Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa
File:                     2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa (raw, json)
Hash identifier:          6EVZ/u8vHehSukHRFERCfaXpmJYygUFKFmJUwKwidNA=
Subject key identifier:   2C:6D:FE:EB:80:50:A7:52:E5:A3:E5:D8:1E:09:B4:EC:F7:39:24:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5CB0530E8075DE1150480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.60.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:cb:05:30:e8:07:5d:e1:15:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9ab0d094-4fdb-4500-9194-ea537a66affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:4d:42:98:bd:77:5d:06:c6:5b:90:83:19:
                    24:9a:4f:c9:40:e2:66:9a:52:98:2a:6e:77:c5:b2:
                    13:42:28:b3:08:e1:68:d5:6b:f9:9f:cd:d3:86:9f:
                    08:77:2d:cc:b0:5a:6f:dd:69:44:ba:e9:49:91:3b:
                    7f:3f:20:5d:4e:74:45:48:cb:fa:f6:c3:a8:ca:b1:
                    11:13:52:db:38:88:4a:8b:93:b1:1d:07:90:20:6d:
                    76:53:e8:78:51:60:81:d9:d1:89:04:0a:f6:e8:94:
                    fc:3f:28:cf:80:13:0f:0e:51:11:fe:93:34:87:45:
                    19:1f:aa:13:26:6d:a0:11:c1:b5:b3:e0:fb:9e:f6:
                    00:40:29:71:97:fe:97:6a:a1:f1:04:18:42:e2:80:
                    41:9a:1d:13:85:c4:e3:7a:fc:52:b8:17:60:f8:8b:
                    76:67:a3:16:e0:5c:d0:66:05:4f:a8:7c:2c:97:48:
                    6f:10:d5:08:fb:d2:b5:a9:5d:38:bf:4e:4d:94:01:
                    95:1f:f1:98:b8:bc:84:87:41:38:49:80:d8:87:d8:
                    7c:65:e8:2c:74:b1:10:d5:b4:19:86:09:2a:4f:dc:
                    cd:9e:f2:b2:b8:13:38:2e:ea:67:97:fb:3b:91:ac:
                    c4:fb:30:73:10:2c:70:be:21:fd:56:9f:06:09:04:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6D:FE:EB:80:50:A7:52:E5:A3:E5:D8:1E:09:B4:EC:F7:39:24:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.60.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:b5:e2:e6:23:c8:0c:de:c7:ab:d7:e6:8d:51:b8:1c:5f:
         f1:f5:a9:19:73:e5:0c:80:41:ca:19:a2:6d:4b:0f:8e:16:06:
         3c:54:94:87:91:27:a3:4f:64:f9:81:7d:99:34:f8:f5:64:dc:
         b9:86:4d:d7:aa:13:d1:93:44:13:d3:ad:ca:1b:fb:99:ca:29:
         3a:06:53:93:44:fb:bf:fc:b3:60:82:2d:6b:4d:c2:f4:e5:96:
         93:fb:e6:b9:76:f6:b8:b4:88:47:2f:38:38:52:83:0b:c7:93:
         75:27:e8:77:25:2a:69:e6:09:7e:f1:bb:79:77:2f:9e:f1:20:
         36:2e:dd:cc:9e:38:cf:c1:38:55:f1:a6:c0:a1:95:2b:f2:75:
         32:75:97:aa:90:6d:09:bb:1e:29:9d:07:22:e4:5c:be:5a:67:
         4a:10:04:81:26:c1:52:3b:9c:6b:02:27:9f:4b:eb:05:70:b7:
         fa:5c:fb:a3:b2:c7:29:0e:36:1d:17:26:05:30:27:7e:34:0e:
         47:47:26:21:4c:8a:d2:03:a9:0b:09:df:f8:eb:2b:67:95:51:
         0d:e3:53:c6:41:70:0b:91:b4:63:76:40:04:ef:5a:0d:36:2e:
         02:2d:a0:de:37:ff:4f:c9:b5:d6:ec:99:43:d8:0f:dc:3f:f8:
         85:aa:c2:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pcsFMOgHXeEVBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OWFiMGQwOTQtNGZkYi00NTAwLTkxOTQtZWE1MzdhNjZhZmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4NNQpi9d10GxluQgxkkmk/JQOJmmlKYKm53
xbITQiizCOFo1Wv5n83Thp8Idy3MsFpv3WlEuulJkTt/PyBdTnRFSMv69sOoyrER
E1LbOIhKi5OxHQeQIG12U+h4UWCB2dGJBAr26JT8PyjPgBMPDlER/pM0h0UZH6oT
Jm2gEcG1s+D7nvYAQClxl/6XaqHxBBhC4oBBmh0ThcTjevxSuBdg+It2Z6MW4FzQ
ZgVPqHwsl0hvENUI+9K1qV04v05NlAGVH/GYuLyEh0E4SYDYh9h8ZegsdLEQ1bQZ
hgkqT9zNnvKyuBM4Lupnl/s7kazE+zBzECxwviH9Vp8GCQTEswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxt/uuAUKdS5aPl2B4JtOz3OSQvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI4OWEzZmMtOGY1Ni0z
YmZhLTllOTUtY2E0ZjZmYzM2Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHpteLmI8gM3ser1+aNUbgcX/H1qRlz5QyAQcoZom1LD44WBjxUlIeR
J6NPZPmBfZk0+PVk3LmGTdeqE9GTRBPTrcob+5nKKToGU5NE+7/8s2CCLWtNwvTl
lpP75rl29ri0iEcvODhSgwvHk3Un6HclKmnmCX7xu3l3L57xIDYu3cyeOM/BOFXx
psChlSvydTJ1l6qQbQm7HimdByLkXL5aZ0oQBIEmwVI7nGsCJ59L6wVwt/pc+6Oy
xykONh0XJgUwJ340DkdHJiFMitIDqQsJ3/jrK2eVUQ3jU8ZBcAuRtGN2QATvWg02
LgItoN43/0/JtdbsmUPYD9w/+IWqwmw=
-----END CERTIFICATE-----
Generated at Sat May 10 22:20:28 2025 by rpki-client