Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/14096610-0170-36e7-a688-ec8c65858057.roa
File:                     14096610-0170-36e7-a688-ec8c65858057.roa (raw, json)
Hash identifier:          m2R4ALpqpYnXeVcepTceSCmbL/MmBtHUYcYeoCREKSM=
Subject key identifier:   C6:CF:7C:DC:5E:B9:82:2F:A0:6C:D5:F7:CE:27:BF:1A:AC:8C:3C:88
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B57A19D8AB0554DC0F059C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/14096610-0170-36e7-a688-ec8c65858057.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     7018
IP address blocks:        69.58.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:19:d8:ab:05:54:dc:0f:05:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=e8ed9aea-d2f6-4dc0-9471-0a68be010e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:c0:a1:6a:40:79:16:9c:b1:b5:16:fd:5f:
                    60:07:53:23:c9:55:24:11:9e:17:16:b1:f3:5a:18:
                    41:21:98:61:ae:c3:2c:29:c4:0c:5e:9b:25:68:ed:
                    15:40:ae:6f:02:bf:39:36:74:ea:29:63:fc:25:cb:
                    9b:6f:94:33:d7:40:86:f7:5b:cd:52:80:cc:c6:96:
                    23:81:cc:b9:33:e2:06:8a:ee:0c:ef:95:f8:7e:31:
                    7b:fc:c3:2b:8e:38:94:2e:72:23:76:ba:43:12:99:
                    e0:4a:9c:52:10:92:79:ff:6f:b0:58:04:a1:4e:29:
                    12:a3:9b:a7:d8:fd:fa:67:ea:0f:33:e3:9c:fb:8f:
                    a7:6a:be:53:6e:c4:b2:cf:a6:ab:69:05:de:44:c6:
                    b3:db:20:d4:ff:ff:ca:f8:0a:42:e5:fc:cf:1e:c8:
                    96:86:2d:6e:03:d9:2a:f3:72:84:f3:5a:6a:c4:ca:
                    50:46:8e:4e:6a:88:ab:c8:1f:c4:89:02:6a:c7:6d:
                    fd:64:82:e6:9e:16:4a:4d:c6:a1:4d:6e:81:f5:31:
                    f7:67:81:b0:3e:08:b6:d3:f3:61:fa:0d:b4:a1:ef:
                    60:47:75:5c:4f:ca:7e:2c:7d:3d:00:f3:1b:a4:e8:
                    3d:06:07:f0:57:fd:43:12:3f:68:00:f2:30:1b:9d:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:7C:DC:5E:B9:82:2F:A0:6C:D5:F7:CE:27:BF:1A:AC:8C:3C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/14096610-0170-36e7-a688-ec8c65858057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:80:ca:f5:55:25:43:58:f9:cb:6e:e1:98:90:25:29:9d:52:
         33:b4:88:ab:2b:d3:93:ea:1a:e4:46:bf:39:21:a3:e8:f1:bb:
         73:88:b0:6b:5d:dd:2f:03:32:57:3d:bc:cc:84:8c:32:50:eb:
         d3:62:92:99:17:53:c4:61:57:74:e7:13:91:b2:3b:47:de:41:
         38:b1:3c:21:70:32:dd:33:78:5f:8a:e4:77:b8:0d:84:d7:72:
         8e:a8:f4:1c:0c:19:b0:88:e8:54:43:ce:15:c9:3e:29:b8:68:
         6c:0e:d0:4d:aa:66:5f:c5:25:db:f6:96:45:c0:60:ba:dc:db:
         a7:0c:f9:7b:4c:3e:03:30:6f:a9:24:15:8c:87:16:a7:38:d9:
         b9:84:01:b1:05:62:27:53:11:e4:b4:fd:99:61:ad:4e:8b:cb:
         9f:4e:87:5f:fa:88:42:1e:75:11:f4:cf:ce:59:db:6f:b0:99:
         a7:69:75:4e:a9:cb:24:21:ef:50:83:6f:db:f5:44:2c:1d:71:
         9a:49:7f:cf:5c:39:e6:28:40:7e:c3:97:bf:d0:0a:b4:cc:99:
         fd:6d:19:d3:13:61:7b:43:c9:44:eb:71:9b:39:e2:79:8b:75:
         ee:d0:60:7b:7e:ea:39:1c:87:20:1e:9a:b4:59:28:ac:31:bd:
         6f:d1:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:14:14 2025 by rpki-client