Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
File:                     aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa (raw, json)
Hash identifier:          QuBmJoZIDTmn11cGRSvGX47PC37+hxaZs+qnprA8C7s=
Subject key identifier:   C7:21:BC:A3:D9:89:AF:50:D3:DD:C7:B6:E0:9B:8A:8B:73:04:B9:64
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849A61F464AB191F7567DFFE700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        68.234.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:46:4a:b1:91:f7:56:7d:ff:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=3665d452-e3d2-4ccc-81bd-81695128e9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:1f:98:ea:b2:63:39:66:6a:19:52:9e:ee:
                    a3:bf:de:d8:4f:c5:67:83:33:7a:64:ee:e8:ea:17:
                    2a:eb:51:a8:10:8d:7a:c7:d9:90:b7:bd:0f:f5:9d:
                    42:e5:f5:02:3d:3e:a3:d2:0d:8f:1f:90:40:58:75:
                    49:51:c1:2e:be:5e:fb:54:ec:0c:d8:9c:7e:06:a3:
                    aa:e3:76:cc:c3:9b:9b:3b:76:52:7e:b0:21:44:60:
                    fe:12:e2:df:9b:7f:9b:bd:dd:85:06:3a:b4:4e:af:
                    22:6d:2a:d6:1e:02:7c:7a:f2:2a:8c:5d:ad:24:57:
                    e5:b5:a7:b1:2d:d6:87:f0:bf:e1:9f:90:71:99:47:
                    ae:42:e7:fc:27:a4:6a:5b:03:d0:33:08:2b:2f:6d:
                    79:66:4b:6d:72:b7:95:75:1b:27:f7:ec:82:fc:fa:
                    18:b5:16:fc:db:e6:2f:6f:bd:24:5b:49:d3:fc:9a:
                    24:56:04:26:44:76:d3:4a:e5:fd:c9:9f:29:d2:2d:
                    fb:ae:32:c4:6e:51:74:34:b8:3e:dd:41:07:3d:b4:
                    c6:b8:d3:0c:3c:fb:cd:ea:19:a8:58:fd:91:39:a0:
                    02:f7:11:38:0a:39:1a:63:19:62:5e:94:22:25:fc:
                    af:9b:ae:4e:11:91:26:cb:ed:53:b2:20:62:ab:93:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:BC:A3:D9:89:AF:50:D3:DD:C7:B6:E0:9B:8A:8B:73:04:B9:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aad996ae-f5a1-3f15-86e0-00a6135d1c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:11:30:bb:87:95:d1:0d:55:ce:0a:20:0f:d2:29:0b:72:
         23:a7:68:f9:c6:4c:d4:36:96:46:81:51:1a:7d:a9:ac:06:08:
         7e:ea:38:4e:fc:65:25:0a:66:ff:a4:7f:5a:c4:ee:65:dc:26:
         95:6d:ba:8a:75:bd:da:9e:c6:75:19:eb:8a:0f:2b:67:93:f4:
         9f:e3:0c:06:c9:4c:aa:c6:b3:4a:23:42:ad:ec:77:4f:df:3a:
         11:f3:5a:95:19:d7:46:21:ad:12:d5:50:3f:a4:ff:c3:b7:dc:
         67:9e:ef:a3:48:bc:c2:05:70:36:27:60:17:00:61:f2:1a:61:
         27:0c:76:05:f5:8b:0a:ba:77:91:88:ad:d1:d2:09:c7:81:28:
         a8:40:4b:d0:ce:82:1a:92:e0:f1:e9:0a:b6:ce:f5:e8:4f:d4:
         0b:d3:3d:66:22:a0:64:7e:a8:e0:e0:bf:f8:31:45:f2:0a:c9:
         1b:f9:c2:55:35:0b:c9:70:4b:ee:bf:8f:ce:9f:05:3c:ef:e6:
         ce:59:c4:b5:0d:dd:16:c1:6e:2a:d3:ff:50:c9:7d:c2:2a:48:
         63:d7:8d:e7:27:24:7d:45:e6:bc:09:a7:ae:3c:8e:ff:e1:67:
         ac:f1:79:53:ff:fa:c4:3a:7f:8b:30:07:55:bc:e6:b3:64:8e:
         19:ba:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:13:57 2025 by rpki-client