Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d3f2e65-962f-30bc-b995-ea25684c6a8a.roa
File:                     6d3f2e65-962f-30bc-b995-ea25684c6a8a.roa (raw, json)
Hash identifier:          iWwTKtuzWYI4+kAiQ+VgKNegVjtZYj05nEHg9ZFEm2g=
Subject key identifier:   64:A1:6C:B1:22:DD:95:F0:4F:D3:5F:50:32:0F:21:E0:2C:8C:98:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75A946F2E94A0D042F0D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d3f2e65-962f-30bc-b995-ea25684c6a8a.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        68.62.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:a9:46:f2:e9:4a:0d:04:2f:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=c9e9cd23-3707-43da-b130-6555967e311d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:3e:f5:8a:4d:85:77:cc:fd:20:6e:df:84:
                    0b:36:2e:bb:2c:fc:30:ea:58:0a:e4:b8:43:3f:a7:
                    21:bc:b0:00:95:94:c0:e2:58:89:da:de:bf:fb:95:
                    af:cf:26:63:e9:0d:7c:c2:6e:9b:04:e1:74:6e:55:
                    c8:4d:e6:1f:55:4b:87:aa:ba:a7:8a:82:78:06:66:
                    72:79:5a:ba:e5:63:71:2f:75:5b:46:df:94:d8:c1:
                    f5:23:1d:d7:fb:8f:db:36:47:d1:a7:3b:53:49:f3:
                    49:ab:e7:ee:00:3f:7e:2d:43:49:f6:20:ab:29:64:
                    9c:4a:c3:49:5c:9b:ac:af:92:88:7c:53:92:32:3c:
                    d3:64:87:80:f3:99:c1:0b:1c:80:88:04:02:c1:a7:
                    7c:72:8f:7f:5d:ad:f9:fc:85:10:73:08:8d:b9:27:
                    97:89:58:b3:c4:1a:89:53:15:97:ec:9c:22:83:e2:
                    50:ad:5f:59:20:6f:2d:0f:f0:93:01:a6:d6:e3:91:
                    7b:d2:d4:d1:48:ff:5b:fe:76:30:35:ab:c6:0b:f3:
                    ca:32:01:b0:8a:2d:81:3b:1a:07:be:da:7d:9d:3d:
                    5e:52:08:0d:b9:98:dd:fc:19:17:fb:bc:f1:35:29:
                    1c:f8:9f:c9:8f:43:3b:46:76:d8:b9:d6:3e:96:0d:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:6C:B1:22:DD:95:F0:4F:D3:5F:50:32:0F:21:E0:2C:8C:98:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d3f2e65-962f-30bc-b995-ea25684c6a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.62.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e6:89:6f:27:02:18:36:54:77:8e:c8:87:5d:f8:3c:6d:25:
         df:27:0d:0f:fd:f3:7d:6e:88:bf:82:71:ef:51:67:4b:4c:58:
         91:ed:0a:1d:8b:5e:c5:39:db:f6:0c:9b:e8:46:c1:49:c9:d4:
         8f:8d:5e:15:4b:eb:19:5d:7a:dc:12:b1:28:41:b4:3a:b7:40:
         3d:20:2e:5a:83:96:64:8e:57:50:c1:79:b9:89:c8:18:b6:6c:
         2e:26:24:20:c1:0a:e1:38:dc:59:6d:7d:65:81:2a:46:19:81:
         fb:3e:4f:b0:47:a5:c7:0d:c2:e8:d1:ff:26:cb:12:09:f9:55:
         08:3b:f2:02:94:af:27:74:c9:11:40:bf:cf:20:a6:39:5a:11:
         8f:f8:1e:62:a2:92:87:34:6b:28:de:c3:8e:f3:9e:50:61:47:
         87:3b:06:c2:c3:70:e2:2c:24:11:80:1a:cd:12:72:d8:dd:4b:
         6d:12:00:79:6b:13:03:15:e4:1e:bd:a1:ef:ad:2e:85:9a:fe:
         9a:6f:2a:96:4b:48:db:ad:d4:c6:35:68:39:35:51:cc:03:a0:
         34:b3:fb:d3:65:67:14:a0:37:81:c2:74:e9:6b:ae:31:aa:ca:
         d2:5a:3d:51:f6:9b:51:a6:14:ee:d3:92:90:3e:43:c6:d4:7d:
         a7:70:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:41:38 2025 by rpki-client