Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ee171d7-b169-3304-bd59-dcee3aebec0e.roa
File:                     8ee171d7-b169-3304-bd59-dcee3aebec0e.roa (raw, json)
Hash identifier:          fnMz71Z2MeCHGpQsSO0P/JXgwsdKp5SObz2JDJJo//E=
Subject key identifier:   CD:31:FD:C7:36:33:2E:4D:F6:A3:82:57:6C:C3:86:D8:07:ED:DA:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C062584C36F2FF5811F2780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ee171d7-b169-3304-bd59-dcee3aebec0e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        68.38.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:25:84:c3:6f:2f:f5:81:1f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=26133067-f4f7-4f57-9123-88a5201f3cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:c2:a5:05:62:c7:1a:9a:54:cb:2e:55:5d:
                    2a:64:2a:a0:dc:27:69:6b:ae:5c:d0:78:ee:4f:d5:
                    a2:42:76:72:da:7b:77:cb:bb:1a:69:83:4f:a1:b4:
                    da:97:c6:24:4c:36:43:73:ef:ad:d6:99:15:dc:f8:
                    89:f6:62:c0:ca:fe:ef:59:fd:df:cb:6f:05:2e:4f:
                    e2:37:42:95:21:7b:be:3a:73:53:d1:d0:b1:8b:60:
                    49:2c:d6:b5:e2:7f:a6:8c:b1:ab:80:c2:56:c9:aa:
                    a9:81:db:81:2f:7e:82:ca:8a:c6:5a:71:96:44:0b:
                    04:fe:b1:63:d6:46:97:75:ba:fd:c0:d1:b0:57:90:
                    a6:ac:a2:3d:29:0b:85:df:96:b7:84:0b:d1:b8:3e:
                    91:eb:75:4e:61:7d:20:cc:3e:ed:88:bb:d8:c6:8f:
                    eb:7e:9b:7c:99:f1:f4:33:2f:6a:74:38:d3:12:b6:
                    9a:37:60:32:85:b5:6f:61:1c:c0:36:8a:90:6a:15:
                    69:19:56:47:85:2f:65:08:c8:49:35:a6:0c:65:61:
                    66:50:72:cf:7a:0c:77:bc:97:f7:e2:14:0e:a5:6d:
                    d8:bc:80:fa:b4:4d:f7:6d:7b:fd:b4:db:9f:19:46:
                    57:9f:be:33:2c:53:7e:8d:5e:3a:d9:a3:91:13:a9:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:FD:C7:36:33:2E:4D:F6:A3:82:57:6C:C3:86:D8:07:ED:DA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ee171d7-b169-3304-bd59-dcee3aebec0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.38.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:3a:d4:51:d3:21:59:6f:e4:e1:d7:5c:5d:eb:96:55:f8:73:
         08:a2:d7:78:74:8c:47:74:8c:39:b2:aa:86:c9:44:85:70:0d:
         4a:a3:89:c0:27:cf:d1:fd:67:76:d5:7e:38:d6:2a:e6:90:3d:
         e8:4d:62:b3:3d:04:97:3e:71:67:ac:c5:ae:10:88:bc:57:a1:
         9e:45:a5:72:ca:56:a3:26:b4:ef:69:4c:73:ff:72:d2:5b:0e:
         3d:34:63:54:cf:90:8d:73:67:76:05:78:a6:b7:ab:1b:03:82:
         b6:d6:fe:dd:01:b5:87:73:64:a9:4a:0b:aa:6b:2a:59:cd:c8:
         fd:03:76:d2:bd:01:89:8d:2b:b8:1d:72:e6:b4:a0:21:f4:77:
         4f:4b:37:75:73:20:d8:d7:5f:02:67:5e:56:9f:40:82:7d:6b:
         4a:0f:5e:4d:d2:06:64:ec:40:49:36:2b:13:fc:b2:15:ef:91:
         89:ff:7e:31:e8:ee:ac:69:60:fd:dd:69:79:38:84:14:3b:49:
         ae:e7:8f:d5:60:48:7e:f3:7a:92:a9:0e:17:95:0a:0b:66:35:
         71:9a:a1:d3:06:d8:60:e4:02:c0:85:0b:ad:e8:1d:3f:00:5e:
         1b:00:f5:98:ff:77:5f:e1:ba:71:eb:1b:ae:f4:f6:7e:a3:09:
         2e:7e:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:29:52 2025 by rpki-client