Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa
File:                     9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa (raw, json)
Hash identifier:          RNMaZfWCIxx/fLA5DkRJlME2W6TdnIfPHsJ1Jvp7L8I=
Subject key identifier:   9B:68:69:CC:2B:40:76:5F:FE:48:D2:F7:A4:30:B9:A4:37:BA:0B:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCA3D99B664B610EC76F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.59.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:a3:d9:9b:66:4b:61:0e:c7:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2842f782-197b-47df-870a-6350f4d9107a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:82:fa:c3:e3:3e:a9:04:8d:12:a0:10:8a:
                    c3:cf:b9:89:14:14:dc:08:30:ef:d3:30:80:ff:9d:
                    14:9f:3b:76:3f:a7:0a:04:87:84:12:0e:d9:c9:90:
                    41:93:95:53:73:a6:ef:c1:f0:43:04:3a:42:48:8c:
                    78:fa:52:6f:79:51:f1:97:18:16:62:ed:12:7e:1c:
                    9b:f0:02:89:04:d9:1f:a1:f0:d4:46:5d:88:cd:13:
                    23:f9:c8:2b:e4:d7:ce:ad:c1:68:61:cd:37:80:d3:
                    40:87:63:5c:0a:40:23:a4:21:c2:54:a4:6b:94:c0:
                    cc:58:6b:ee:25:f1:ef:27:d2:d7:90:1a:38:f1:ec:
                    91:4e:e4:ba:38:3a:2b:1e:a4:b4:1d:17:bb:05:9b:
                    be:e9:ed:d5:86:44:e5:4b:eb:d7:1c:28:ad:e7:83:
                    72:1b:c4:65:c1:f1:d2:68:d3:b7:94:57:ab:0a:f9:
                    2e:44:53:96:bf:26:d8:0e:da:e2:61:b3:0b:aa:34:
                    0e:e0:bd:ce:60:e3:7c:bd:84:d9:73:2a:70:95:c3:
                    d6:91:a0:6f:8b:87:03:01:33:05:ea:5d:11:b0:09:
                    03:46:08:d3:35:1c:1f:0a:65:bb:47:b2:9a:5e:4b:
                    94:d5:49:37:b4:bb:61:b9:d3:91:fe:79:3b:3f:b4:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:69:CC:2B:40:76:5F:FE:48:D2:F7:A4:30:B9:A4:37:BA:0B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9be0bf9c-9731-36b4-b0ec-bf1430973a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:4b:99:88:a4:a1:4a:94:6b:e4:ba:83:e0:1a:af:bf:8e:07:
         93:71:3b:8a:12:e9:f5:b1:f2:e5:de:73:60:39:5b:83:3d:31:
         a7:d0:30:b4:6a:cd:61:3b:20:25:f2:fc:d7:b8:2e:fd:7d:55:
         da:78:fc:47:7b:1b:0b:92:84:16:28:b3:d0:a0:55:fc:47:09:
         0a:28:8c:21:c1:2a:eb:32:11:6f:47:fc:96:9b:34:6c:6b:6f:
         58:28:43:ed:fa:b8:27:a5:72:0a:7e:a7:ab:b9:8f:e2:ac:68:
         22:43:b8:61:55:88:19:cc:89:95:fb:67:46:16:46:cb:c8:35:
         6a:29:ff:4f:20:9f:10:e7:8a:7c:28:a0:4f:b6:3c:2b:13:82:
         74:e0:3d:82:fd:3e:4d:68:55:d9:e3:af:8e:49:5d:7d:45:cb:
         22:3a:34:3f:4e:26:2d:5b:2d:8c:18:c1:52:18:6f:81:97:71:
         37:b9:33:de:bd:32:d6:af:3b:a1:0f:ff:32:bd:ec:ce:0d:5e:
         2d:eb:ff:0c:28:d3:d4:cf:e8:ed:db:0a:77:7a:94:60:8a:fd:
         53:6e:47:06:ba:7d:66:0a:dc:21:79:b2:91:4f:cf:e9:c1:08:
         38:25:4d:ac:15:bd:97:1f:07:b2:81:80:3c:d8:e4:17:58:73:
         26:41:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:44 2025 by rpki-client