:27:54:1d:8b:ea:20:d4:a8:16:39:59:44:3c:3e:
         37:c2:04:ec:f4:4c:72:c2:d9:80:7e:98:6f:13:31:f1:4f:73:
         76:35:f9:64:07:d5:21:de:b9:05:71:f9:eb:93:ad:6e:10:a4:
         a5:c7:2a:b1:d4:53:d1:89:fe:fd:f1:60:e1:42:9f:ac:9f:40:
         31:37:14:57:a3:5b:8a:5a:33:65:74:18:e7:fc:60:bb:db:c2:
         20:36:bf:75:fa:e4:81:5e:5c:fa:bd:77:6c:ba:d3:4a:c2:e7:
         c2:d7:da:f7:0a:9a:45:fb:8a:90:5c:62:62:9e:a6:a9:ca:d0:
         40:2c:11:3e:3a:1b:41:40:64:6d:69:4a:37:c7:fe:45:b3:7a:
         61:9d:39:53:05:1d:a9:d5:9c:29:f9:38:fe:f9:c8:ad:76:4c:
         ec:75:3b:2b:b1:96:6c:fd:f6:1f:fe:ca:65:aa:4f:ab:22:f9:
         6e:06:fd:aa:77:47:6a:fd:05:9b:b0:61:32:b0:54:91:e8:9b:
         d3:5a:34:36:1d:49:1e:4d:2d:0f:cf:cd:73:be:47:79:33:86:
         c4:05:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:03:34 2025 by rpki-client