Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4250b94e-4440-3c14-a239-54c51d607216.roa
File:                     4250b94e-4440-3c14-a239-54c51d607216.roa (raw, json)
Hash identifier:          tniakBxLXsqBXpcpLVGG/dQqye9f6wIrIH1PpTYoHIk=
Subject key identifier:   48:F7:15:EC:9D:3E:FC:E1:86:BB:C0:B3:98:68:21:6F:E6:92:1A:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C073A95446F9C5FAD2979C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4250b94e-4440-3c14-a239-54c51d607216.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        174.52.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:3a:95:44:6f:9c:5f:ad:29:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=167b88ba-1590-4526-a152-340414547dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:84:08:7a:3f:8f:09:43:73:27:11:53:fe:f9:
                    25:f4:7f:e3:08:54:c6:d2:38:83:3f:35:66:1b:de:
                    e1:ee:0b:d4:ab:0b:d6:6d:6c:89:a2:f9:22:0c:21:
                    24:35:c9:94:62:de:8a:51:2e:88:d1:ab:6a:c5:3e:
                    fb:2e:0c:97:d9:fe:a5:69:6d:66:22:92:ee:98:0c:
                    74:81:a5:f8:7d:b7:3e:d4:dd:a9:e5:b7:34:60:7b:
                    69:4a:8c:ba:96:da:c7:4d:9a:34:e4:c4:67:f8:8f:
                    a8:90:e4:81:6d:22:a3:77:94:ed:0b:74:18:02:17:
                    85:49:c7:f3:0c:09:6e:f7:64:a4:75:b6:78:a1:ad:
                    1a:f6:88:ae:9b:98:c6:40:01:65:dd:30:5e:c9:2c:
                    bc:77:8f:81:0c:f8:61:b4:0e:01:b6:55:96:30:80:
                    77:bc:ed:01:f4:55:62:17:c4:54:41:99:6c:5c:fc:
                    83:f1:82:fd:81:83:7f:44:4e:f3:53:df:17:9c:86:
                    78:dd:8b:05:36:ea:a5:67:17:dc:48:15:7b:a3:7a:
                    01:f8:14:ee:fa:49:84:45:83:5b:e3:87:4b:af:d7:
                    bb:a8:50:c4:e7:69:32:cc:bb:c9:d2:96:4b:92:b4:
                    9e:42:b6:a5:4e:cf:6a:fe:a4:6a:21:ea:ab:55:07:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:15:EC:9D:3E:FC:E1:86:BB:C0:B3:98:68:21:6F:E6:92:1A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4250b94e-4440-3c14-a239-54c51d607216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:cf:71:31:46:df:64:65:b4:7f:c5:49:32:71:c2:7f:a6:
         55:6b:51:3e:ef:a2:a7:70:f0:d4:2b:53:b2:3c:9c:25:b6:02:
         0f:ac:49:b9:26:85:4c:ce:e5:75:a8:42:91:2d:45:e6:f9:75:
         9d:31:20:a5:02:37:65:43:e2:ed:f5:69:c5:a0:a8:86:73:f2:
         77:0a:5b:1e:55:b6:42:17:49:3a:d0:bb:8f:27:1b:85:4d:04:
         ba:e2:d4:2f:e4:d9:35:1c:61:7d:30:1c:5d:80:fe:28:66:30:
         95:40:5f:27:bc:12:31:32:9c:b6:66:41:b6:8c:f3:68:96:3d:
         ed:1c:e9:e0:d7:be:b3:e5:8a:36:34:30:01:d2:8a:9e:66:ec:
         b2:d9:0b:ed:c8:ba:16:61:f8:17:84:b6:3f:38:c0:f7:fb:11:
         28:dd:d2:82:b9:e4:e2:d3:cc:33:dd:c4:68:14:77:0f:25:34:
         cb:ea:b4:d8:13:d2:44:f5:7c:8c:6b:2c:0e:6a:8c:2a:b2:6a:
         cc:02:cb:13:43:02:c5:d4:17:5e:53:99:72:c7:b1:cc:83:7a:
         0f:d9:a9:92:62:c6:a6:81:78:01:86:75:da:6c:ea:db:69:de:
         bb:3b:2b:4a:dd:0a:60:dc:62:e5:65:4f:15:96:0d:f9:45:4c:
         c2:dd:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:59:45 2025 by rpki-client