Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1870fc-b438-3571-b625-fee7bcd07e61.roa
File:                     1e1870fc-b438-3571-b625-fee7bcd07e61.roa (raw, json)
Hash identifier:          b+YPwvaTAK4JhtvHf3wRR0Mwmj9cGj5UwIOs7ypKL44=
Subject key identifier:   5D:FE:67:06:12:83:6D:71:D5:FF:64:54:28:F3:69:B4:CA:11:8C:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430ACB4CF80D11494993D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1870fc-b438-3571-b625-fee7bcd07e61.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.49.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:ac:b4:cf:80:d1:14:94:99:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f2b8ffb6-8334-499f-aa02-f13bda35f362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:cf:e7:55:5a:ae:e3:18:3c:1e:03:a0:7e:
                    6a:83:20:f7:00:6c:d7:4c:17:09:af:d1:e7:5c:b7:
                    f7:36:b6:c6:6c:f8:0a:6c:66:fd:ac:06:97:81:fd:
                    78:3a:6d:d5:d8:8d:62:f7:c7:a2:be:d6:7c:fb:32:
                    71:f3:24:94:23:1c:f5:4f:c2:83:95:bd:6e:36:07:
                    ee:33:21:28:8e:95:18:a8:37:07:30:17:3b:83:f1:
                    b9:a9:2d:74:6c:7c:fb:15:6b:91:d1:7f:a4:92:84:
                    02:88:f5:ed:c6:1b:33:da:e7:42:25:46:0f:56:f2:
                    72:76:e9:8d:f7:12:17:26:f4:eb:a9:16:a0:ce:d2:
                    1b:12:6c:d0:03:04:1f:ac:64:77:c9:01:c4:54:49:
                    8c:09:85:82:08:82:70:92:96:02:c7:00:f3:33:2c:
                    08:b3:c4:93:7b:74:71:f9:76:6c:99:f8:54:58:94:
                    2e:44:d4:d2:f0:c9:9e:c0:06:70:32:a8:6c:0d:f8:
                    35:79:80:bd:8c:24:c9:6d:8f:24:10:b4:3e:f5:64:
                    a9:08:9a:05:2a:d1:7a:4d:45:ae:e7:d8:41:4e:96:
                    07:04:1f:77:49:71:40:67:11:a6:5f:46:dc:f5:85:
                    35:7a:5f:9c:1f:be:59:8b:30:4f:68:18:87:9f:7a:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:67:06:12:83:6D:71:D5:FF:64:54:28:F3:69:B4:CA:11:8C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1870fc-b438-3571-b625-fee7bcd07e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:70:73:72:ae:06:ee:42:c6:4e:b8:49:45:94:c7:c3:02:
         36:b1:5f:b5:01:a5:af:e5:5f:dc:a6:ed:ab:2a:0a:2f:bf:e4:
         d0:71:6e:4f:fb:2e:e4:33:bc:c1:85:2a:8c:60:2d:78:d7:cf:
         66:3e:8e:4b:75:b4:a1:9a:3f:66:5a:8a:c1:19:96:3c:c9:10:
         f8:35:37:38:1d:b1:b5:e2:a5:f7:f8:01:f5:28:c8:af:db:46:
         52:e7:28:36:4b:40:14:27:0a:a6:4a:3a:40:d0:a5:26:d3:cb:
         20:23:bb:55:e2:d7:60:8b:7c:74:c0:21:8f:fa:be:d1:71:e6:
         a1:79:d1:cd:69:d1:e2:12:4b:00:c6:b3:cc:0a:0a:5d:e3:6e:
         22:86:ea:aa:d1:33:ab:e9:38:49:20:ab:49:4e:64:b7:39:a1:
         43:17:25:31:d4:f1:b3:77:02:b8:b5:11:50:40:31:e4:f4:e1:
         57:65:6a:ea:ee:4f:a7:88:98:2a:f1:69:83:a6:6b:9e:51:11:
         c8:dc:ea:c8:9b:c7:6e:32:c9:62:d5:65:a5:29:c7:f2:79:de:
         34:00:e6:23:ae:4a:fd:eb:e9:60:e8:08:d0:f7:12:bd:3b:f8:
         5d:49:03:bb:c4:c3:5e:f4:aa:53:f9:ef:de:f7:fa:a5:64:21:
         0f:20:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:57:21 2025 by rpki-client