Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2da986be-4aa0-3b41-af2b-43d0c029d5ca.roa
File:                     2da986be-4aa0-3b41-af2b-43d0c029d5ca.roa (raw, json)
Hash identifier:          oMYyotZm7sho/DymyN45os8m3BMxb118/K4H5n8Spdw=
Subject key identifier:   D5:FC:18:C8:0A:50:22:3C:C8:E1:B1:A2:CA:DB:D8:CB:E4:F1:29:57
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A367079D51BA0A1384E03F900
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2da986be-4aa0-3b41-af2b-43d0c029d5ca.roa
Signing time:             Mon 16 Jun 2025 17:41:02 +0000
ROA not before:           Mon 16 Jun 2025 17:41:02 +0000
ROA not after:            Sun 14 Sep 2025 17:41:02 +0000
asID:                     46925
IP address blocks:        68.180.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:70:79:d5:1b:a0:a1:38:4e:03:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 16 17:41:02 2025 GMT
            Not After : Sep 14 17:41:02 2025 GMT
        Subject: CN=6c05965b-e503-4959-9fc4-38b3dd99c0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:32:be:e0:5b:e8:5f:5b:4c:36:6f:2f:e2:43:
                    d7:23:f7:45:11:eb:34:73:9d:96:e2:59:f1:6f:09:
                    48:86:cf:3e:1a:68:ba:24:68:be:74:e4:72:1a:d5:
                    ad:f8:19:ac:72:c4:14:cd:54:0c:27:15:17:e7:18:
                    bd:d1:b2:f7:9d:33:51:27:ca:53:26:ea:f2:9d:54:
                    a9:3c:48:1f:dd:19:97:a8:4e:b3:22:47:b1:20:e1:
                    e1:fa:f9:88:c2:5d:dd:71:0f:43:fc:b7:29:26:a1:
                    b9:94:c8:ed:f0:5c:20:cc:df:b2:d1:39:ca:04:9a:
                    cd:50:09:a4:45:1e:73:d8:ea:fa:b3:8f:16:94:9e:
                    bc:62:7d:72:71:dc:8f:2e:41:17:85:f6:a0:13:51:
                    d4:1d:f4:0c:c1:bd:a4:d7:cf:f9:10:63:1f:6c:29:
                    fd:d8:4d:6b:eb:e7:b5:4b:51:d7:a4:e8:a5:66:17:
                    3e:d1:ca:b9:d2:e8:dd:ab:66:9e:25:35:1f:00:f2:
                    d1:ce:2d:5c:39:0e:99:b9:b8:67:32:9a:9e:35:82:
                    d2:43:9d:c6:17:d4:88:32:ad:7b:5b:4f:6c:09:6b:
                    eb:bf:08:db:d6:6c:15:56:71:d7:df:66:15:5f:fc:
                    72:39:83:36:20:71:04:ed:6f:59:f8:09:90:0f:28:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FC:18:C8:0A:50:22:3C:C8:E1:B1:A2:CA:DB:D8:CB:E4:F1:29:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2da986be-4aa0-3b41-af2b-43d0c029d5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:62:d0:05:78:c1:18:00:1b:a0:26:82:b1:fa:ae:a3:08:4c:
         3a:57:9b:d0:09:94:1a:21:a3:e7:c0:76:fb:b4:89:7e:ab:48:
         b4:e2:ee:97:a7:d6:fd:9c:a8:86:08:cb:78:f6:4c:40:26:32:
         bf:26:67:af:3f:91:4a:77:08:16:98:cd:e9:77:14:d3:48:b1:
         21:04:d3:10:68:fe:ba:a4:c8:72:b8:2b:93:66:6f:83:11:7b:
         07:2d:78:dc:4e:bf:a1:29:10:a1:9d:f5:7d:c8:87:1f:35:6d:
         1b:27:36:63:5c:2f:1c:b2:90:cd:ae:21:41:8b:0b:97:df:4e:
         56:67:42:56:32:eb:bb:2c:d5:7e:86:27:b0:86:3f:4d:6d:92:
         cd:27:32:3c:d5:54:14:5e:61:da:5f:2c:52:c5:72:71:5d:e8:
         1a:34:83:18:0e:2e:ae:a9:21:13:40:9c:7e:69:40:0d:dd:49:
         f0:30:61:bc:f3:b5:d8:44:f6:32:e6:af:a3:18:ff:18:b0:ed:
         b0:9a:a9:7d:e6:20:98:8f:cb:fa:10:51:6d:d4:c2:8b:c9:5b:
         f4:c7:bf:77:a5:09:bb:56:3c:0f:75:2e:4e:33:7c:48:87:3a:
         c2:85:0b:ae:b9:a7:45:dd:21:d3:6c:b9:39:a7:56:4f:b0:83:
         39:61:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:14:06 2025 by rpki-client