Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa
File:                     1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa (raw, json)
Hash identifier:          eP8ZaIAMiHvVLmP/U84Pji77R2Bg7OrtD0iH6NpyzEA=
Subject key identifier:   C1:B7:F8:47:17:99:3F:82:3D:7E:39:67:31:D7:F9:AA:E0:4D:32:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB89FA9A1E975DF74637680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        68.52.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:9f:a9:a1:e9:75:df:74:63:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1250b6eb-6c28-4149-ae65-7054f43390ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:5a:ef:96:bd:aa:15:06:2a:d1:51:d2:62:
                    a3:83:13:4b:24:d5:e3:2d:e0:e2:95:45:f4:f3:a4:
                    8a:27:20:5f:3a:dc:fb:44:03:96:ca:31:c2:c8:ae:
                    6e:65:a2:47:ab:5e:2c:d6:02:79:64:14:49:ab:f7:
                    f5:b2:a8:7f:58:27:77:0d:5c:7e:41:81:e3:21:51:
                    13:92:ab:81:d4:2d:6f:d7:f3:94:4d:6c:e7:4d:f4:
                    41:cb:32:3b:7c:c8:fd:d5:6c:34:19:9f:43:2c:0c:
                    6f:79:5e:29:a0:aa:91:2f:86:66:07:4c:4c:10:c0:
                    2c:6b:6b:48:75:72:1d:c8:48:a6:05:c7:b6:0d:cd:
                    68:25:54:71:00:3a:94:f0:97:96:47:d8:46:fb:25:
                    26:62:21:fb:48:3b:f0:ae:8f:7a:7f:df:c2:f4:74:
                    ee:cc:22:af:d1:b6:b5:34:cb:7b:14:6b:d9:8d:6e:
                    aa:a1:a0:70:08:6d:25:c2:3f:4c:a2:9a:89:06:17:
                    ca:51:69:5f:cf:2b:c0:a5:61:c0:e9:60:5b:30:56:
                    eb:45:4b:bf:6c:28:a9:4a:6e:f1:ec:ad:45:44:65:
                    8c:26:c3:ac:93:f1:d8:6b:58:6c:82:cd:65:1e:83:
                    5c:12:09:63:b5:89:f3:d9:eb:a3:20:10:01:44:c0:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:F8:47:17:99:3F:82:3D:7E:39:67:31:D7:F9:AA:E0:4D:32:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab1f95a-4d14-3864-a753-c42057c0a0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:fe:11:7e:3e:1f:3b:f7:17:9f:cd:68:cb:68:d8:8a:11:7e:
         f7:b2:c8:7d:62:ea:45:be:ac:cc:eb:bc:35:38:9f:ec:0c:cd:
         ec:cc:79:c2:3a:ae:9f:cf:55:65:30:02:10:fe:a5:49:d1:d5:
         9b:62:91:a8:cd:95:78:ca:84:40:ac:b6:a8:06:f1:5b:9b:dd:
         e2:46:94:fd:8a:72:28:fb:1d:a1:d3:83:00:97:20:26:0f:56:
         86:a0:e0:e3:bd:c4:e6:e4:d1:4d:56:47:ff:80:06:29:d5:cb:
         8a:e3:2b:f7:66:06:b0:34:1c:13:b1:f8:00:50:c1:07:d0:65:
         e3:23:b9:47:c4:c7:08:d0:a1:34:f3:ac:ae:f8:1b:1e:a6:cb:
         5a:83:d7:99:db:6c:80:bc:d6:0c:bd:c9:2e:c4:69:c5:52:b7:
         a8:2c:47:de:76:ba:c3:b8:61:6c:f6:41:14:1c:a7:d2:b3:59:
         e6:ba:64:a6:15:5c:03:36:72:12:d7:b2:8b:d2:20:59:63:37:
         33:52:25:dd:63:53:5f:7e:b5:8e:4b:65:94:d3:10:51:e2:8b:
         8d:b5:e8:19:7e:a7:4a:c1:25:74:1c:3f:91:dc:d0:22:ac:a1:
         89:13:c9:b5:aa:f0:f5:0a:0b:89:b0:dd:38:86:86:b1:a4:49:
         2c:66:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:46 2025 by rpki-client