Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425f84e2-c84d-3a8f-9b68-8aa0f377b330.roa
File:                     425f84e2-c84d-3a8f-9b68-8aa0f377b330.roa (raw, json)
Hash identifier:          ryIBVysBPqjhfe3XOki9h0diXvTkHVsHkmtWS7+sY7c=
Subject key identifier:   F1:D0:00:67:85:21:85:4E:29:6C:27:67:35:16:23:B1:C8:61:F8:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC99FCFE16563F781C3EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425f84e2-c84d-3a8f-9b68-8aa0f377b330.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.52.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:99:fc:fe:16:56:3f:78:1c:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=b794a35e-dd90-4cd6-83f0-b1ea06ce9441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:4a:9c:fb:9e:56:13:66:57:31:cf:93:66:
                    15:02:1a:d6:f8:f2:ac:fe:7b:7f:a8:81:e7:25:d1:
                    e6:06:d9:bc:46:a6:a0:93:46:1f:ae:b4:e1:af:69:
                    8b:d3:15:1a:45:6a:a7:67:df:7c:87:05:2a:73:cd:
                    3a:30:4b:e9:0e:95:fa:fd:18:a3:76:43:10:c3:e7:
                    c8:97:d2:f2:bf:7e:ee:9a:bc:02:a8:8f:fc:1b:2f:
                    6b:ce:b5:22:47:11:01:41:85:1e:eb:9f:0b:3e:4a:
                    41:af:28:b5:7d:6f:a5:f4:54:cd:2c:dd:98:36:7d:
                    f5:da:24:a9:a3:62:af:1b:1c:b8:5d:8e:d7:d6:95:
                    28:90:56:6f:82:2e:2a:ae:7d:84:8a:da:d7:fb:ca:
                    20:b9:fd:df:15:2a:dd:24:88:59:43:fa:72:51:f0:
                    81:81:19:76:41:8e:12:48:a4:36:63:a7:6e:7e:b3:
                    d1:a7:23:53:d6:57:89:e9:8b:89:60:af:c4:64:7a:
                    b9:13:e0:d7:5b:54:89:a6:a2:91:c0:47:97:dd:a0:
                    53:7e:b2:8c:58:99:3d:25:1a:9f:fe:d5:5f:29:61:
                    b4:7c:7f:f0:16:05:9e:b5:97:50:71:17:3d:56:98:
                    5d:c2:d3:b1:d3:4e:8d:32:a5:ba:95:1d:e8:87:e0:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:00:67:85:21:85:4E:29:6C:27:67:35:16:23:B1:C8:61:F8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425f84e2-c84d-3a8f-9b68-8aa0f377b330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:97:0b:ad:89:38:07:3f:08:a8:2a:a9:69:65:18:4e:58:d9:
         51:a1:ba:36:9d:0f:f1:6b:7d:27:4a:ea:ac:fd:66:ca:e5:11:
         5b:23:b2:77:03:04:cc:4d:21:9f:ad:ec:11:a4:4f:5b:75:91:
         92:6b:63:5e:55:41:5b:32:30:0f:55:ac:32:90:5b:b8:f6:ad:
         9d:59:de:96:d7:f3:cb:da:48:22:4c:b2:ea:b8:75:58:0a:6f:
         ba:5e:5c:7e:30:66:fa:a3:58:d6:47:45:34:40:7e:38:ff:40:
         c2:43:48:5e:8e:27:bd:23:71:18:e6:27:48:98:f5:a2:e5:6d:
         2c:52:cd:b5:d0:e8:7a:f1:3c:f0:aa:3b:12:a9:8b:f6:7b:f6:
         8c:22:b5:07:18:a9:8f:7e:61:c1:fa:20:45:d6:db:b5:99:80:
         74:de:d6:b4:c7:3e:23:35:de:41:d7:05:18:15:56:37:1f:e9:
         de:2a:53:5e:d7:43:d0:a2:8d:06:18:eb:cc:e8:5b:06:f6:88:
         b2:42:19:b4:7f:51:f2:55:e9:e0:18:e0:79:d2:0f:49:fa:17:
         11:5d:2f:85:5f:e1:3c:1d:39:fc:82:85:c8:2f:f4:3d:0f:e8:
         c1:1c:51:c9:8a:0f:77:d6:07:22:17:78:5e:b5:49:f3:1f:51:
         96:43:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:24:27 2025 by rpki-client