Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0433eb91-9aab-39da-8fe3-36f575e63122.roa
File:                     0433eb91-9aab-39da-8fe3-36f575e63122.roa (raw, json)
Hash identifier:          w2ZbMKK8uE7OIXDxa/n7ksfQHhAj9PtLFN34NkpQDEo=
Subject key identifier:   49:C0:1F:3F:12:76:CA:D9:18:E5:33:8F:12:41:87:B0:E1:E3:36:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB418711754A30D898F880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0433eb91-9aab-39da-8fe3-36f575e63122.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.52.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:41:87:11:75:4a:30:d8:98:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=3c6727a4-0ce1-46ad-862b-2f1618fc26da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:60:b1:fa:76:d0:14:40:23:15:f5:14:e8:
                    2f:b3:aa:3b:d3:52:a5:73:de:53:67:64:49:b4:ea:
                    ae:66:37:23:6b:6c:3b:90:bc:24:7c:18:06:3c:d1:
                    ab:33:50:6e:a4:d1:11:91:2e:d4:fb:d0:d8:9e:73:
                    5f:17:e9:79:1f:53:71:2d:7c:3a:c4:a6:ea:46:0c:
                    20:70:6e:d8:ed:76:09:f0:29:0e:d6:2a:6f:8c:79:
                    c6:5c:27:2d:90:73:ea:91:5e:5a:f1:e7:f6:5f:fb:
                    02:6c:00:ab:08:57:93:f4:79:a1:92:c4:c6:fa:e1:
                    52:6f:d7:2e:72:0d:6a:f2:78:86:32:c9:f7:68:0a:
                    f9:ef:c6:f7:13:5e:63:0c:f5:7a:de:b2:f5:54:a9:
                    f9:9a:3a:24:5e:fa:77:e4:02:af:22:81:30:7e:e0:
                    6a:27:81:5d:b5:62:21:7d:a6:7b:c6:fa:89:61:26:
                    85:73:b9:28:b3:cb:e9:66:f2:54:a0:c3:7b:7a:89:
                    31:1f:8d:0c:3b:71:5b:45:bf:02:62:bf:2e:4c:24:
                    3c:66:98:0b:c1:34:c4:09:d3:e8:7b:2a:e5:06:01:
                    45:36:79:78:27:ad:05:e0:e1:f1:36:3f:f3:1c:b6:
                    78:d6:ff:36:36:88:34:52:4c:54:2b:54:03:d5:c6:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:1F:3F:12:76:CA:D9:18:E5:33:8F:12:41:87:B0:E1:E3:36:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0433eb91-9aab-39da-8fe3-36f575e63122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3b:bd:99:c9:89:f3:0a:fb:bd:e1:4a:d8:1b:05:a6:86:95:
         ef:78:ee:6f:7f:3e:a7:49:33:54:f7:8e:ec:03:19:fd:75:32:
         52:40:b3:7e:69:13:bb:87:95:d3:cc:0d:66:3c:51:81:44:02:
         e5:3c:5a:92:1c:18:6b:5d:70:1c:c5:11:5c:71:de:89:88:4c:
         d0:ce:f3:be:94:8c:b8:26:e7:9a:5a:d8:d5:70:1a:0f:65:7e:
         cc:49:56:81:b2:27:81:43:ad:1a:2c:87:a8:f5:59:a9:7d:53:
         71:fe:d5:c4:6b:e3:97:d8:8c:0c:f0:df:c8:9d:b6:6c:c1:4c:
         95:a7:62:f3:ea:08:28:d8:58:aa:33:05:2e:1d:ad:cc:09:44:
         3a:f1:dc:e9:ed:76:70:f7:7e:38:fe:30:01:12:eb:63:f2:79:
         f2:7f:fb:1b:7e:9f:ed:68:88:ee:db:f8:d1:fd:88:11:7a:6e:
         37:da:3d:3e:f9:4c:42:60:31:43:c9:58:5c:ed:64:98:e9:26:
         7e:18:0c:2a:65:07:4f:c9:0d:c2:a2:63:8c:90:a0:5d:72:87:
         c7:e8:94:c0:18:6b:04:a6:12:5c:9b:46:26:60:81:b2:a1:fa:
         a1:fd:54:5d:ff:cc:fc:0e:f3:c9:26:28:47:2f:a5:01:5f:28:
         a1:01:bb:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+0GHEXVKMNiY+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
M2M2NzI3YTQtMGNlMS00NmFkLTg2MmItMmYxNjE4ZmMyNmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcxgsfp20BRAIxX1FOgvs6o701Klc95TZ2RJ
tOquZjcja2w7kLwkfBgGPNGrM1BupNERkS7U+9DYnnNfF+l5H1NxLXw6xKbqRgwg
cG7Y7XYJ8CkO1ipvjHnGXCctkHPqkV5a8ef2X/sCbACrCFeT9HmhksTG+uFSb9cu
cg1q8niGMsn3aAr578b3E15jDPV63rL1VKn5mjokXvp35AKvIoEwfuBqJ4FdtWIh
faZ7xvqJYSaFc7kos8vpZvJUoMN7eokxH40MO3FbRb8CYr8uTCQ8ZpgLwTTECdPo
eyrlBgFFNnl4J60F4OHxNj/zHLZ41v82Nog0UkxUK1QD1cZrWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnAHz8SdsrZGOUzjxJBh7Dh4zY/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQzM2ViOTEtOWFhYi0z
OWRhLThmZTMtMzZmNTc1ZTYzMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDSKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALM7vZnJifMK+73hStgbBaaGle947m9/PqdJM1T3juwDGf11MlJAs35p
E7uHldPMDWY8UYFEAuU8WpIcGGtdcBzFEVxx3omITNDO876UjLgm55pa2NVwGg9l
fsxJVoGyJ4FDrRosh6j1Wal9U3H+1cRr45fYjAzw38idtmzBTJWnYvPqCCjYWKoz
BS4drcwJRDrx3OntdnD3fjj+MAES62PyefJ/+xt+n+1oiO7b+NH9iBF6bjfaPT75
TEJgMUPJWFztZJjpJn4YDCplB0/JDcKiY4yQoF1yh8folMAYawSmElybRiZggbKh
+qH9VF3/zPwO88kmKEcvpQFfKKEBu4k=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:16:28 2025 by rpki-client