Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa
File:                     67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa (raw, json)
Hash identifier:          +2CdaP41uF10UqbS9VqueY1vw9FTbKDbWs67DSWj6jo=
Subject key identifier:   01:B5:0E:49:7D:CA:EF:D0:4F:BD:F5:75:93:9D:FC:CC:59:F0:A3:89
Certificate issuer:       /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
Certificate serial:       010D0C9F4328584A093A9F5AEFA911A91177FE00
Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        208.75.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:9f:5a:ef:a9:11:a9:11:77:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=36622210-9dcb-4a98-9cef-411b1812e56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:de:45:4f:17:c9:6c:4c:c1:26:63:ba:0f:
                    95:7c:d8:d2:bb:9a:f9:4e:12:cc:ee:d2:26:26:08:
                    30:a0:b8:58:81:35:4c:85:4b:d6:dd:4d:40:1a:aa:
                    e4:25:64:af:c8:f4:75:59:98:11:a7:95:ec:63:cc:
                    2c:f6:16:18:79:01:af:7e:e8:22:c7:d7:67:da:b6:
                    8e:bd:9c:1f:af:0a:05:61:71:22:45:cd:7f:ad:b6:
                    c1:17:b9:d3:3f:3d:fe:6c:22:bd:20:bb:72:fa:b8:
                    06:20:f7:f1:7c:d3:58:a3:18:4f:86:37:9d:2f:a8:
                    1e:4a:44:23:1f:e2:c1:b6:6c:6e:58:79:9f:d1:1a:
                    d8:24:24:ad:dc:a2:b8:c2:c7:94:56:e1:d8:be:0a:
                    2b:0d:52:a1:1b:68:26:f4:5c:58:16:d0:e5:47:26:
                    f7:b8:d6:ef:50:29:10:91:25:54:e8:4f:c0:07:58:
                    aa:25:2b:94:72:e9:03:2d:43:e9:62:44:81:7e:c5:
                    d0:80:c6:f2:0d:d3:b8:3d:bb:fd:cc:f6:da:f2:47:
                    e9:b9:a3:47:33:84:97:37:66:ae:11:86:9e:a4:00:
                    f1:a5:98:d2:22:1c:29:60:65:a2:00:f6:c1:ea:39:
                    55:2e:51:49:58:6c:6c:f6:8c:c2:ea:0d:f1:0c:9d:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:0E:49:7D:CA:EF:D0:4F:BD:F5:75:93:9D:FC:CC:59:F0:A3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl

            X509v3 Authority Key Identifier:
                keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:43:c2:5d:45:46:af:1e:69:7e:57:8c:70:c5:a1:52:d8:
         52:d1:6f:39:24:71:2c:19:f2:a9:2a:3a:51:d7:ad:3a:53:97:
         75:57:06:21:1d:c4:64:d0:c1:9b:7d:0c:e1:c9:2c:06:d6:c4:
         30:b3:ee:55:f2:38:52:2d:19:c1:78:f0:a9:96:3b:50:12:84:
         f6:89:df:45:3e:40:33:3c:16:ca:cc:09:31:36:aa:ed:ec:ab:
         8c:0c:a7:f2:05:03:ae:2b:4f:97:c6:81:1a:0d:9e:67:3e:33:
         9e:c7:95:50:d7:eb:cf:3a:82:59:18:56:90:a8:2b:c2:f7:25:
         04:1f:82:e9:55:46:72:cf:b6:ab:3f:0d:71:1c:03:81:52:3d:
         a2:68:19:63:79:5a:f6:d5:52:0e:29:3e:ad:bd:8d:c1:82:50:
         99:7c:01:45:0e:37:5b:f4:80:f7:73:1f:21:1e:1d:79:11:6a:
         25:4f:44:7b:d0:c5:6f:fc:29:87:36:75:f6:23:0e:92:1f:41:
         97:7a:d3:f9:03:63:e2:b2:71:49:c0:a9:1b:7c:14:83:f4:fa:
         77:77:ba:16:82:c8:21:f5:95:e8:c9:e6:62:b6:83:de:d1:b2:
         69:43:37:72:03:1e:03:c0:35:86:8c:78:03:fc:da:f6:a1:98:
         11:d4:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:09 2025 by rpki-client