Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa
File:                     30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa (raw, json)
Hash identifier:          uWRTQlSzF0OsDn8rRFwCUlGODwy+oPdrYtF0E0yiIWk=
Subject key identifier:   FB:96:D6:0C:1E:9D:39:C0:7B:BB:4D:D4:D3:B2:05:8A:11:CC:6B:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8A21DF2F1A335267FC180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        68.52.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:a2:1d:f2:f1:a3:35:26:7f:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=c1773c43-64ed-47dd-9e04-067872795cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:b7:09:ab:52:ed:7f:1e:1a:94:14:aa:fc:
                    bd:a0:6a:36:e5:95:bb:77:f4:c0:dd:0d:3d:01:a6:
                    43:57:a5:19:16:79:3f:a2:eb:e9:0a:ce:f1:43:31:
                    02:dd:92:44:84:8e:df:85:79:fe:c7:04:7a:e2:fb:
                    42:77:50:e2:13:35:5e:85:14:e8:7e:4a:fb:cf:f3:
                    e2:71:e1:50:f8:26:08:7a:2b:38:35:e9:12:f4:73:
                    d3:fe:f4:2f:95:40:c8:ce:08:1b:66:18:c7:44:3e:
                    f7:a1:50:4e:be:01:7e:0d:32:a7:66:27:3e:ff:b0:
                    22:35:e9:71:76:5a:f3:87:d5:fc:ce:02:6c:b4:35:
                    0a:eb:92:3c:b0:d7:22:0e:f5:bb:31:7b:c7:f6:d3:
                    17:53:7b:a7:a2:f3:52:3e:39:54:67:7b:02:f5:f4:
                    12:77:99:73:d1:40:87:2c:e9:81:15:a1:a9:be:d5:
                    f4:e0:a5:4b:05:19:ba:0f:3b:9f:7e:b8:c3:bb:ec:
                    47:5e:cc:90:cc:4b:97:ab:2d:d4:02:d9:1c:36:42:
                    bf:1f:cb:23:af:56:c4:f3:05:3b:6c:bf:ea:7b:98:
                    0f:91:63:9c:eb:16:30:56:c5:d9:8e:38:60:18:6c:
                    ec:a3:82:5d:be:e0:4a:6d:12:05:22:ab:09:32:ed:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:96:D6:0C:1E:9D:39:C0:7B:BB:4D:D4:D3:B2:05:8A:11:CC:6B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30e05369-64b9-3ae0-8a8f-ee228c86f5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:96:65:66:66:3f:50:2f:93:38:8e:5a:5e:13:d6:4a:a5:28:
         d2:a0:8d:2d:43:ba:78:53:15:4f:6c:80:d5:3b:48:e0:e7:f6:
         ae:a5:7a:f0:86:88:6c:8a:b2:5d:43:a5:0a:cc:71:48:14:50:
         4a:96:ec:6c:d3:b4:7b:20:82:73:c2:0f:95:18:e1:c7:b3:6f:
         c6:54:a7:bd:70:ed:2e:5e:98:20:16:b0:54:7a:3f:8c:1a:88:
         ef:e2:ab:74:ab:31:91:fd:6b:02:30:1b:81:71:55:fb:c7:fa:
         17:7f:f6:68:85:58:cb:5e:50:4a:67:4c:75:86:e3:9b:c6:d8:
         a0:b5:d3:81:e0:dc:56:99:98:6f:c4:76:00:a5:77:e9:59:01:
         b8:b1:e4:96:7e:4e:31:e0:29:33:74:62:93:69:b4:f8:07:74:
         aa:24:99:65:46:bb:63:a9:67:bf:e2:c9:a5:93:7a:fa:ac:63:
         b6:0c:0a:c7:74:72:d3:ac:97:e7:cd:bd:7b:25:96:84:72:cc:
         4f:1f:e1:a2:22:4c:03:6c:b6:b8:56:51:40:a5:8d:8f:e2:56:
         79:b6:21:98:c8:52:32:75:39:4e:76:af:17:1d:ca:df:88:ea:
         4e:31:26:73:0c:8c:44:9b:11:c0:23:a0:2f:5d:83:1f:55:12:
         32:9d:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:06 2025 by rpki-client