Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa
File:                     9b513f9d-f758-3993-b0d1-85f2305add2d.roa (raw, json)
Hash identifier:          FTCfVO2BI+7S7kUeRf/9zNYL+vzuWvnq53Mar4a2SfA=
Subject key identifier:   C6:D0:AF:6A:42:D0:53:7A:A7:F1:95:56:A7:24:3E:02:F1:D5:5D:69
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F4328584A427583DB076197100A80B240
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     53486
IP address blocks:        68.71.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:83:db:07:61:97:10:0a:80:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=77be12a5-ba7e-43a7-87ef-c2c004e1a3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:b1:2f:5a:a4:57:5c:96:ce:5d:8e:a4:b4:
                    4c:79:40:49:71:94:30:91:64:ec:00:8e:60:38:e4:
                    c3:e0:ef:3d:df:27:10:5c:75:f9:cb:72:af:49:2d:
                    84:e4:b4:db:6a:99:bb:4d:05:10:9a:f6:aa:a4:3b:
                    b6:5f:bc:d3:7e:7b:f2:96:45:49:4f:e1:17:74:7a:
                    7d:e6:f2:f3:a6:fc:bc:fe:60:bc:33:93:19:d4:14:
                    bd:fb:83:c0:8e:03:b0:d7:87:fc:7f:70:95:b5:2e:
                    28:ec:84:04:5a:1d:e0:03:24:1f:ae:d4:dd:f3:d2:
                    55:28:c0:e6:46:e8:33:29:67:8b:24:ad:3b:d6:c8:
                    93:75:ad:79:bc:f2:8e:49:23:08:b3:bd:90:9a:17:
                    4a:ef:08:fa:73:fb:b7:14:da:b4:8d:64:f8:d6:73:
                    de:30:60:84:d5:1f:48:c6:47:c0:79:bd:59:89:ec:
                    b4:32:c4:2e:f4:8b:44:ae:c9:73:6a:14:b2:a8:8f:
                    7a:f1:86:10:5c:32:a9:03:c0:b4:d9:6a:1f:c7:2f:
                    09:8a:f1:5a:af:27:be:e4:46:a5:75:cd:67:32:68:
                    c7:03:e9:48:00:0a:b8:6f:47:62:c5:49:78:f2:b2:
                    46:dd:0f:8f:56:fe:69:3e:60:10:82:d2:b2:7e:19:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:AF:6A:42:D0:53:7A:A7:F1:95:56:A7:24:3E:02:F1:D5:5D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:a8:64:f7:61:e4:20:48:b9:71:1c:0b:4f:dd:f8:bd:25:
         7c:e4:6c:b7:70:6e:11:3c:56:f4:b2:06:03:85:5c:92:67:40:
         b0:b6:4f:1c:b5:07:93:c0:c9:14:c2:45:67:0a:34:13:25:ac:
         05:df:02:fd:79:f7:69:cc:48:f9:ee:0d:8c:74:37:aa:fa:c2:
         ee:39:18:55:b3:d9:51:7f:7a:3d:33:f1:93:d9:db:74:e7:95:
         4a:ad:ca:5f:30:80:2b:77:10:d9:4b:cc:42:d1:80:28:e4:a9:
         c6:1a:83:b0:ec:82:0f:fe:86:21:a2:02:66:7c:14:f6:76:d9:
         e1:ca:e9:f6:d2:f8:20:80:28:a2:c0:9e:e0:14:c0:a2:5e:bb:
         41:cc:ff:91:63:b8:8d:f7:c1:e7:f0:cc:97:6d:a7:62:df:d4:
         5c:37:9f:86:1b:f5:4f:66:e8:11:b3:19:27:3c:9c:ee:33:bf:
         e3:74:00:84:be:52:68:28:17:40:1c:3f:4a:d4:b7:1c:87:e0:
         1c:c3:5e:a4:73:0e:d1:79:bd:2b:59:16:b1:04:fd:40:78:1c:
         ad:19:89:1f:cc:7d:d2:dc:b2:6a:71:8b:55:e3:df:5d:9b:07:
         2b:fc:e6:22:8e:57:4b:fb:c1:e5:92:c9:bc:c2:b5:73:ca:b6:
         fd:02:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:01:32 2025 by rpki-client