Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5de988e5-8a06-3228-856f-a74e06b832b1.roa
File:                     5de988e5-8a06-3228-856f-a74e06b832b1.roa (raw, json)
Hash identifier:          j7YN03rN0+1iZIluZsK0xGbuOkE4jiTpq74ulgxE+W4=
Subject key identifier:   BE:3E:13:23:60:8B:FB:7F:5D:39:8C:BF:78:B1:AE:C2:96:AC:EF:52
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849C4D4C9AD725239887532AB80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5de988e5-8a06-3228-856f-a74e06b832b1.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16417
IP address blocks:        68.232.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c9:ad:72:52:39:88:75:32:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=f58a7645-4b5c-46ff-b1e4-20e4ff8453c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:cb:43:3b:02:39:94:b4:08:46:15:b2:2c:
                    c3:88:4e:e9:c9:02:5b:35:c2:d3:aa:a5:aa:f2:3c:
                    cc:5b:b2:c3:e7:73:52:02:2c:b7:3d:f9:6b:77:fa:
                    1d:85:1e:0f:a1:8f:2e:6a:d5:f9:03:32:1b:4c:7b:
                    6e:0b:b7:f8:4c:e9:3f:ca:23:9f:52:a3:47:fb:ef:
                    13:a0:75:fe:c3:e9:16:b7:9f:d7:25:8c:aa:7d:2d:
                    3f:9c:29:fc:0c:3b:d1:d4:a0:f5:a4:2b:1d:7f:c7:
                    0e:0b:9b:f9:8b:80:23:75:63:b8:34:30:96:d0:1a:
                    12:dd:ee:51:af:eb:b7:0e:d9:c0:ae:d8:1c:d8:f7:
                    69:28:35:e0:ed:e4:58:30:cd:aa:cf:9e:05:0b:e6:
                    67:56:b8:2b:be:28:b1:ec:42:d4:ef:5f:e6:50:f9:
                    1e:eb:56:df:a3:f9:0b:c2:cd:d3:d8:d5:fa:4b:9f:
                    61:be:fe:aa:cf:a6:b1:0b:10:d9:55:6e:b8:34:47:
                    11:51:4a:2d:00:cb:d1:df:fc:08:08:c3:d6:1e:84:
                    57:ed:61:02:09:75:2a:04:01:a2:8a:a4:5f:20:74:
                    61:e8:3d:11:37:b2:36:92:d2:4e:c8:2c:d8:98:82:
                    6b:a6:3f:cd:df:77:81:bf:24:b2:17:08:ca:cd:e8:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3E:13:23:60:8B:FB:7F:5D:39:8C:BF:78:B1:AE:C2:96:AC:EF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5de988e5-8a06-3228-856f-a74e06b832b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:7e:af:25:85:ca:d5:f3:c8:c8:71:20:8b:53:f9:63:8e:
         50:18:de:4a:c4:bc:ec:93:6c:cc:e8:5a:84:73:1b:8a:f8:f0:
         05:fe:c3:7f:31:a5:35:37:f3:2a:75:b3:6b:38:e6:0d:34:fe:
         76:68:56:64:d6:86:5a:76:5a:a2:e9:48:d0:db:c6:66:c0:0a:
         2a:fb:6f:6e:ec:0b:19:ad:93:c8:3f:90:62:89:c5:31:63:ad:
         cc:3c:72:ed:f6:e1:8f:bb:15:a8:64:35:6d:89:74:d8:ab:ea:
         bb:34:2c:81:ab:e2:cb:7b:04:23:46:67:b0:ae:1b:f0:9f:28:
         87:e4:e8:46:5e:9c:00:b1:a3:e5:03:cd:ab:97:6a:78:87:6b:
         20:4c:2c:5f:81:20:1c:df:44:ec:60:e2:a5:dd:ba:36:7e:81:
         7e:11:31:a2:b5:72:61:6c:f3:0c:b6:29:7a:61:a9:91:2d:00:
         40:d5:7b:9d:98:fe:b0:8c:91:89:60:4e:c5:89:3c:1a:91:57:
         07:6d:ae:d9:2b:93:54:7a:c4:d9:d1:f5:95:e7:76:e6:a6:65:
         af:d7:3e:46:bc:16:22:e2:bb:4b:5b:61:c9:66:31:3d:94:b9:
         b2:ac:57:f6:da:6c:75:b1:82:04:72:9e:c3:d4:14:c6:ba:5f:
         a2:6d:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:55:39 2025 by rpki-client