Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c68167f4-0471-3a3f-bcb8-820c61793286.roa
File:                     c68167f4-0471-3a3f-bcb8-820c61793286.roa (raw, json)
Hash identifier:          lD0Cy+OHrYOhvOsIvW4zmaLQyIk7zSph5ShLgzJstdk=
Subject key identifier:   50:D3:31:42:89:1C:F6:9E:76:3A:70:CC:08:A8:A3:5A:AC:22:90:B0
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584A11C4B26D8E0910330411B400
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c68167f4-0471-3a3f-bcb8-820c61793286.roa
Signing time:             Tue 03 Jun 2025 14:25:49 +0000
ROA not before:           Tue 03 Jun 2025 14:25:49 +0000
ROA not after:            Mon 01 Sep 2025 14:25:49 +0000
asID:                     6327
IP address blocks:        68.144.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:c4:b2:6d:8e:09:10:33:04:11:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Jun  3 14:25:49 2025 GMT
            Not After : Sep  1 14:25:49 2025 GMT
        Subject: CN=f7ff5cff-36a9-4f99-a891-b4747e8f49ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:98:b8:37:3f:b5:a8:21:3f:06:03:65:0b:
                    0b:1e:e4:57:0d:d2:5b:cd:c9:fa:9c:3a:ad:dc:82:
                    a1:af:f4:16:91:10:fc:b5:75:83:c0:14:5b:20:9a:
                    69:f8:c5:59:ce:ca:2b:d6:0b:ad:3d:d2:23:88:a8:
                    fe:e1:07:ee:cf:c9:db:aa:d6:3b:66:9f:f3:18:15:
                    3c:03:f2:12:b3:4c:56:37:61:95:c7:26:09:35:0a:
                    35:90:57:c5:4b:18:7a:e4:89:10:69:14:be:df:50:
                    92:42:df:34:ed:ac:2a:79:c7:01:88:45:ee:26:b5:
                    d4:a8:d9:aa:85:a7:1d:3a:6b:b8:d1:19:e0:19:50:
                    a3:88:03:e6:21:c3:7f:1a:81:4c:d6:3b:12:25:ec:
                    5d:d0:db:26:bf:69:a6:8a:09:dd:4d:f3:59:10:c3:
                    39:20:7d:61:7c:b4:d7:4a:64:55:f6:94:26:6a:59:
                    50:07:bd:f8:01:5a:13:f7:d2:09:12:e7:9f:ff:8c:
                    76:30:d4:48:f5:39:f5:51:77:ea:a0:56:cc:2b:4b:
                    f1:67:b3:f2:d6:d5:d1:06:14:54:92:97:98:ca:6d:
                    c3:3b:f6:1e:8e:14:cd:c6:a5:ba:a0:3d:08:f8:ea:
                    20:5a:48:7f:7a:44:57:7a:72:3f:51:78:64:fa:09:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:31:42:89:1C:F6:9E:76:3A:70:CC:08:A8:A3:5A:AC:22:90:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c68167f4-0471-3a3f-bcb8-820c61793286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.144.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:64:39:ea:3d:49:1d:f6:69:ad:7e:96:85:ce:ae:50:63:
         12:aa:f3:b6:f9:5c:f2:bd:c6:27:3f:1d:73:9c:3a:31:61:18:
         08:47:f8:fc:95:9d:65:0e:cf:1d:59:25:17:e0:62:0b:22:60:
         06:22:0e:b8:7f:25:4b:f3:21:2e:77:60:cc:26:e3:3a:96:15:
         45:ef:d7:48:b5:9e:90:42:fe:bf:1d:a4:2e:06:30:05:3d:52:
         37:80:7a:96:2e:bc:3b:56:31:03:88:98:b9:d2:ee:c7:0e:96:
         d0:ca:26:dc:88:22:05:11:6f:ee:69:bf:fc:59:02:11:47:6b:
         15:70:aa:ba:f4:cf:3d:96:8a:39:26:c7:d9:05:6c:24:52:b7:
         e7:bd:d4:62:93:bd:b2:b9:15:96:25:ae:8e:7f:ba:03:5c:24:
         f2:94:ae:46:f2:a2:85:0b:4d:20:36:7b:c6:1f:88:6a:15:bf:
         02:8d:25:8e:69:bf:aa:63:f1:a6:00:0e:00:35:47:6d:79:af:
         e7:41:60:f8:0c:1c:de:f8:b5:e6:26:1c:ec:03:0c:ac:60:37:
         36:94:79:3c:78:87:83:e0:2f:28:46:da:55:ff:2b:ef:a7:f8:
         90:2c:51:13:54:43:19:78:37:84:24:e1:e2:16:72:d5:72:79:
         5c:48:8d:50
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoRxLJtjgkQMwQRtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw
N2RkMB4XDTI1MDYwMzE0MjU0OVoXDTI1MDkwMTE0MjU0OVowLzEtMCsGA1UEAxMk
ZjdmZjVjZmYtMzZhOS00Zjk5LWE4OTEtYjQ3NDdlOGY0OWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8+YuDc/taghPwYDZQsLHuRXDdJbzcn6nDqt
3IKhr/QWkRD8tXWDwBRbIJpp+MVZzsor1gutPdIjiKj+4Qfuz8nbqtY7Zp/zGBU8
A/ISs0xWN2GVxyYJNQo1kFfFSxh65IkQaRS+31CSQt807awqeccBiEXuJrXUqNmq
hacdOmu40RngGVCjiAPmIcN/GoFM1jsSJexd0Nsmv2mmigndTfNZEMM5IH1hfLTX
SmRV9pQmallQB734AVoT99IJEuef/4x2MNRI9Tn1UXfqoFbMK0vxZ7Py1tXRBhRU
kpeYym3DO/YejhTNxqW6oD0I+OogWkh/ekRXenI/UXhk+gm5HwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFDTMUKJHPaedjpwzAioo1qsIpCwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj
NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvYzY4MTY3ZjQtMDQ3MS0z
YTNmLWJjYjgtODIwYzYxNzkzMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk
M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx
MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh
ZWQzMTA3ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRJAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfYdkOeo9SR32aa1+loXOrlBjEqrztvlc8r3GJz8dc5w6MWEYCEf4/JWd
ZQ7PHVklF+BiCyJgBiIOuH8lS/MhLndgzCbjOpYVRe/XSLWekEL+vx2kLgYwBT1S
N4B6li68O1YxA4iYudLuxw6W0Mom3IgiBRFv7mm//FkCEUdrFXCquvTPPZaKOSbH
2QVsJFK3573UYpO9srkVliWujn+6A1wk8pSuRvKihQtNIDZ7xh+IahW/Ao0ljmm/
qmPxpgAOADVHbXmv50Fg+Awc3vi15iYc7AMMrGA3NpR5PHiHg+AvKEbaVf8r76f4
kCxRE1RDGXg3hCTh4hZy1XJ5XEiNUA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:34:53 2025 by rpki-client