Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19943833-573d-3b2e-9617-60b673750adb.roa
File:                     19943833-573d-3b2e-9617-60b673750adb.roa (raw, json)
Hash identifier:          LhkOqAfVnh/cgG1N2EMbcdu+krqSkofDT11abNWals0=
Subject key identifier:   57:3C:C2:F8:41:C1:2C:DB:AB:2E:3D:C9:AC:01:38:B8:53:20:1D:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF4EDE2F6CCC9AFECCB800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19943833-573d-3b2e-9617-60b673750adb.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.51.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:4e:de:2f:6c:cc:9a:fe:cc:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6161928a-d7b5-49d6-9101-10417746673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:7d:47:4a:70:ca:f4:5d:00:54:ba:59:cd:
                    83:ff:58:6d:fd:4a:50:92:ec:a7:08:88:6a:49:01:
                    e2:f2:df:33:24:c7:00:31:1a:b2:ec:9a:38:e2:d4:
                    70:04:bf:44:a5:b4:f3:74:ab:7f:3b:a9:55:d9:68:
                    6b:df:32:e8:7b:11:47:a9:a5:6c:b2:cc:d9:c7:89:
                    b9:9e:4f:7d:60:f5:ea:6e:53:e8:98:63:06:09:73:
                    0e:43:53:10:4e:b1:f8:48:58:2d:30:2f:cd:f2:88:
                    48:28:06:8e:1a:a8:d4:ed:f0:03:01:ca:7f:0d:08:
                    35:1d:67:5f:9f:d2:f9:bc:01:90:a0:f1:9c:2b:a9:
                    88:7e:95:8a:02:a3:d9:c2:21:3d:22:a5:7a:9f:9c:
                    a7:bf:f5:3c:35:14:cc:af:db:84:74:7f:cc:74:51:
                    c1:69:cf:0d:0c:5c:29:06:95:2b:41:fb:74:ba:d5:
                    b3:e8:43:c3:38:f4:de:8c:7d:8e:d7:e6:a0:ef:30:
                    f2:a8:45:d9:9f:08:21:d8:40:e1:d9:ee:5d:a2:9b:
                    9e:e0:49:5f:37:51:34:c1:66:e3:2d:1c:f5:f6:55:
                    0c:f6:64:90:40:ef:bf:90:08:51:53:22:83:1e:fb:
                    87:2d:fb:67:b2:f7:af:76:76:fd:1f:fe:e3:a8:9d:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3C:C2:F8:41:C1:2C:DB:AB:2E:3D:C9:AC:01:38:B8:53:20:1D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19943833-573d-3b2e-9617-60b673750adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:19:bb:16:37:b2:be:5f:ca:f5:49:6d:e5:31:ec:d7:da:
         00:9d:cb:f5:b5:3f:a6:9a:86:da:8a:34:e3:0a:7d:b2:de:55:
         0f:7d:bc:45:de:1d:ff:7f:46:3b:5a:80:43:8f:55:04:93:5c:
         19:e2:dd:11:9c:b1:7e:a2:77:83:95:9c:9d:51:f0:0d:4a:ad:
         5a:26:d9:dc:7c:c9:29:65:6a:67:f0:93:22:7d:32:81:aa:ae:
         ee:b0:64:74:cd:f2:b4:5e:31:87:da:74:df:cf:bf:b2:d4:05:
         48:29:0c:1f:15:61:be:3e:bc:6c:01:c0:e3:ac:90:1b:9f:e8:
         57:a1:51:c3:70:07:19:b7:45:ab:59:55:d2:ed:e2:f7:55:aa:
         e8:09:da:41:82:da:06:50:48:63:b0:18:5e:96:89:d8:dc:35:
         84:f7:ac:67:26:d7:64:25:41:d1:a2:40:34:02:4b:06:4a:14:
         03:6a:c6:93:26:dc:3d:f7:9c:e8:8b:b2:7d:16:80:12:38:b9:
         97:25:21:e7:59:4e:0f:e2:01:f4:4e:c1:9a:e3:4b:5a:01:7e:
         2d:1a:66:c4:0b:16:03:a5:32:8f:ec:98:71:03:86:b3:88:1f:
         1b:7f:4a:72:5a:b2:f5:09:54:26:4c:67:a7:34:65:6f:8e:87:
         1b:07:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:11 2025 by rpki-client