Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b544dfb-3dd5-36d7-bc96-39fb787d5bc8.roa
File:                     5b544dfb-3dd5-36d7-bc96-39fb787d5bc8.roa (raw, json)
Hash identifier:          m5OvMUsTgUn8Ne+yCRtaM8WY31wY67iiZjm4YAJOHz0=
Subject key identifier:   A3:6C:A6:1B:5C:D1:43:12:88:14:B4:51:DC:CF:1B:0B:AA:41:A2:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB710E12A0748434BCC1700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b544dfb-3dd5-36d7-bc96-39fb787d5bc8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        68.47.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:10:e1:2a:07:48:43:4b:cc:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1080d9d0-2295-40af-9004-0d480f3a5058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:6d:9f:09:f2:87:67:7d:8d:f5:ee:56:42:
                    10:b5:a0:7f:2b:a1:65:9d:f6:d7:57:68:35:71:4d:
                    06:c5:51:06:4f:c4:f7:6f:d2:b7:04:f1:09:74:1e:
                    17:40:1b:75:c3:98:6c:01:3c:39:a0:c0:90:31:bd:
                    e5:0b:d9:55:ef:a1:8e:7f:84:50:ef:12:99:83:cf:
                    5f:6a:8f:c0:90:41:00:0a:dc:9d:44:66:c1:5d:bd:
                    fe:19:6f:81:d6:bf:75:68:74:a2:ac:de:8a:35:dc:
                    41:9f:ed:2d:6c:43:ac:fa:30:74:83:ca:85:e6:20:
                    7e:24:f2:61:6f:bd:c0:7c:26:50:35:6c:0a:4d:d5:
                    81:6c:30:22:4a:7a:30:d9:1e:c0:b3:e3:fb:a1:0c:
                    7d:b8:25:df:07:6f:f1:d5:07:f9:98:20:30:54:5b:
                    da:8e:61:06:39:e1:27:5a:0e:66:91:d5:84:e6:28:
                    e6:26:3a:cd:07:92:e3:45:4b:4b:a3:c1:3c:22:45:
                    6c:45:eb:f1:46:a1:b2:f0:a8:4c:7d:62:6e:3d:64:
                    60:a3:a0:93:8e:13:9d:91:5b:8e:04:13:e5:1e:66:
                    d3:f5:84:dd:17:db:ad:d5:c3:4e:81:39:8e:38:7e:
                    ce:e3:5b:cb:f4:e5:87:40:9d:be:4a:cf:c3:0a:f0:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:A6:1B:5C:D1:43:12:88:14:B4:51:DC:CF:1B:0B:AA:41:A2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b544dfb-3dd5-36d7-bc96-39fb787d5bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:7e:6e:96:9d:12:58:30:45:00:d0:8a:b0:b6:6e:b6:c4:27:
         6d:23:50:2a:66:4e:e8:e5:dd:bb:b3:00:eb:ea:39:28:88:08:
         cf:14:10:da:0a:33:61:ab:f4:2c:03:59:c6:e1:fc:06:6f:50:
         d0:b4:ed:ff:14:d6:74:64:04:ed:04:30:3f:77:57:1b:17:1e:
         99:c7:e4:b6:f2:61:4f:44:2d:d0:15:8c:15:31:69:68:93:f4:
         ee:76:83:7b:a5:8c:9a:74:63:d1:cc:20:f7:24:fd:69:8c:26:
         1d:ef:68:a9:9d:94:4d:86:63:42:19:d0:0a:b3:60:6d:0b:fc:
         20:9f:67:d4:64:6f:52:e9:ec:e9:5c:6f:03:08:d4:e0:33:23:
         71:e8:8d:7f:5f:46:57:56:ae:fb:06:ed:4b:86:d4:39:07:43:
         26:c8:d1:59:11:40:8e:64:b5:f6:c2:26:64:1b:b6:88:a4:9e:
         65:8d:24:56:d5:69:67:ea:45:c9:7c:9a:09:54:3b:34:24:0b:
         ef:1d:1f:d6:aa:42:cf:47:2c:ff:12:20:c9:5d:86:a2:51:16:
         cf:7f:ca:a1:90:29:b2:4d:c8:81:64:69:4c:c8:03:1d:24:3c:
         7a:9c:09:47:59:cf:63:70:7a:51:ea:87:3b:4d:42:14:69:61:
         e1:99:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:01 2025 by rpki-client