Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa
File:                     aa02e257-c6fb-3776-8bcf-70c533addabd.roa (raw, json)
Hash identifier:          biOm7pIGWQY1KqxaufNawE+JNXR+0LgEKTGdHCXppi0=
Subject key identifier:   09:32:75:CD:68:26:45:3A:0A:EE:C0:AA:F6:4E:DD:D1:89:16:E2:F2
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A00DACA9172F92CAF143B5180
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26744
IP address blocks:        68.170.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ca:91:72:f9:2c:af:14:3b:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bc3f2b59-f1dd-4cff-94d1-1d6516d8178f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:78:d3:bb:e3:1c:6d:b4:2f:0e:0e:26:a3:
                    86:b2:7f:d2:57:2c:bb:e4:fa:5f:4a:ad:99:85:02:
                    b5:b4:d2:0b:cc:09:1e:1d:ec:d2:ee:e6:94:dd:c5:
                    cd:c8:40:e2:7f:42:9a:ce:fc:b8:f4:dd:63:c2:d0:
                    d0:1e:18:2b:32:e9:8a:ad:72:a5:0d:b4:18:d0:02:
                    b5:67:55:87:ed:73:ee:69:ea:02:6f:63:73:97:25:
                    44:f6:7b:df:bb:00:c6:bd:94:7b:c9:3d:3b:3b:60:
                    0a:4a:3b:9c:37:5b:9e:89:6a:ae:29:ea:59:55:aa:
                    e7:12:79:8f:64:93:65:e9:39:c3:3c:9a:7f:ac:c1:
                    63:ba:da:17:0c:73:a8:ce:cb:9e:50:ac:c6:6a:4f:
                    4c:e7:91:75:5d:a1:e1:d1:46:8a:d5:ac:06:bd:d3:
                    a0:9a:8b:6a:d1:72:15:8a:23:3c:23:61:b7:ef:0d:
                    ed:81:7d:1f:82:d9:8f:0b:a5:10:e2:76:db:2b:f7:
                    06:58:e8:1d:3c:2f:b2:5e:15:b8:83:03:4b:00:dc:
                    c0:cc:26:2c:7b:18:57:8b:c4:15:49:2e:f0:22:57:
                    69:70:2a:67:dc:86:61:76:a2:74:b2:9f:b1:23:42:
                    7f:43:fa:ab:65:e6:01:c2:4c:a5:5a:14:aa:2a:94:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:32:75:CD:68:26:45:3A:0A:EE:C0:AA:F6:4E:DD:D1:89:16:E2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a2:68:8b:65:53:b6:0b:e7:98:dd:9c:39:a3:6b:41:ea:85:
         27:d6:07:16:d8:4f:e3:06:4d:82:f1:4b:c1:ec:f5:5e:bd:5b:
         a3:df:ca:13:f4:7c:78:0b:01:97:f8:87:02:3b:5c:62:66:00:
         ca:8f:6e:b4:a9:54:04:af:a8:72:e3:1c:33:15:c2:a0:9b:b4:
         cf:14:41:4a:25:38:ed:3b:04:12:63:cc:45:c8:e8:d6:5d:29:
         b8:b7:0e:b7:05:37:9f:07:d3:fe:1d:cf:45:16:1c:16:bc:54:
         f0:1f:4c:fb:c1:11:f0:44:29:74:03:37:ba:d1:84:8c:dc:72:
         b0:9c:5d:75:6b:ee:d3:2d:c6:8d:12:f6:5e:e6:cb:f0:6e:15:
         a4:1e:33:cb:80:8d:8b:ce:2d:54:fa:20:40:24:5e:b2:00:50:
         cb:89:df:5f:52:53:64:ca:b0:e3:88:06:4b:7f:39:3c:ed:46:
         4a:6b:0c:f4:24:ff:2c:2d:91:9c:0f:d4:b6:1c:fb:4c:69:a2:
         e4:62:63:bb:05:71:ba:64:9d:19:05:c6:3a:62:9d:cb:15:68:
         96:73:57:f6:c0:c9:09:04:13:f4:b5:49:dc:10:94:77:4d:b6:
         32:43:cb:d1:f1:2b:73:16:4e:0d:f6:3e:00:cb:89:67:b0:42:
         88:d0:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:00:46 2025 by rpki-client