Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6aefb4d4-2216-3403-8e58-220466ba57be.roa
File:                     6aefb4d4-2216-3403-8e58-220466ba57be.roa (raw, json)
Hash identifier:          lunMXxVKD9GKo6aauWtAyY8ilIoMvrnfNHVLQU7mA4E=
Subject key identifier:   2D:34:F6:B3:B4:54:EB:F0:67:CF:DB:F6:C7:E7:76:49:53:00:02:15
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B10E5FAD827BBDB34300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6aefb4d4-2216-3403-8e58-220466ba57be.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        68.207.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b1:0e:5f:ad:82:7b:bd:b3:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3ca81642-7946-48dd-a428-9b63c3790c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:f2:5b:a6:81:3b:0c:0d:d7:7a:91:99:97:
                    cb:88:e9:41:f1:62:7e:ab:08:ce:24:41:9c:0b:64:
                    a7:7a:9e:58:10:65:f2:1b:90:58:30:ed:bf:ea:c5:
                    c0:d1:00:9b:b7:3a:74:7e:0e:8d:7e:a6:08:9d:aa:
                    45:7e:3a:9d:9c:0b:d4:0c:38:c1:71:01:03:61:07:
                    f9:6f:4d:22:88:03:e9:f9:f5:58:d0:cf:e1:3d:57:
                    f3:3f:41:0f:fb:dd:c0:b5:bf:2d:79:96:68:ff:9b:
                    a3:26:cb:20:5e:8d:d3:6e:0a:e8:59:c8:25:e9:c7:
                    29:43:88:f8:05:a7:16:7c:27:07:27:66:a3:f2:ba:
                    70:bc:84:42:fa:d1:47:12:33:7a:d6:57:e0:84:17:
                    db:fb:f3:a6:77:55:8a:a2:c9:01:19:7b:c0:01:a3:
                    1f:3c:39:df:73:54:55:e4:45:46:a2:7b:38:33:39:
                    16:f3:26:2b:e6:77:82:4c:7d:09:d0:e7:4a:86:d5:
                    14:f5:78:88:b0:81:a2:cf:79:04:b8:d7:f6:70:54:
                    dd:5b:04:62:08:8c:1b:18:b9:c4:29:7a:9b:ef:54:
                    65:3c:38:7b:b8:8f:64:6f:48:72:d5:f1:dc:f7:d2:
                    31:21:7d:56:82:95:13:09:8b:98:69:d9:6e:d0:c6:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:F6:B3:B4:54:EB:F0:67:CF:DB:F6:C7:E7:76:49:53:00:02:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6aefb4d4-2216-3403-8e58-220466ba57be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:21:52:ce:43:92:03:89:97:bc:14:1b:b4:90:74:9b:27:
         19:4f:61:23:d0:27:d8:cd:c1:76:69:92:85:77:12:e2:56:f3:
         e1:0c:0c:48:c7:b4:0a:1d:02:19:b1:2c:25:19:a4:88:84:94:
         eb:f5:a6:2a:10:8c:19:c6:ce:4e:53:03:18:30:84:b2:fc:cb:
         67:1b:59:19:3b:97:1f:05:77:07:05:95:46:52:dc:3a:7d:68:
         fe:9a:64:ea:e9:7f:3d:b6:a2:67:90:75:41:b5:2e:d6:4e:42:
         b0:7c:b8:8c:05:50:5d:aa:3c:53:fc:52:c8:93:a0:dd:84:6a:
         e7:3b:f8:52:79:80:aa:10:aa:dc:10:36:f5:22:09:bc:55:ee:
         d4:95:58:55:80:bd:6e:ac:6b:0e:9b:d6:58:20:ec:18:c1:6e:
         03:d2:84:2e:f4:c0:63:be:77:88:e3:36:fe:0e:63:e4:4b:75:
         58:88:8f:75:9f:d3:ce:ce:2d:c6:51:a6:47:17:37:8f:27:a6:
         91:62:70:ea:64:30:0c:70:98:5d:fe:2d:6a:75:15:77:03:c1:
         b9:d6:42:83:db:fb:49:3c:b0:44:5e:db:8b:98:91:6d:d8:f1:
         c3:e6:e0:9e:9b:c2:d4:b1:f5:9e:c5:45:8d:8a:44:48:c3:49:
         67:ac:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:17:10 2025 by rpki-client