Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa
File:                     9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa (raw, json)
Hash identifier:          62Bf3n9nFxIgBsDWJ+kjO5KAkYg8ayVvsPPVDyWVmtw=
Subject key identifier:   7C:9A:78:CD:9C:98:91:FE:FB:C5:2F:11:48:5F:5C:CE:74:20:55:ED
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F43285849D85F911AEF253169D58E0700
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     22438
IP address blocks:        68.168.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:91:1a:ef:25:31:69:d5:8e:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ad5ad9d4-f260-4ccd-87d5-8c71273254fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:b6:cc:c2:c5:ae:6b:46:14:85:1d:c0:cd:
                    6c:72:03:57:b8:d9:5b:17:94:88:b9:be:a5:b2:1b:
                    76:a9:6d:f4:b5:29:91:5d:af:cb:82:54:40:09:1d:
                    da:e9:23:fb:a1:b7:23:bf:07:64:29:6a:03:43:c9:
                    80:a3:83:7f:28:37:fc:09:f0:e6:4a:04:ab:1f:8e:
                    ea:38:b9:76:b9:32:de:3d:75:06:43:3c:e5:bd:98:
                    fb:88:45:31:1a:08:6b:12:4f:d7:86:49:d0:46:b8:
                    3f:20:6d:50:60:99:d6:93:60:e3:e4:6b:7f:df:53:
                    49:b7:23:aa:ba:18:9c:f8:fe:f4:bf:bc:60:71:e9:
                    a9:7d:49:3c:4d:38:3d:51:b8:bb:71:ae:78:8f:51:
                    bc:58:86:a9:13:90:fd:74:1c:73:0c:91:e4:5a:b3:
                    60:c4:2b:a7:a0:44:26:04:97:5b:f9:39:b8:16:76:
                    44:3a:d5:ca:a2:6d:23:8e:0a:dd:41:2c:f5:c3:bf:
                    4d:34:0c:05:ef:18:55:7a:ac:5c:a1:14:f2:ba:98:
                    1a:e0:8c:84:38:c2:2a:6a:67:8c:b1:ca:05:01:cd:
                    13:4d:5d:db:80:50:ee:4b:28:50:06:02:34:6d:9c:
                    6f:2a:70:b4:1e:58:da:7b:59:a2:cf:14:db:be:d6:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:78:CD:9C:98:91:FE:FB:C5:2F:11:48:5F:5C:CE:74:20:55:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/9e14c3a0-69d3-3777-bed5-c7cdf9344cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:be:ad:ae:b5:db:c8:d9:55:81:49:cc:37:69:cf:7e:9e:36:
         3f:80:fc:6a:d1:23:e0:42:d0:dc:18:44:53:9c:02:11:29:8f:
         d9:82:c0:9e:85:88:a2:2d:3f:d8:be:77:73:ee:8e:8e:90:a1:
         70:09:f2:c8:ee:cb:98:6e:de:41:b0:c7:99:39:a3:a2:10:ec:
         89:dd:db:b6:a2:6b:d9:96:82:c6:0a:cb:3f:98:99:c4:4e:3b:
         5b:06:0b:fb:b5:9f:77:89:35:3c:ef:af:f7:2d:f0:5b:3d:41:
         fb:71:f1:4e:33:f6:cc:ef:69:b7:ea:93:10:30:39:4b:c8:52:
         47:15:b1:21:89:73:b1:e6:ae:cf:a4:cd:1d:8a:8e:6f:55:1f:
         4b:85:b1:4b:be:28:27:f0:5f:3e:cb:32:cd:04:3e:59:54:5b:
         fa:88:98:50:f4:96:08:03:f7:44:8b:75:7f:f7:c4:cb:98:93:
         90:11:8b:98:ce:f8:f0:19:f9:77:71:5d:e7:75:c0:0e:61:0f:
         57:ce:78:a3:03:b3:8f:c2:fc:9a:14:01:be:42:4d:a5:58:19:
         86:03:57:bd:77:fc:9d:30:b8:92:33:a3:46:fb:8d:e2:43:2b:
         a9:6f:4e:9b:07:41:e1:ed:0b:df:3b:0c:ef:5e:47:11:9a:3d:
         3b:2c:42:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5Ea7yUxadWOBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1
NDdjMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YWQ1YWQ5ZDQtZjI2MC00Y2NkLTg3ZDUtOGM3MTI3MzI1NGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ge2zMLFrmtGFIUdwM1scgNXuNlbF5SIub6l
sht2qW30tSmRXa/LglRACR3a6SP7obcjvwdkKWoDQ8mAo4N/KDf8CfDmSgSrH47q
OLl2uTLePXUGQzzlvZj7iEUxGghrEk/XhknQRrg/IG1QYJnWk2Dj5Gt/31NJtyOq
uhic+P70v7xgcempfUk8TTg9Ubi7ca54j1G8WIapE5D9dBxzDJHkWrNgxCunoEQm
BJdb+Tm4FnZEOtXKom0jjgrdQSz1w79NNAwF7xhVeqxcoRTyupga4IyEOMIqameM
scoFAc0TTV3bgFDuSyhQBgI0bZxvKnC0Hljae1mizxTbvtZhOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyaeM2cmJH++8UvEUhfXM50IFXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5
MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvOWUxNGMzYTAtNjlkMy0z
Nzc3LWJlZDUtYzdjZGY5MzQ0Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4
YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy
NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy
YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK+ra6128jZVYFJzDdpz36eNj+A/GrRI+BC0NwYRFOcAhEpj9mCwJ6F
iKItP9i+d3Pujo6QoXAJ8sjuy5hu3kGwx5k5o6IQ7Ind27aia9mWgsYKyz+YmcRO
O1sGC/u1n3eJNTzvr/ct8Fs9Qftx8U4z9szvabfqkxAwOUvIUkcVsSGJc7Hmrs+k
zR2Kjm9VH0uFsUu+KCfwXz7LMs0EPllUW/qImFD0lggD90SLdX/3xMuYk5ARi5jO
+PAZ+XdxXed1wA5hD1fOeKMDs4/C/JoUAb5CTaVYGYYDV713/J0wuJIzo0b7jeJD
K6lvTpsHQeHtC987DO9eRxGaPTssQkg=
-----END CERTIFICATE-----
Generated at Thu May 15 08:11:02 2025 by rpki-client