Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238713c1-612e-3d96-9dd9-0a25ae453225.roa
File:                     238713c1-612e-3d96-9dd9-0a25ae453225.roa (raw, json)
Hash identifier:          cdNfhf8owTxNU0r7FQj7gkU/GuaVRiV5aUBtriRL2FU=
Subject key identifier:   E1:9F:F4:F7:E7:E9:D3:26:59:C6:CE:E0:CA:54:EE:D4:A8:4D:85:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC236B55079363807A97D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238713c1-612e-3d96-9dd9-0a25ae453225.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        68.45.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:36:b5:50:79:36:38:07:a9:7d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=ad5a66b7-ecd9-482d-9191-3f3ce9a2e370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:64:41:8f:b4:f9:6e:76:6d:dd:2d:c8:95:
                    63:bb:87:26:7d:a8:eb:c5:7e:b7:21:72:01:d3:8d:
                    4e:1e:00:d3:d8:60:85:cd:be:a3:04:6a:0a:51:47:
                    ae:ed:10:d7:f8:13:c3:95:28:cd:ff:c4:81:50:c0:
                    d4:2e:51:38:3b:d9:35:08:b6:0a:d9:f9:93:f2:66:
                    85:bd:b6:38:be:32:e9:f4:7c:5d:a6:ef:a2:92:40:
                    9f:d3:9b:00:17:41:07:93:5b:bd:ac:c3:58:eb:ad:
                    e7:5e:be:79:8e:a0:9a:31:24:fa:fc:a2:b1:f4:91:
                    c9:3c:95:63:ad:ce:53:4a:44:8d:b1:a6:87:84:70:
                    2f:d5:40:99:58:71:15:6f:3c:8f:a8:85:9d:23:44:
                    52:44:8b:e3:53:2b:90:3a:9e:4a:30:0d:d1:d9:b1:
                    d2:42:d0:4c:21:e2:6d:bb:19:e8:81:63:00:3d:c6:
                    10:d2:fb:17:43:c9:1c:fe:97:d1:21:5e:7e:03:f9:
                    3e:69:e3:64:48:fe:58:45:6e:d3:6c:ed:5f:f3:2f:
                    0d:e1:ba:74:45:c8:82:cf:de:a4:4c:3d:64:e9:a7:
                    13:43:e0:91:ff:67:b0:3c:9a:47:ba:4b:49:34:d5:
                    5f:a0:a6:e6:bd:f0:55:81:22:d6:5d:56:c1:c4:4c:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9F:F4:F7:E7:E9:D3:26:59:C6:CE:E0:CA:54:EE:D4:A8:4D:85:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238713c1-612e-3d96-9dd9-0a25ae453225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:83:d9:79:e1:7f:fb:16:b2:ca:a9:56:e6:aa:18:87:07:
         d7:eb:8b:33:58:ec:2b:a8:77:b4:e9:4c:48:88:74:9c:ac:ca:
         fd:74:e7:7d:a4:ee:c5:2d:b7:f6:01:c3:ba:91:9a:01:ca:dc:
         ad:97:c7:98:66:b7:67:a9:de:6d:c5:88:54:56:9e:ea:e8:42:
         e2:a0:15:5e:84:94:03:38:0c:56:90:f4:01:a2:a2:78:bd:38:
         3b:7b:15:9b:7b:cd:5a:a1:09:97:11:4a:d2:9a:76:67:c2:fe:
         eb:f9:48:c0:bb:a4:73:99:27:34:92:c4:f3:7e:a9:1e:c2:06:
         9d:49:ed:f4:b0:cf:04:5f:16:77:f9:6b:f8:db:e0:f9:8f:b4:
         66:1c:dc:3e:ac:14:15:00:98:51:95:4c:68:b9:8d:96:1d:12:
         f9:51:a4:38:4d:34:1e:4c:08:c3:87:7c:a9:d8:d8:a9:b0:59:
         ff:9e:0d:40:af:b9:b3:32:3b:55:01:08:7d:1b:cd:30:da:67:
         29:fd:05:90:ad:81:2c:8f:cc:1c:e5:07:ad:3b:1e:f8:55:37:
         b5:81:34:a2:0b:5d:ad:a5:7c:a3:2e:47:21:db:f7:2d:3e:2e:
         00:13:dc:41:af:2f:7c:8d:5f:d9:75:9b:0d:73:e8:ab:04:18:
         e3:a8:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:05:15 2025 by rpki-client