Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/681ff5f8-351d-3219-b2e9-557253daacdf.roa
File:                     681ff5f8-351d-3219-b2e9-557253daacdf.roa (raw, json)
Hash identifier:          +OmEvINftBZ6sFwhU9Q61YEWlSvgcES/HA99+YZxCno=
Subject key identifier:   3B:D2:F7:88:34:41:16:D0:47:B3:87:BB:7D:28:4F:A2:50:31:A2:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07E56440D916958B489F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/681ff5f8-351d-3219-b2e9-557253daacdf.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        68.39.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:e5:64:40:d9:16:95:8b:48:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=42d6d1ae-14d9-459b-b7c6-79c88661545c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:bc:4d:e6:6c:04:9f:70:e8:32:32:22:11:
                    6f:9b:0d:6c:76:66:14:4b:41:b7:8d:9d:6b:2a:72:
                    03:2e:e9:f1:1d:d9:55:8b:d9:9e:cf:09:fc:f5:29:
                    cd:4d:28:bf:cb:56:21:c5:1c:3c:1a:b5:02:95:e2:
                    ce:dc:6f:2a:42:e1:d8:ee:24:1c:d3:85:eb:d8:83:
                    c6:62:78:e3:4f:8e:b8:35:01:61:d7:9a:09:db:da:
                    bb:ac:63:6a:db:36:f1:a4:84:14:8e:87:a8:e7:e0:
                    c6:74:07:47:c5:a1:ef:06:da:dc:69:36:95:6f:c5:
                    00:0b:b1:bc:c6:6d:3a:58:a5:20:0f:f4:67:61:c6:
                    7a:9a:c3:35:c9:da:32:b2:74:f3:91:48:5b:53:14:
                    a4:b3:a7:b2:7b:aa:24:29:5e:b4:80:a0:47:01:2d:
                    b2:9a:69:49:ac:32:ca:cd:8e:f6:81:21:24:2f:82:
                    22:63:cd:b7:ed:4c:e4:fc:f5:a3:d8:42:57:4d:b3:
                    c6:b2:4b:14:c0:a7:f7:1b:be:b5:04:62:31:13:df:
                    a5:0b:ba:54:eb:a6:3d:37:18:e0:e4:9f:66:c8:a5:
                    53:3c:d0:f7:7a:9b:67:1c:db:86:df:87:12:cd:c0:
                    e4:21:ee:c9:b8:ff:e0:97:94:f6:ef:2c:00:7f:c0:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D2:F7:88:34:41:16:D0:47:B3:87:BB:7D:28:4F:A2:50:31:A2:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/681ff5f8-351d-3219-b2e9-557253daacdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.39.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8a:68:f5:68:16:bf:b0:5c:7c:9d:7f:a0:99:56:ca:d6:78:
         95:cc:97:19:ea:f8:3e:3f:9d:e2:ee:88:6a:05:b6:66:d8:be:
         b4:c4:01:37:8b:fd:7d:82:d4:79:c4:1b:ba:25:61:99:e0:a8:
         eb:35:d7:7d:2e:2c:de:fe:ff:0d:c8:2d:5d:bf:c5:26:1e:36:
         0e:4a:5f:d2:09:45:19:a6:c1:49:4e:90:a8:0c:10:0d:0a:ee:
         b5:ed:1a:3c:2a:b1:e6:b8:63:7b:07:bd:20:63:9f:31:fd:3b:
         6f:99:45:58:a8:b0:53:a5:e4:60:dd:a0:a9:ef:7a:3a:25:d0:
         bb:30:01:f5:e2:67:a1:05:7e:22:de:42:17:ec:ac:3e:a8:ff:
         ac:90:fe:a0:12:69:b3:39:ae:49:0d:42:22:0d:d3:f0:fa:2f:
         69:90:8b:c0:b9:5c:66:0b:7d:30:4a:99:12:bc:49:09:8b:49:
         12:e9:ef:99:ba:f3:69:90:41:37:31:cf:4c:b4:82:45:7f:e1:
         73:e5:3f:10:f8:b5:a6:40:79:9a:32:50:ee:be:46:e7:63:21:
         8e:c0:bf:e6:ed:bc:ab:a7:84:de:45:2d:5c:2b:57:d5:cf:1f:
         3c:5c:89:c0:01:72:16:ab:d8:fd:84:a4:e6:0e:92:ab:98:97:
         56:86:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:13:38 2025 by rpki-client