Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c4e23dc7-8b20-3346-92c6-151bb488aa08.roa
File:                     c4e23dc7-8b20-3346-92c6-151bb488aa08.roa (raw, json)
Hash identifier:          JfJFOQjDELbn5zPezi1E7Suzyco9FJXZVLDEBXzRlf4=
Subject key identifier:   EB:E5:66:A7:89:EC:E6:9F:9B:6C:DE:5E:1A:5D:5E:53:11:30:B3:0E
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584AD2A717F0B695422A71E34440
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c4e23dc7-8b20-3346-92c6-151bb488aa08.roa
Signing time:             Mon 11 Aug 2025 16:37:11 +0000
ROA not before:           Mon 11 Aug 2025 16:37:11 +0000
ROA not after:            Sun 09 Nov 2025 17:37:11 +0000
asID:                     0
IP address blocks:        192.64.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:a7:17:f0:b6:95:42:2a:71:e3:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 11 16:37:11 2025 GMT
            Not After : Nov  9 17:37:11 2025 GMT
        Subject: CN=6e439572-c954-4d57-a8d1-6fe7058fbf18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:de:4a:42:6a:a0:6f:0c:f9:28:a7:41:4a:
                    15:3a:bc:8b:ca:53:50:90:7b:78:de:20:e8:d0:0a:
                    6f:ad:15:ba:90:15:1c:98:c9:dd:62:71:75:39:f0:
                    e2:7d:40:33:0c:3e:be:af:24:c8:07:86:20:86:b8:
                    a1:4e:58:19:4e:ae:16:31:40:7b:b3:9a:9e:0e:62:
                    a7:91:ea:3f:79:81:4d:cf:d7:b0:f6:0f:3b:db:53:
                    64:dd:18:8f:a4:d0:8e:8c:40:19:72:85:ce:85:a0:
                    32:56:00:f2:c2:37:62:ba:b0:60:8e:3b:dc:1a:07:
                    91:58:65:39:b2:e7:ea:fe:85:1e:7e:9b:6c:c8:51:
                    88:72:62:04:7a:62:e8:5f:47:ed:75:1f:f4:ce:3b:
                    14:e6:d1:47:5e:8c:ef:ac:ba:4f:9a:c5:18:74:d8:
                    21:22:1e:37:fb:fe:b2:49:21:a7:34:8c:a4:c8:44:
                    3a:32:4d:bd:83:09:7e:7e:b1:33:ff:af:de:f8:d2:
                    06:79:05:3d:c7:f5:35:19:56:29:d4:c1:df:68:73:
                    d5:a5:bd:3e:53:b3:77:17:f4:6d:39:3f:cc:95:70:
                    fa:b6:91:e4:6c:b7:49:a4:4d:50:33:1b:50:ea:a8:
                    72:f2:eb:19:3f:1b:ad:3e:4a:1a:95:0e:8c:ee:66:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E5:66:A7:89:EC:E6:9F:9B:6C:DE:5E:1A:5D:5E:53:11:30:B3:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c4e23dc7-8b20-3346-92c6-151bb488aa08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:e2:68:12:65:cf:fe:eb:f1:05:9d:85:e9:6f:fb:49:91:
         f5:ab:e8:8d:39:41:08:42:69:43:f3:a6:f0:ca:02:69:d0:45:
         aa:9a:3d:a9:fe:82:ea:4e:77:5d:0a:65:af:f5:3d:f2:5e:b0:
         b5:a8:5c:42:69:9e:ca:c0:9f:86:16:9e:86:04:71:76:31:dc:
         6f:a6:24:7a:8c:b2:7f:99:c6:da:26:b2:32:89:d6:04:b6:20:
         40:a0:18:6a:a3:e8:a9:d4:ad:f2:4a:d9:d0:7d:20:16:70:6a:
         d2:c4:fb:b6:e7:38:5c:07:02:2d:67:ae:b1:ed:73:6b:8f:74:
         20:04:0a:a5:36:4f:04:24:cd:f3:1a:49:bf:ba:d7:31:05:47:
         7e:09:b0:37:4e:97:71:98:96:be:ba:cc:14:22:6a:21:ea:54:
         f9:17:cf:dd:fd:85:59:f4:88:84:8d:4c:ee:38:4d:58:57:92:
         44:4b:d8:ea:aa:eb:04:78:9a:b6:8d:87:71:4e:99:4f:00:c5:
         7c:30:30:df:90:9a:2c:36:1e:4a:c5:0c:1a:79:41:1c:ae:45:
         08:69:c1:b6:86:dd:55:d5:94:c9:9a:6b:89:89:de:3f:ac:5f:
         d4:f9:a5:e7:79:96:ad:6e:20:82:7b:c6:ee:54:32:5d:60:74:
         95:de:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:08:58 2025 by rpki-client