Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b879b07-c958-317f-8827-e68d48f0f097.roa
File:                     6b879b07-c958-317f-8827-e68d48f0f097.roa (raw, json)
Hash identifier:          EZauHEWriPpmSI9p/BNSEA194FzTqPR0BJlw2zCGQ1Y=
Subject key identifier:   C1:CD:67:84:D3:90:B7:22:C1:5A:C6:94:CF:02:0E:5F:9E:D3:20:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2373B3DA25C4D2889DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b879b07-c958-317f-8827-e68d48f0f097.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        68.45.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:37:3b:3d:a2:5c:4d:28:89:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=767dbfbe-9969-4bb1-9f73-8c7d69f54e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9f:9b:f9:85:e9:f3:9b:03:d4:f2:50:14:fa:
                    99:b1:e4:99:ba:02:2d:81:c8:04:b5:29:d6:32:70:
                    f1:bb:69:83:3c:d0:89:b3:b5:c1:71:48:cd:75:eb:
                    92:e3:06:0b:a0:c1:c7:e1:6f:e7:79:16:13:4a:a2:
                    22:18:bc:e4:00:a0:16:c2:c5:cc:3f:8d:06:ff:b6:
                    e6:d9:78:de:c0:7d:a9:10:2a:39:bc:b5:92:a6:cb:
                    e1:1c:8d:26:13:74:8b:76:7b:19:bc:ad:77:c0:a7:
                    29:22:eb:e1:e9:d5:c1:aa:13:2e:db:52:53:a0:48:
                    93:79:31:64:e8:75:fd:e2:e6:b9:a2:3d:b4:93:0b:
                    c3:e8:31:68:9f:3d:02:60:22:d5:91:de:57:54:94:
                    6c:56:76:13:88:e2:df:70:95:34:be:7e:c9:2e:5e:
                    cc:90:cc:40:52:ac:af:e0:01:d5:5c:2a:7d:e8:b7:
                    e6:5b:b9:30:b8:e7:42:d5:2a:64:e7:f8:55:43:d2:
                    99:20:64:64:e0:4f:32:ea:5c:8b:b7:60:e2:69:51:
                    09:ef:b5:42:df:f2:a9:d4:c0:27:1e:8c:68:3b:7c:
                    29:36:a6:92:f2:70:14:1d:f4:43:4e:84:e0:49:6c:
                    8b:85:58:0b:16:52:ea:0a:cc:13:41:26:17:48:2a:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CD:67:84:D3:90:B7:22:C1:5A:C6:94:CF:02:0E:5F:9E:D3:20:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b879b07-c958-317f-8827-e68d48f0f097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:32:78:ce:e5:62:7c:fd:59:2d:90:80:71:1e:99:03:ca:
         be:5f:58:26:27:e1:04:7d:dc:1e:ac:f3:21:89:e1:09:46:5d:
         be:e0:fe:0a:f7:f1:f1:ca:21:07:f8:66:84:10:ab:f4:9e:af:
         8e:a9:4a:25:3f:5f:bf:90:81:bf:00:93:cf:82:a7:0f:56:18:
         5a:16:7a:f2:73:63:54:d8:da:55:01:76:a1:f8:6a:8b:e3:81:
         ce:c7:0f:f8:ff:c5:0e:24:84:06:f0:22:93:98:44:ea:46:06:
         5e:cf:dc:ec:b0:5c:c2:05:0c:84:9c:a4:53:4d:b1:aa:78:5f:
         2b:13:f2:e3:ce:d6:a1:8f:24:c3:96:68:bb:c8:45:8d:89:bc:
         9a:ed:87:ef:c7:b3:e8:c5:1c:b3:f5:f6:6d:f6:3e:90:70:43:
         82:5e:17:c8:e0:ce:f4:d8:82:6e:fc:5a:f4:e3:7d:34:24:94:
         c6:0c:12:0e:db:1d:2b:cf:3a:c3:3f:43:f2:8b:2a:23:5a:ff:
         85:01:03:cf:1e:b5:f8:24:83:9f:fc:24:e7:08:af:5d:fd:28:
         03:e2:d2:ee:c9:b0:d1:6c:3a:92:e1:60:23:c9:66:bb:59:4b:
         4d:f6:21:de:07:85:54:c1:3e:80:5b:13:b7:d4:dd:a2:96:e4:
         f2:37:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:38:18 2025 by rpki-client