Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f50f8870-ed18-3963-a512-a57d2535f359.roa
File:                     f50f8870-ed18-3963-a512-a57d2535f359.roa (raw, json)
Hash identifier:          /ZgFmQYjcICdqofhBN6XX5Jd11yjwAmvrdO+2+j8ot4=
Subject key identifier:   3C:9E:5A:83:28:67:E7:52:56:74:C7:19:F7:B7:89:B9:CC:CB:24:22
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285849DF5A64905CB7CC515F5729E0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f50f8870-ed18-3963-a512-a57d2535f359.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     16815
IP address blocks:        68.64.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:64:90:5c:b7:cc:51:5f:57:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=8edf5807-62a3-46df-bdeb-dd9236db230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:e3:20:60:08:70:c8:5f:ed:9c:72:84:f6:
                    69:4c:48:27:3b:19:9a:f8:30:47:43:39:a8:8a:8e:
                    33:4a:7a:3f:38:30:62:95:9f:cd:84:5b:21:26:68:
                    b6:3a:9d:ae:db:60:11:b4:0e:c5:ae:03:2c:70:e2:
                    e7:b7:90:10:d2:ea:ae:30:eb:33:9c:f9:dd:f6:74:
                    1b:17:82:fc:9c:a5:83:44:a3:3a:ff:89:2d:79:b8:
                    1b:a4:ea:4a:5a:42:a2:3e:47:66:63:32:6b:e9:67:
                    7a:a0:9b:7a:ed:10:d5:36:ee:4e:94:e4:a4:22:6e:
                    33:d5:17:6a:bc:8b:04:13:0c:1d:2e:78:c3:27:cd:
                    52:b3:90:8a:19:d0:a1:99:eb:99:d4:e3:4e:62:bb:
                    bb:45:e7:95:e9:6b:a8:8d:5f:02:c8:d9:78:be:b3:
                    65:18:5d:be:24:02:54:dc:e3:2b:a3:fb:42:89:47:
                    f3:1b:c1:2c:47:93:96:b2:5d:9a:cf:79:cd:6d:a9:
                    3c:3f:cc:9a:0b:ca:a5:96:48:2f:63:b8:f3:78:5e:
                    20:79:71:f9:a9:25:63:2b:5d:a4:f1:e7:75:e5:e5:
                    38:10:4c:c3:19:2c:37:a7:03:a9:89:f0:dc:d3:d5:
                    8b:9d:05:88:4c:ec:43:4b:26:85:d4:23:15:70:bb:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:5A:83:28:67:E7:52:56:74:C7:19:F7:B7:89:B9:CC:CB:24:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f50f8870-ed18-3963-a512-a57d2535f359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:37:5d:20:8b:21:b2:65:3d:1d:e1:6b:12:5e:7c:88:ba:
         f2:b2:fc:28:e7:bc:4c:57:d7:9e:0e:d0:78:65:e8:e1:3d:bd:
         07:d0:84:5d:5b:a8:ff:68:97:c5:80:f2:f7:dc:b1:4d:31:68:
         67:cc:0c:56:ac:ff:64:ae:9d:23:bd:c5:ef:65:b5:e2:a3:b4:
         27:f5:be:cc:63:95:b3:71:5f:1f:c3:3f:72:47:30:f5:5d:31:
         39:c8:6d:37:59:c2:bd:53:3c:61:7b:94:e7:73:84:7e:d7:b2:
         64:8b:bb:9d:ac:ed:93:58:31:6c:75:bc:47:9c:6b:2c:c3:c5:
         b1:99:90:a0:86:bc:45:3e:ac:1a:1c:93:ea:db:27:ac:a3:bc:
         fb:3f:82:94:ab:0e:0a:b7:b1:1e:ee:87:8c:c1:3b:82:f2:65:
         ff:7b:3a:39:2d:b1:46:63:85:5f:49:fa:3a:e5:bf:48:0d:8a:
         7e:27:6b:f5:82:c6:f2:ee:bf:9b:da:bc:aa:24:4b:97:70:e1:
         47:73:b3:70:a4:ea:df:1d:3c:f5:f8:0d:ea:5c:a5:96:9a:0f:
         4a:12:70:b5:1b:f8:ba:40:b2:7c:33:c0:c2:b7:92:72:37:1b:
         d0:df:d2:db:37:6a:55:a9:88:79:f6:82:c7:ae:ad:4a:0c:d7:
         00:e3:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:27:28 2025 by rpki-client