Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa
File:                     8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa (raw, json)
Hash identifier:          m7VTVpJv9fxaIBnKilkrU+5GkvHbhjYK1vr8FqiRzRQ=
Subject key identifier:   D8:7A:FC:3D:5E:7D:88:5B:FF:36:1B:F3:22:BC:6C:10:10:41:59:5B
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584AECC125F1D4CE0DD311EAE800
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     45396
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:25:f1:d4:ce:0d:d3:11:ea:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e94d1987-b3c6-4780-b3bd-ac28f74714b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:ab:72:be:31:5a:6b:3f:77:03:e9:c3:4e:
                    94:63:cb:0c:61:6c:84:85:5a:a5:fd:ed:da:e8:0e:
                    ae:89:be:de:c6:a5:e7:a6:1a:db:fa:9f:7d:02:1a:
                    0d:4b:b4:56:85:3b:b6:42:fa:54:79:82:d0:4b:ef:
                    78:fc:f6:0d:64:3a:6d:f6:96:95:a8:aa:dd:8b:ec:
                    d7:c2:75:4a:cd:9c:8b:f4:ae:a0:fb:18:96:0b:72:
                    87:09:39:36:5f:c1:60:1e:2e:ef:13:d3:cb:fa:ca:
                    86:90:93:03:60:32:00:45:68:dd:bd:05:99:7a:87:
                    7a:95:b7:ab:95:66:0c:1e:d8:28:7c:62:53:33:ac:
                    9d:96:7b:d2:c0:8b:f0:c7:a5:1f:f5:ab:b3:a1:01:
                    59:af:75:2a:47:40:01:eb:a0:22:b6:ee:ae:41:15:
                    3f:4a:28:d1:4b:eb:d9:40:08:1e:7a:0f:1b:87:3f:
                    fc:1e:88:af:5b:d2:14:95:03:fb:f5:d5:9d:77:2b:
                    41:67:b1:da:c4:a6:26:05:a4:1e:b0:4a:06:73:7f:
                    c0:59:b2:22:8d:f7:2b:a2:2f:2f:87:3a:8d:60:de:
                    5a:53:e0:88:07:27:86:50:fa:9c:e7:f0:38:53:a0:
                    84:7d:6f:4e:96:f0:82:49:aa:08:dc:52:36:ca:65:
                    7d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7A:FC:3D:5E:7D:88:5B:FF:36:1B:F3:22:BC:6C:10:10:41:59:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:34:9e:6c:0d:d1:cc:09:72:1c:1e:4e:dd:77:4d:f8:17:a8:
         eb:3b:4e:61:2a:a5:75:c3:48:28:27:b3:84:f6:ee:dd:ee:19:
         4a:53:2b:3b:9c:74:d7:d6:a6:e6:7c:67:1f:ea:89:bf:16:16:
         9c:a9:a1:ee:7c:ec:1f:75:1a:0e:59:03:a2:ea:7c:f7:cb:f5:
         4a:2e:28:26:ed:08:de:7d:f7:94:2b:2d:61:be:51:88:47:e3:
         8f:f6:ac:30:02:97:f2:1d:27:2f:e0:a1:ab:f2:e4:3d:3e:8f:
         55:f9:a2:6b:38:bf:9d:36:e0:87:7f:76:f3:d5:0e:bb:2d:7b:
         33:bb:71:b6:0e:e8:f9:1d:27:f7:24:af:9e:6a:87:b5:f2:6a:
         dd:59:87:af:fe:a9:c3:f8:e5:16:ad:c2:73:ea:d3:20:33:60:
         1d:91:23:d7:cc:54:5d:93:c7:57:63:58:d3:f4:22:d9:09:d0:
         70:84:5c:4f:7d:a9:82:ee:50:cf:ee:ea:4d:28:48:35:37:3e:
         f2:81:03:32:1f:d4:2e:f4:29:0d:89:94:9a:63:39:98:a3:81:
         d7:5e:88:86:7d:b7:ed:77:a7:ff:8b:6f:ef:51:90:63:b2:a7:
         b8:54:f3:83:f9:73:0a:b6:d5:6f:b8:db:7e:70:ab:b4:e8:df:
         03:3d:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:32 2025 by rpki-client