Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa
File:                     40af74f1-6337-3393-ab22-9e5d61e32e00.roa (raw, json)
Hash identifier:          A5AnHn8HikeZJ6aUI6gBknuEOTplq1UOtKfPZfOapOY=
Subject key identifier:   33:B4:44:D7:6B:E2:06:41:44:65:AB:FF:48:F9:E0:0A:B4:52:63:BE
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A2C201B6A1BB2A62C65442480
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     26744
IP address blocks:        68.170.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1b:6a:1b:b2:a6:2c:65:44:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=ae05467a-1b80-4e68-8969-4bea04346a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:fa:3e:d4:e1:f2:d5:a4:64:f3:22:d7:23:
                    8d:c9:52:ff:b6:69:0e:9e:b3:7c:f0:78:9d:27:b6:
                    3e:5a:70:87:bc:57:84:92:81:42:e8:de:c5:75:2c:
                    7f:c1:c8:d7:82:84:fd:38:17:1d:49:32:2f:75:09:
                    ff:76:01:a6:46:f4:0f:ae:cd:a6:92:a9:ec:9f:67:
                    94:01:3b:3d:5e:ee:b2:0e:a0:25:27:ab:17:38:fe:
                    35:0a:bc:77:12:f1:86:b5:36:15:38:47:bd:0d:67:
                    cf:9f:5b:fc:6b:9f:70:c3:0f:13:a3:ab:54:78:3d:
                    03:20:62:e4:a8:93:1e:26:09:29:e4:27:fc:05:95:
                    5b:50:84:bb:76:9f:54:bb:d2:3a:42:05:fa:12:7e:
                    e9:21:02:9b:4e:d6:01:85:87:80:09:9f:55:c2:f3:
                    c8:c7:e6:9a:66:36:11:db:21:53:f9:e5:9a:15:7f:
                    e3:1b:a7:6f:87:97:a3:7d:d5:90:fa:34:93:1b:0d:
                    91:fc:20:6f:88:46:86:0b:76:85:f1:57:64:85:de:
                    1e:1f:9b:44:ba:4d:90:b5:07:16:8a:03:2f:14:9f:
                    1a:a0:79:5c:e7:ff:98:50:a0:73:38:51:71:0d:e9:
                    59:b8:3a:01:49:8c:0a:20:82:c7:a7:65:fb:92:74:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B4:44:D7:6B:E2:06:41:44:65:AB:FF:48:F9:E0:0A:B4:52:63:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/40af74f1-6337-3393-ab22-9e5d61e32e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:81:c3:87:79:75:20:3f:e8:6e:b9:af:9f:4a:00:d4:b2:f6:
         f2:9f:0f:ee:01:e0:47:57:21:6f:e5:3d:13:3e:92:89:ae:12:
         99:7e:4f:dc:27:8d:a5:a2:ef:34:71:c7:56:08:ae:aa:8a:75:
         16:e9:be:21:ae:ac:2f:ab:fe:d6:8f:26:0c:83:0b:c0:3f:3f:
         d5:b9:1c:69:bf:81:64:cb:06:64:d0:89:1b:d7:77:06:2f:d3:
         cd:a5:21:2a:af:e6:34:b8:b1:e8:ea:f2:75:8a:1d:18:c5:0b:
         03:d4:b9:64:ab:7f:ce:b3:44:7a:8c:0e:e7:62:cd:60:78:54:
         70:6b:99:27:68:f7:ef:81:ac:04:da:ef:4b:71:c0:cf:7c:19:
         7e:3f:85:b8:95:2e:26:f1:1b:85:da:c8:ab:a7:08:d5:2a:e3:
         36:4f:1e:77:96:88:d3:e2:c4:ba:ed:77:27:e7:bf:e0:e1:58:
         ac:37:f7:68:db:ce:64:67:23:f7:09:69:06:d4:a0:21:00:51:
         7d:74:5f:08:fa:ff:85:ad:75:54:32:2a:57:fe:97:be:32:5b:
         40:01:44:ad:a8:7b:d2:a7:20:bd:8f:f2:62:b1:52:c0:10:7b:
         58:02:45:fa:de:fd:22:97:a3:d4:11:e9:80:8e:de:75:2e:ca:
         15:3f:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:32:09 2025 by rpki-client