Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/683871c0-32f2-3b08-ac25-0fd776096abf.roa
File:                     683871c0-32f2-3b08-ac25-0fd776096abf.roa (raw, json)
Hash identifier:          4owjPx0ijZR9MpaDPWicLm/s2db/R+6bTRBAqt1ax/c=
Subject key identifier:   68:DA:CA:8F:EB:E7:B1:F4:FE:7A:63:BF:3D:79:23:BA:45:55:01:AA
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849B57A314797FA15E80D05BE80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/683871c0-32f2-3b08-ac25-0fd776096abf.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     54113
IP address blocks:        199.27.76.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:31:47:97:fa:15:e8:0d:05:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=74b756bf-6292-47ba-9e5a-46170e79a7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:d6:78:9f:6f:79:f4:4d:bb:04:0f:83:17:
                    d5:53:93:d0:ea:05:8a:ae:ef:2c:b8:b9:20:5b:66:
                    41:30:73:70:3e:4e:12:39:16:84:fc:2d:64:4e:78:
                    b5:09:1c:9e:24:a7:fd:31:77:97:45:b9:29:60:50:
                    c4:0f:4e:b9:1f:c8:96:67:65:eb:07:f4:42:10:00:
                    2e:34:ab:3b:70:c2:ea:2d:38:97:22:d1:c2:d4:de:
                    fe:6b:4a:82:a3:00:31:77:4c:1a:bf:54:44:9f:fd:
                    58:09:36:57:d8:9a:36:6a:6c:bb:e2:b6:aa:4b:66:
                    6d:64:9e:8a:af:d6:90:46:e6:35:ff:9c:2c:58:66:
                    d4:a6:df:1e:7c:81:e8:c4:90:65:ac:4d:f0:35:e6:
                    1f:1c:ff:76:65:fc:a5:00:b9:0c:49:95:f4:c0:bd:
                    0d:dd:4f:2c:c9:d2:08:60:cd:9f:ed:4b:03:a9:b0:
                    83:a2:ec:bf:ef:26:23:64:f7:f8:45:7d:42:ae:38:
                    29:0d:60:40:bb:72:61:f8:0c:e1:bc:d8:21:e4:76:
                    0c:dc:55:99:72:7f:69:e8:7f:cf:c5:57:fc:d1:5a:
                    fc:2a:d7:72:e1:bd:9d:b5:4d:c2:e3:9e:3f:70:64:
                    28:32:ec:a4:57:6c:f9:4f:72:f7:da:85:af:94:70:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:CA:8F:EB:E7:B1:F4:FE:7A:63:BF:3D:79:23:BA:45:55:01:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/683871c0-32f2-3b08-ac25-0fd776096abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.76.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:be:f8:cf:f8:0c:6b:e7:75:42:55:6e:98:e9:5a:86:4a:ac:
         d0:92:54:6a:d0:33:c4:f5:05:4e:d1:2d:a4:3c:31:48:96:47:
         fe:11:24:75:aa:61:8e:c4:ba:36:f4:40:e1:55:ca:5e:81:22:
         ff:f6:dd:4b:0b:99:95:5f:ab:b0:d3:22:3a:f9:f4:a0:56:9d:
         db:19:e5:c3:01:fc:76:67:cd:e5:8e:14:94:db:5f:21:f3:1e:
         96:b7:b8:ef:26:0d:18:98:4f:b7:05:a0:0e:3b:b9:98:7f:1a:
         f2:f0:55:3c:f3:77:9f:b9:3c:e8:d4:05:8d:00:c3:2d:17:67:
         7f:51:b2:9d:33:f5:cb:14:be:2b:00:55:e8:9a:d2:27:7b:78:
         e6:ba:52:71:fe:32:23:77:78:e1:45:39:31:4e:9a:d5:41:1f:
         d7:89:41:5e:23:68:67:94:00:3b:53:7c:e3:c8:99:99:13:a0:
         e6:d1:c1:9a:83:da:48:3f:9f:ae:08:eb:ab:60:5f:76:f6:05:
         36:85:4a:65:a1:d6:a4:2a:85:30:a5:08:6b:4b:d6:c5:52:95:
         8b:3d:c7:4c:70:67:74:26:09:b7:5a:40:c5:2c:57:aa:8b:af:
         5e:45:0b:5a:6f:0a:be:bb:be:6e:d2:5d:3b:ff:9a:f3:ed:5b:
         c3:c8:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:16:02 2025 by rpki-client