Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e060098-a0b9-31bd-ba0f-4792b47687f2.roa
File:                     6e060098-a0b9-31bd-ba0f-4792b47687f2.roa (raw, json)
Hash identifier:          88nOAbdOXde/St7OHCpyb2MU0TNTferaeG3ESIiBo18=
Subject key identifier:   FC:3A:EC:7C:17:E9:50:2E:47:DB:47:7E:AA:FD:2E:FB:D1:17:14:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C061D46598E34DF25D40F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e060098-a0b9-31bd-ba0f-4792b47687f2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        67.167.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:1d:46:59:8e:34:df:25:d4:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=fd5c61cb-e63d-4e21-b3e5-5c73fad817d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:7e:38:61:33:67:8d:f3:80:18:03:4e:8a:
                    3b:18:7a:0d:6e:28:68:66:34:0f:50:75:d7:fb:ed:
                    67:25:ad:01:fa:a2:df:8b:67:38:f7:56:6d:2b:c2:
                    48:e4:5c:8b:2a:fc:35:af:0b:29:25:2d:50:cf:57:
                    e5:d3:0a:66:35:5a:16:0a:a8:58:a9:dc:17:d0:20:
                    ae:72:8a:0f:b2:ca:4b:36:db:02:2b:ae:36:82:d3:
                    74:db:97:0f:12:49:bf:3d:77:2b:41:e3:cd:ac:25:
                    91:a9:8f:c1:68:41:6d:3c:1e:7d:c4:de:b2:be:f4:
                    8a:0d:ba:4b:cd:2c:ae:3d:8c:fb:d2:22:ad:8e:53:
                    6f:2a:36:22:47:02:b4:8f:2f:69:cc:dd:8c:42:b5:
                    ba:23:26:77:b9:ec:78:26:f9:06:84:36:31:51:78:
                    d9:59:a7:14:8e:f2:41:0d:56:ed:36:1c:c5:b9:ee:
                    6b:f2:9d:81:da:30:79:c3:5e:dc:e7:9a:52:5e:a8:
                    83:f3:c5:d0:5c:64:3e:ab:53:6e:04:7a:72:20:81:
                    11:bc:cf:7d:0a:c7:b7:c0:a7:c7:b5:a7:30:b0:41:
                    28:9f:04:3e:06:2f:66:52:57:b1:c3:b6:76:e3:9a:
                    c9:a7:f9:1b:bc:1b:b3:7c:f5:1a:b6:1a:69:4a:66:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:EC:7C:17:E9:50:2E:47:DB:47:7E:AA:FD:2E:FB:D1:17:14:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e060098-a0b9-31bd-ba0f-4792b47687f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.167.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:7d:73:d3:b3:87:b8:34:d2:31:d3:1b:cf:c1:7b:ea:8d:
         70:5e:fa:ab:f5:09:3a:66:c8:e0:3f:8a:88:ce:bc:66:da:71:
         0e:82:eb:fd:40:ca:63:a6:f0:9c:c7:cc:64:99:53:62:47:56:
         58:c9:a9:18:57:79:a8:df:cb:4a:58:f1:8d:c2:cd:d9:34:1b:
         08:a3:c7:2f:66:9b:42:76:e8:d3:54:89:6e:ef:2c:a7:8e:c2:
         f0:38:44:4f:65:24:af:0f:0f:a1:35:24:58:be:e2:b5:4f:97:
         f3:7c:8a:c2:e5:79:60:28:5f:6f:55:14:5a:12:b1:59:4a:a6:
         d5:71:f1:c1:1d:50:46:72:83:fc:7a:8f:41:60:5c:61:8d:93:
         09:0d:88:f4:f6:65:ea:5b:b8:60:69:c9:33:45:2f:e7:18:cb:
         ea:90:b1:e7:1b:c5:8f:24:a1:45:39:34:33:f7:0f:16:7b:54:
         09:8e:b9:09:54:3a:a2:d5:78:48:02:53:0e:42:3e:37:3f:3f:
         1f:ff:a7:8c:61:66:8f:a7:38:c8:df:0e:05:c2:d2:0f:8f:40:
         65:cd:41:b2:51:bf:59:5d:13:d4:f5:63:2c:50:c1:84:c4:12:
         15:fd:68:1b:70:bb:e4:ee:92:70:27:cb:44:f2:3e:ff:2e:51:
         7a:17:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:06:31 2025 by rpki-client