Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c42968c-7eed-361d-a2db-291a2d06be43.roa
File:                     7c42968c-7eed-361d-a2db-291a2d06be43.roa (raw, json)
Hash identifier:          WB6dkN8371ujJGGEfy/IrX2TbylV/6iih5HkhKZDpMw=
Subject key identifier:   D8:A0:62:65:DF:16:FE:E2:44:63:E6:73:88:51:9F:71:8A:73:56:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8DAAC839D845FC0935C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c42968c-7eed-361d-a2db-291a2d06be43.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.34.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:da:ac:83:9d:84:5f:c0:93:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=ec40d69e-6e3f-4f54-aef5-396f0e492bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:32:ef:e9:10:ef:b4:92:f6:7e:87:6b:4a:
                    ab:e9:81:db:f0:50:f3:0a:57:d7:ce:49:42:94:b6:
                    09:3a:43:7b:d1:a3:02:b6:d0:4e:b5:97:33:a9:4f:
                    f3:21:fb:58:f5:4a:cd:31:cc:07:30:cc:8f:3e:f6:
                    38:3e:78:bb:03:19:e4:92:83:2a:c6:88:c9:4c:b5:
                    25:a3:e1:94:db:ba:5e:b8:57:3e:e6:de:b9:0d:c9:
                    05:f2:a2:b2:13:e2:17:92:32:d4:b7:5a:53:2f:1b:
                    85:e1:a0:25:d5:e1:ba:f7:4e:c2:e4:e4:a1:ce:65:
                    dc:33:e9:ba:3a:3f:f5:1e:ad:a9:2c:8e:a1:e9:ae:
                    fd:ad:68:dd:a2:ec:54:a2:6f:50:9d:24:a7:d3:5e:
                    2a:59:7f:70:ed:21:ed:82:c4:54:de:15:85:9e:78:
                    43:62:c3:f5:07:bc:fe:32:7f:99:c2:1f:39:61:b2:
                    25:fb:37:97:50:16:53:08:8b:85:46:10:3e:d0:a5:
                    a4:ca:f0:77:d5:80:12:89:4b:7d:aa:be:b0:a5:69:
                    1c:ef:c8:e9:0e:95:42:47:90:11:b3:8f:c9:04:ed:
                    2a:6f:26:a4:1b:19:68:b7:ae:f1:2f:6c:48:fa:fc:
                    81:8f:c2:c5:51:4c:41:bc:29:fc:8d:2e:b8:3d:4e:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A0:62:65:DF:16:FE:E2:44:63:E6:73:88:51:9F:71:8A:73:56:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c42968c-7eed-361d-a2db-291a2d06be43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:a5:e1:11:03:e5:92:0f:7b:67:41:da:31:1f:1a:2f:2f:
         5b:d2:71:b1:e5:7e:7d:6a:2f:ea:bf:12:61:27:97:57:ca:f4:
         5f:01:61:7b:ba:03:86:cf:3d:8c:b2:f7:78:2d:a3:fa:5e:3a:
         83:4c:ad:ed:27:2a:9c:58:f0:8c:03:cd:26:21:19:2c:b7:9a:
         bc:56:f6:f2:4b:3b:9e:d5:a1:ca:b2:85:e5:66:21:d4:34:13:
         75:5e:c8:af:e7:21:80:7f:33:2f:0b:1a:8c:5b:f6:33:9a:50:
         fc:7e:34:5a:3b:23:c6:c3:7b:4a:07:25:81:a3:66:1a:78:35:
         c2:81:e4:b7:46:ae:39:87:05:98:b6:71:d8:a3:3a:b7:9c:10:
         ac:10:ca:3e:f0:86:c5:39:0e:0c:8f:63:5b:01:ab:22:e2:f5:
         9a:83:93:06:5c:38:a4:41:36:6a:ad:4c:89:93:24:a7:03:31:
         4d:d7:ad:94:0b:86:e7:66:c4:de:75:4a:60:58:69:54:fb:26:
         47:db:54:78:ff:a8:e3:0d:69:cc:80:c2:83:84:22:1b:6c:bd:
         81:53:b0:44:cf:e7:f6:f2:86:11:57:32:24:40:b3:0c:52:09:
         d2:65:a6:1b:a2:ff:74:c4:33:72:ed:c1:26:bf:89:24:e0:b8:
         74:a1:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:03 2025 by rpki-client