Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8675575a-742b-3ba7-9741-f8d00343ed22.roa
File:                     8675575a-742b-3ba7-9741-f8d00343ed22.roa (raw, json)
Hash identifier:          aRDef2/sJYmlNB+YS+3n1caBiZV65dlQgXPzwaxR+A8=
Subject key identifier:   C6:4C:A2:B3:AA:30:79:B7:E8:07:C8:3C:5B:29:BD:B3:18:F2:5E:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7A42982A2A737CAB056C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8675575a-742b-3ba7-9741-f8d00343ed22.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.61.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:a4:29:82:a2:a7:37:ca:b0:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=7559b7b3-7268-40e3-9a65-7f1edd962f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:0a:9a:02:0f:28:46:6c:7c:fa:e8:17:ed:
                    ad:22:df:60:f1:54:f0:fd:c7:7e:93:9c:bc:4f:03:
                    8a:63:a8:8a:a0:30:1d:d1:72:4c:61:01:bf:61:a2:
                    17:0e:ae:02:e6:9b:23:b5:05:20:4a:65:5a:71:18:
                    9e:4d:95:d2:60:f9:07:8c:2e:cf:5b:67:ba:ee:9c:
                    01:c3:2b:2e:96:65:55:b4:48:79:56:03:0e:f3:1d:
                    03:6e:15:9f:68:e9:13:7c:dc:f5:86:13:74:4b:b9:
                    05:ca:4c:1f:0a:8a:1f:a2:4a:72:e3:7d:57:55:d5:
                    76:36:6e:49:e7:ab:8c:bd:e1:14:c3:aa:9c:7f:a7:
                    1e:83:fa:52:d0:7e:fb:44:ca:52:fb:70:1c:6d:e4:
                    7b:60:28:c6:1c:cb:e3:7a:a0:84:f8:a9:fb:db:69:
                    3f:98:f9:a0:9e:73:4c:6d:ae:c6:13:d4:0f:97:90:
                    20:70:9c:ab:36:b6:83:bf:73:be:75:22:df:94:9e:
                    0a:1f:fe:76:fe:b5:b3:eb:e7:f2:dc:38:1b:97:d2:
                    36:4e:d6:59:58:9b:a4:6e:07:a7:29:92:31:96:68:
                    29:2b:a9:39:37:5b:d0:71:af:b9:59:c3:0c:d8:04:
                    c4:49:0d:c2:0e:85:ac:0b:d7:ff:6c:9b:6c:04:03:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4C:A2:B3:AA:30:79:B7:E8:07:C8:3C:5B:29:BD:B3:18:F2:5E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8675575a-742b-3ba7-9741-f8d00343ed22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f7:6e:99:15:54:47:e3:61:c6:c2:ac:fc:46:da:eb:31:df:
         02:bc:df:1f:48:73:0e:d7:93:6f:0e:50:b9:b3:09:af:9d:bb:
         82:bf:3c:4d:f0:6b:96:3e:bb:7b:09:bc:f6:4c:1e:b6:ae:f2:
         a5:be:9c:c8:5d:38:03:48:98:2c:f2:fd:77:7d:dd:d5:22:94:
         3f:c6:07:82:c4:1f:a8:58:87:c8:5a:23:ee:a4:8a:ec:b6:bd:
         8a:25:0e:7b:1e:e3:c0:10:a5:ac:56:e4:e7:ad:e9:e4:c7:ae:
         d5:b1:ff:e6:67:cf:b0:46:33:63:39:8d:77:54:60:8f:72:9b:
         48:78:01:a2:1d:6d:fc:ed:ce:f6:01:c4:b7:7a:58:8c:e9:9a:
         86:48:1b:18:58:a6:7f:99:60:da:92:1c:90:d9:0d:1c:54:60:
         7e:eb:29:82:a1:2d:4d:9a:63:b9:20:a8:60:e4:73:34:ea:28:
         39:40:0b:cf:e6:57:f5:37:bc:03:42:89:c3:6c:e9:25:1c:c2:
         26:bc:26:d4:02:83:ad:34:68:a6:4a:46:4a:5d:de:10:65:6d:
         f7:c4:b9:51:fa:3b:88:3a:93:49:83:3f:eb:8c:b9:5b:1d:78:
         fb:14:75:6f:66:07:fc:f6:d1:b1:ea:e9:8a:fb:55:2c:b2:88:
         1a:11:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:51 2025 by rpki-client