Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d548b09-00d4-3a6f-86b3-1c4779fc273e.roa
File:                     6d548b09-00d4-3a6f-86b3-1c4779fc273e.roa (raw, json)
Hash identifier:          TFeo4ttNEWZilrz3Wij8W+aLnWhyw8Wz60JfG7fk65U=
Subject key identifier:   94:86:CD:9E:4A:CC:4D:70:C7:C9:A9:7B:54:22:9A:DA:8B:6F:95:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8A8DA586A7C61328555C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d548b09-00d4-3a6f-86b3-1c4779fc273e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        68.54.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:a8:da:58:6a:7c:61:32:85:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a9c3552c-ce7a-4aca-aa30-fd76787ce2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6d:ae:c3:88:bb:36:41:fa:f0:a1:cc:a2:f2:
                    ec:ac:3f:5d:5c:f6:5a:a2:de:0a:40:a0:33:20:53:
                    df:a5:69:39:c1:58:ac:d0:23:10:a4:3e:6b:ae:a2:
                    ec:b5:72:7f:46:60:eb:44:89:b4:2f:b2:14:6c:52:
                    a0:21:00:4d:b9:96:0a:c8:f1:f3:5a:fd:c0:7a:7f:
                    7c:74:46:36:7c:b0:d0:d2:10:28:c9:5c:6e:be:90:
                    bd:99:9b:35:0b:69:b8:fa:37:b7:d6:ea:df:27:78:
                    9f:79:da:1d:c5:8c:c6:72:e7:74:2f:c5:f9:54:36:
                    58:10:bd:1f:cf:2c:c8:95:fe:b2:f3:7c:33:76:27:
                    cb:28:20:89:20:6f:97:b1:3b:b3:a0:a0:ab:42:56:
                    be:85:17:14:c6:c5:67:e8:f1:bc:30:e7:4a:f4:27:
                    dc:d5:4f:65:38:54:91:5a:6f:4a:1f:9c:89:8c:d8:
                    56:f0:eb:2b:84:45:a7:40:81:61:8a:7e:69:99:18:
                    21:60:ba:b8:b6:8a:35:0a:f5:2e:77:62:c7:16:a9:
                    1e:1e:30:fd:70:21:4b:bb:e3:48:19:0d:cb:c9:1d:
                    5b:e5:00:5a:37:63:05:35:4a:22:1a:8b:ed:8a:b3:
                    15:38:4d:9a:ab:8c:e2:03:99:15:9c:4e:64:26:3d:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:86:CD:9E:4A:CC:4D:70:C7:C9:A9:7B:54:22:9A:DA:8B:6F:95:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d548b09-00d4-3a6f-86b3-1c4779fc273e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:3c:95:1a:3b:65:b6:7d:ea:f4:4f:a1:4a:f3:09:ce:dd:
         ef:b8:30:6b:78:09:08:7b:a8:a4:37:04:68:9b:77:de:85:05:
         f8:d6:34:0f:3c:4e:d9:cc:51:08:d6:b4:d7:5f:c3:ac:2c:81:
         34:92:69:ae:e7:81:d6:17:45:30:f5:a1:27:2e:13:b5:03:af:
         9c:d7:c0:8f:a3:79:2c:11:2d:20:68:10:8f:39:b5:81:6c:b2:
         e5:c6:43:9e:38:61:0a:0e:02:34:9e:f8:c4:12:fb:45:cd:7e:
         91:10:97:4f:c7:57:e2:82:ac:34:c1:a9:62:b2:d4:26:2a:df:
         2c:1c:65:16:bf:73:15:03:04:a5:8f:be:7c:3f:a3:9c:31:07:
         d6:69:72:e8:59:fb:e2:ab:1f:d0:40:0f:d5:b4:e9:16:91:d6:
         73:62:39:ad:2d:fd:7b:af:bb:51:1e:7a:09:68:20:5a:c4:b6:
         af:e7:a8:42:4f:3d:91:de:09:c2:cf:69:91:38:dd:a9:2a:4e:
         58:d0:c7:90:b8:02:00:22:0f:31:ff:dc:0e:63:2d:5d:ac:27:
         6b:9b:aa:d9:8b:3f:51:bb:14:7a:69:57:a1:c6:f0:53:06:a3:
         c8:cd:4d:39:d0:d3:ef:e9:6c:6e:36:8a:88:26:8a:f8:57:d1:
         ca:46:4c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:58 2025 by rpki-client