Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b5e27d9-426b-3dd6-970c-df370339ac7e.roa
File:                     6b5e27d9-426b-3dd6-970c-df370339ac7e.roa (raw, json)
Hash identifier:          YAS1jhbBe3zvsl8O69pw6UzIJdG9S8TlT07oopl+uAg=
Subject key identifier:   AB:C5:93:2B:14:8D:CC:5B:35:DE:44:02:E4:21:70:35:B5:0D:9A:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCEE0DE30501239CCD5140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b5e27d9-426b-3dd6-970c-df370339ac7e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     20214
IP address blocks:        67.191.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:ee:0d:e3:05:01:23:9c:cd:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1801a9ff-95d7-450d-bfae-42427d68103b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:89:49:cb:3f:ca:22:81:34:16:2b:92:04:
                    2e:21:04:fc:9b:0f:98:16:01:9c:3a:b5:59:62:b0:
                    88:a3:28:a4:e0:3c:5d:7e:d9:28:f1:d9:dc:6e:26:
                    59:f6:a0:93:ed:99:62:46:9d:2b:49:97:c1:a6:74:
                    02:07:29:92:f0:4d:e0:0a:47:21:7b:d1:67:c5:23:
                    1c:ce:12:a4:14:cb:af:22:c3:9f:e6:66:84:4f:06:
                    10:9c:64:65:4d:2c:b1:eb:6d:a4:48:e6:f5:18:40:
                    0f:85:e7:f7:30:3d:82:8a:b1:db:30:76:c4:56:52:
                    32:9e:26:54:cd:a7:0a:46:26:7e:a0:bd:ee:73:41:
                    cb:fa:52:1b:2e:94:45:af:b7:00:86:de:af:27:f3:
                    eb:01:be:49:01:8e:19:f8:39:54:a4:08:fb:6c:2d:
                    9f:f0:dc:87:e3:c5:00:57:86:1e:da:27:5b:a6:cd:
                    80:70:c5:91:a1:78:a5:b3:e8:e2:5f:f2:10:d8:2d:
                    06:b4:18:25:b0:fd:4c:72:1b:10:be:2c:fc:6e:c0:
                    8b:12:c8:24:7b:e2:6b:6e:87:8e:da:ac:86:03:0b:
                    ca:07:d5:4e:35:85:40:6e:0d:a8:3a:a5:d0:ac:5c:
                    ed:ff:cd:92:00:c0:0e:ad:ab:25:37:3b:f2:3b:a6:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C5:93:2B:14:8D:CC:5B:35:DE:44:02:E4:21:70:35:B5:0D:9A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b5e27d9-426b-3dd6-970c-df370339ac7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:30:ad:99:bd:3f:00:98:17:15:94:7a:4c:94:22:16:15:
         b1:59:8e:0b:7e:cb:92:11:9f:24:3f:0e:fc:53:cd:b1:7b:93:
         8c:a8:14:bf:a3:c9:a0:79:d9:dd:04:7a:fa:fa:b4:c9:ec:10:
         d1:f5:35:ef:2b:bd:00:9c:ad:11:4a:70:f2:90:6b:ff:36:10:
         20:08:82:0f:a5:1a:ce:e0:df:ed:4e:cc:2e:d9:2d:80:7e:48:
         d8:97:eb:5c:d5:da:95:fb:90:8b:2b:f3:08:f2:02:2b:59:0b:
         9d:d5:5d:f3:f5:cd:df:21:9d:45:f2:98:e3:f7:dc:15:b2:81:
         ea:fe:42:4e:df:d4:0f:9e:12:50:c1:16:07:2f:b2:a7:da:25:
         7d:b1:48:30:74:54:7c:98:cb:46:f0:55:67:b1:1e:65:f1:c5:
         29:54:80:33:db:bc:28:7b:ae:3e:15:55:ff:dd:bb:56:77:b9:
         93:80:8a:02:df:73:e9:09:20:7f:36:8a:e3:ee:bc:c0:01:59:
         c2:18:0d:bb:bf:87:01:64:91:49:fc:5d:55:81:a5:70:ff:e2:
         f0:55:6c:6c:2b:48:cc:40:13:5e:9a:40:84:b6:e0:8a:e1:76:
         12:df:6e:a5:09:26:28:b2:db:84:75:c7:ff:ed:66:0c:67:d6:
         48:eb:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:35:14 2025 by rpki-client