Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa
File:                     7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa (raw, json)
Hash identifier:          Nnt4tw2JC997BYbWNOeIk0NCvkXTB1v2BnBr58aiyME=
Subject key identifier:   B0:62:94:2D:92:AC:4B:00:E3:59:B4:1A:B7:38:DF:1F:3C:4C:8A:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06321252461ED802DA76FC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        68.45.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:32:12:52:46:1e:d8:02:da:76:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2bcb865a-f86c-4e89-bb3f-9c4df63b0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:ed:d2:88:42:2a:9f:a4:55:7d:4d:3e:ad:
                    13:ab:e3:b9:bb:37:4a:99:e4:28:bc:db:f9:b3:6f:
                    cd:e3:38:8e:98:c2:f6:1f:49:16:0a:1e:79:16:4b:
                    66:b1:da:71:2b:31:f3:89:00:41:27:e7:25:1e:20:
                    d8:18:50:83:f2:43:1d:fc:69:d1:83:b2:65:ac:2e:
                    de:42:30:61:34:ac:0c:8e:43:f4:3d:fa:5a:26:4f:
                    2e:b5:d3:25:d7:09:63:72:45:89:fc:c2:57:ca:8f:
                    6a:6e:7e:a7:35:da:21:9e:d5:1f:d3:7d:92:47:dc:
                    8d:33:0f:6f:7b:fa:3b:5e:39:6f:20:65:44:22:34:
                    da:17:ee:a8:0d:4e:84:c8:95:26:5f:9e:65:69:6b:
                    b5:bf:d0:e7:d8:cd:9c:26:31:70:8d:9f:54:9c:bc:
                    fb:58:f4:cf:8b:4a:3c:30:36:17:9d:cb:24:ec:de:
                    a3:9d:b8:85:bd:87:a5:38:d3:df:87:e0:e2:e7:91:
                    33:05:86:da:23:23:a8:ae:64:0b:28:54:fa:a0:04:
                    d9:f2:23:35:69:84:12:84:1d:de:62:64:ed:47:ec:
                    9d:4a:bb:ce:fe:ac:e5:27:52:eb:45:d7:66:ae:d8:
                    8c:69:f0:b9:36:4c:e4:ff:5d:2b:81:f9:dc:bd:3f:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:62:94:2D:92:AC:4B:00:E3:59:B4:1A:B7:38:DF:1F:3C:4C:8A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7acdf586-11e8-3197-bb98-f7bd7d420d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:04:7f:f1:01:e3:6d:e2:84:a3:3b:a3:c3:79:16:1d:e3:c7:
         4f:7d:64:2e:ac:42:9e:51:3f:2e:5d:7e:a4:29:bb:ad:b9:47:
         89:30:c7:e2:37:78:b6:b7:c7:b3:dd:b2:04:12:f3:a6:57:94:
         0e:b0:54:cf:e4:82:f0:3e:47:0b:64:65:c3:39:02:01:48:12:
         75:5a:48:b9:a0:cd:f7:ba:76:c2:c4:ec:4d:b6:66:38:21:5a:
         77:a4:59:17:8d:cf:0e:3e:f6:24:63:cc:88:78:35:33:04:8c:
         56:31:af:4b:4d:67:f1:ed:d9:72:cd:a1:b6:a6:76:d2:b6:98:
         5f:e3:16:1b:1d:56:e5:ca:37:4e:3d:99:e4:f3:f7:99:63:99:
         d7:87:01:dc:b6:25:24:95:8b:32:97:9d:63:e0:4a:06:fc:06:
         5c:91:68:7f:87:dc:67:0d:b0:08:66:93:77:33:41:a3:6d:fe:
         21:7f:51:cf:7c:cf:e1:35:5e:09:12:56:10:c2:de:23:72:c5:
         ce:1a:6e:40:8b:a5:c7:ab:a2:b4:61:9d:ed:34:76:a7:57:ea:
         51:16:c9:8a:10:7a:3b:46:26:ef:ab:fd:01:3e:5b:0b:9d:14:
         db:5b:26:c0:3f:80:b1:95:36:0e:fd:64:8f:35:f9:6d:04:f1:
         c0:9a:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:04 2025 by rpki-client