Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e120a7dc-4299-358a-9dda-66d35750d320.roa
File:                     e120a7dc-4299-358a-9dda-66d35750d320.roa (raw, json)
Hash identifier:          2y9Kz0hk4EaIE7Q+MUO8iLfNbcCCnbOsG56i+Ba9cxI=
Subject key identifier:   D5:D4:87:52:72:A3:10:04:62:BF:FB:8D:3E:76:4E:8B:E3:27:EE:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC448186E619AD1CA8045C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e120a7dc-4299-358a-9dda-66d35750d320.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        68.54.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:48:18:6e:61:9a:d1:ca:80:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=82291a59-762a-4c44-9e18-c816ec5aa748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:71:1a:9f:ed:14:42:2f:b1:fc:02:e5:df:
                    67:9a:e3:00:3d:d9:68:2e:93:fa:4f:00:53:8b:05:
                    50:27:9b:92:3f:d5:51:6a:7c:ab:3f:f3:11:09:02:
                    ce:a1:18:7b:62:a7:d3:95:f7:5a:e8:e3:3b:7e:79:
                    7a:a2:6f:a2:20:77:44:14:67:59:f5:2f:b4:0f:40:
                    57:05:44:0a:78:f6:0b:9b:ee:d0:d9:b7:e3:f4:3c:
                    9a:85:40:a7:99:30:8f:01:da:db:98:47:2e:d7:f3:
                    9d:8f:15:d6:20:48:9e:3e:3f:5a:3f:a7:95:5f:0a:
                    ac:de:f6:5a:93:86:b3:61:df:14:9e:b7:c6:1d:1c:
                    39:7d:fa:7f:ca:5a:68:ec:5e:03:03:c2:0e:31:cc:
                    3b:e2:f8:00:0d:09:0d:30:fe:5a:dd:6c:a6:85:66:
                    46:17:71:a4:b4:de:c0:bc:fa:68:74:e5:d0:d7:62:
                    0b:c7:13:61:c9:88:78:58:1c:88:59:b8:6c:78:9e:
                    4d:77:74:72:36:f1:19:ff:7d:22:68:ec:a4:98:49:
                    29:01:4a:49:6b:b0:99:6a:4f:6e:47:80:34:d9:93:
                    09:66:7a:48:67:3e:c7:48:0f:dc:9d:59:f4:8b:12:
                    30:01:88:af:ae:79:81:a9:89:a2:22:7f:ce:89:0a:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:87:52:72:A3:10:04:62:BF:FB:8D:3E:76:4E:8B:E3:27:EE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e120a7dc-4299-358a-9dda-66d35750d320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:3a:de:10:3e:32:20:d2:0d:ca:d3:b5:0e:e5:37:18:e2:
         2b:a6:8f:c6:37:f3:e2:aa:14:21:57:a8:4f:d1:95:23:78:a2:
         59:5d:20:a9:d7:fb:b7:55:6d:ce:6f:52:5c:b7:79:20:c1:12:
         3c:e4:b0:af:9b:de:e6:90:76:4b:b5:c8:b9:90:0d:b6:2c:a7:
         9e:27:92:ae:28:83:41:dc:28:5c:28:a2:24:d4:aa:e4:d6:d2:
         1e:67:ab:28:22:4b:fc:70:32:27:d5:37:76:48:a8:3d:ca:8b:
         49:7f:73:be:87:29:d5:19:d1:58:d4:e7:c2:65:76:30:68:72:
         dc:1c:d8:f4:40:80:14:88:46:61:dc:15:bd:f8:c3:d1:93:7f:
         99:ce:1a:9d:74:d5:e5:68:d3:06:02:b9:91:f3:88:02:df:4f:
         1d:c9:2b:af:00:e3:74:3a:fb:41:ce:a0:26:fe:5f:e1:ef:be:
         15:fc:a7:a4:aa:b4:ac:fe:f7:65:41:69:df:d3:9c:dd:8a:07:
         02:f4:e3:a3:e4:e6:a7:c7:4e:8e:99:82:92:04:f0:4e:f2:2d:
         eb:e9:cf:1a:49:69:07:99:87:bf:f6:0a:9d:7f:26:d1:39:ef:
         fa:28:2e:1c:30:14:68:cf:b5:ee:25:58:8b:d0:76:90:3d:63:
         d6:15:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:35:53 2025 by rpki-client