Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/22158c15-7870-3594-99f8-8ed46ad80197.roa
File:                     22158c15-7870-3594-99f8-8ed46ad80197.roa (raw, json)
Hash identifier:          391d0yky55jxtMQHkn0skriTJX7TOfgB88qTK/qbeTM=
Subject key identifier:   CE:03:1E:07:02:68:BD:FF:90:57:6C:80:91:26:3D:C6:D7:DD:E9:08
Certificate issuer:       /CN=c1ca327a-71b9-47e5-b718-53788c38e86c
Certificate serial:       010D0C9F4328584A011CD9B992147416A4C40000
Authority key identifier: CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/22158c15-7870-3594-99f8-8ed46ad80197.roa
Signing time:             Wed 28 May 2025 15:14:42 +0000
ROA not before:           Wed 28 May 2025 15:14:42 +0000
ROA not after:            Tue 26 Aug 2025 15:14:42 +0000
asID:                     399821
IP address blocks:        68.233.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:01:1c:d9:b9:92:14:74:16:a4:c4:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ca327a-71b9-47e5-b718-53788c38e86c
        Validity
            Not Before: May 28 15:14:42 2025 GMT
            Not After : Aug 26 15:14:42 2025 GMT
        Subject: CN=a910cbe5-fa25-4c1a-9d43-29d51764d3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:2c:41:bb:b0:b0:b0:57:44:dd:29:c2:d8:
                    4a:5e:d2:7c:87:06:05:09:54:80:08:1a:cf:49:a2:
                    e8:12:a1:16:ae:e3:93:3e:ee:b6:a9:72:8b:fe:d1:
                    86:6f:e6:d3:4f:18:1e:25:f6:df:3d:3e:fe:a4:f5:
                    6d:70:21:c4:26:5c:fc:e4:e3:8d:78:1d:27:b1:25:
                    9f:27:fb:f1:85:c6:7d:50:de:3e:7d:1b:2d:68:4a:
                    bd:fe:62:68:5a:49:b8:6a:da:85:74:c4:22:f7:a0:
                    06:a6:54:71:80:29:16:ec:b4:55:ec:0f:e8:29:2f:
                    aa:d4:87:49:6d:90:ca:b2:3e:e2:af:3c:c9:ce:50:
                    57:ba:9e:cc:13:8e:17:5c:7a:01:57:0a:34:e3:5d:
                    81:10:25:95:a7:36:a4:83:2c:a8:f0:0b:f9:6b:cb:
                    f7:9e:34:4d:ea:a6:14:68:7c:56:55:64:2c:8b:dc:
                    9c:6a:ac:16:4e:75:5f:37:dd:9a:89:eb:a5:1f:2e:
                    50:3a:0f:8b:21:c0:df:eb:1d:0b:cc:8b:5f:b7:0e:
                    ec:00:bd:4d:7d:de:dd:c2:aa:cb:dc:b2:fa:a8:f1:
                    0f:c1:3e:0a:d0:a8:b2:2a:ac:8a:b0:53:e1:5f:30:
                    de:d0:31:86:aa:49:4b:dd:61:82:4b:11:3d:c1:7c:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:03:1E:07:02:68:BD:FF:90:57:6C:80:91:26:3D:C6:D7:DD:E9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/22158c15-7870-3594-99f8-8ed46ad80197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl

            X509v3 Authority Key Identifier:
                keyid:CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:99:20:d4:c1:22:1b:04:94:22:44:2c:ad:36:50:51:f1:
         f0:ee:55:08:fa:7a:eb:3a:a6:89:df:2f:b8:52:e3:90:5f:50:
         0a:e7:ea:64:07:fe:61:0c:09:13:e0:c3:50:72:ea:b0:0a:58:
         2d:0d:34:00:b8:eb:9a:5c:e8:5b:51:ea:8c:6c:98:8c:14:f6:
         dd:0e:c8:c1:9d:82:93:25:03:92:01:95:17:9f:37:c4:a7:84:
         4d:e5:37:a5:11:9b:18:58:d9:75:e1:26:a1:23:b9:56:84:c6:
         d3:99:32:39:d1:42:0d:eb:30:6f:1a:bd:5f:31:09:5a:4c:1b:
         46:d0:a7:05:80:c0:7f:ee:50:8f:bb:51:83:9b:48:78:63:b6:
         a5:63:ed:71:6f:ba:c9:dc:7e:5e:7d:cb:ac:9d:f1:12:29:1c:
         5c:83:f7:f1:6e:cf:3f:4c:f6:d5:c0:d9:58:0d:b2:29:57:8e:
         85:a0:dd:ba:55:6c:02:da:9a:62:2f:39:04:39:4e:9d:44:d4:
         8f:9d:d4:22:06:93:a8:39:c1:57:16:0b:f6:fc:11:0c:19:44:
         6a:09:4d:92:0d:2e:95:a9:7c:82:01:8b:02:0f:22:ff:73:38:
         8e:27:eb:9d:e6:c0:26:c3:4c:93:3b:be:ee:45:90:7a:51:8f:
         d3:96:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:56:18 2025 by rpki-client