Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e6d504e-0fe3-37ce-b090-87ce898aae5b.roa
File:                     0e6d504e-0fe3-37ce-b090-87ce898aae5b.roa (raw, json)
Hash identifier:          PszMEl32I+fpvxYv1pnX/C1CclqUBH/aOG+9MWzeK6Q=
Subject key identifier:   59:E3:B3:B5:3B:51:99:7E:AE:E9:D9:03:A3:48:67:D6:7E:22:F2:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0D6B0C5A8BCC33FFBD000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e6d504e-0fe3-37ce-b090-87ce898aae5b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.45.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:d6:b0:c5:a8:bc:c3:3f:fb:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=7fa5720b-c85d-4881-b72a-8134ebf8b88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:f8:b8:c6:c6:f9:c6:5f:1c:2b:7a:e4:68:
                    26:28:1e:ef:ef:fe:3d:50:f1:9e:63:45:bb:a8:ad:
                    ec:0d:7b:49:fc:2c:d5:78:02:a8:c0:55:38:f4:e0:
                    2c:c5:d4:a6:ce:7e:93:6d:ea:ef:49:39:ae:63:6c:
                    06:2d:e5:54:b0:0f:f7:e1:a3:dc:2a:29:2f:20:4f:
                    54:e8:6d:fa:bf:ef:95:2a:18:ee:f8:f1:4a:e9:54:
                    97:a5:e7:ec:53:e3:5d:d1:1f:cc:5a:b7:13:41:ef:
                    af:fa:2b:5d:1d:ab:c5:33:35:da:5a:2d:41:36:f3:
                    ce:7f:ac:a3:f2:ee:23:d3:75:9a:96:e8:32:da:d6:
                    cc:9c:29:d2:e3:68:16:c1:af:04:e8:2c:ec:56:14:
                    06:99:2c:da:c5:66:7a:c4:2e:e1:71:8f:19:38:a0:
                    87:d3:e6:5a:fe:c4:af:e3:14:90:e9:e5:47:33:90:
                    14:be:a6:53:30:a3:a4:f1:ea:2b:d7:b5:67:88:06:
                    72:5a:29:e9:bc:1a:07:cc:ca:9f:0c:8c:72:dd:ad:
                    3a:80:8d:8e:a5:c9:4c:9a:2b:9d:e5:01:14:ad:d8:
                    58:86:21:99:c5:80:73:da:29:c3:3f:8d:9b:95:70:
                    ab:52:93:59:7e:77:09:00:26:71:02:d4:d0:06:9f:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E3:B3:B5:3B:51:99:7E:AE:E9:D9:03:A3:48:67:D6:7E:22:F2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e6d504e-0fe3-37ce-b090-87ce898aae5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:8d:8d:05:3e:4f:ee:ee:01:a0:b8:3e:f0:95:75:03:44:
         9d:af:ff:81:40:29:79:32:40:cb:52:ae:9a:86:5d:6a:83:2e:
         7f:6c:a1:f6:f7:74:bd:bb:63:b8:5f:62:67:d4:57:4d:23:2e:
         cd:bc:1d:18:cc:89:7d:34:8f:fd:00:28:74:12:2f:82:64:6f:
         5c:bd:d4:29:3b:d8:66:53:16:3f:4c:4e:d0:23:da:8f:56:22:
         0a:1d:bd:7d:4b:94:6f:21:b0:0f:0e:69:ba:78:f7:86:d6:1c:
         2c:a1:35:14:ef:3d:79:f2:e6:b0:c4:87:78:db:b3:8c:ad:cc:
         c3:b3:5b:37:62:98:78:da:a8:dc:0c:84:34:aa:0e:f7:9c:86:
         ae:9f:5b:a5:c5:ae:17:d6:25:54:f6:49:63:38:5d:c8:38:d9:
         e1:df:f1:89:b2:02:b3:1e:c7:e3:42:76:c1:27:ec:ef:66:4f:
         28:7e:27:0a:9e:0b:19:b5:20:3a:01:5c:2b:55:f2:8d:09:4e:
         b4:c4:4d:59:b3:fa:87:cb:89:c5:cd:14:2e:a5:ab:81:c0:19:
         d5:61:64:5f:a9:9d:96:df:76:07:13:6e:e6:aa:34:f9:e1:ee:
         7d:44:8f:80:d5:05:07:77:b1:f1:8f:36:e8:b8:3a:be:a9:e8:
         4f:81:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:45:56 2025 by rpki-client