Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/931c8eeb-9d94-3b99-80f9-832882fa3311.roa
File:                     931c8eeb-9d94-3b99-80f9-832882fa3311.roa (raw, json)
Hash identifier:          FI7RfJv51D909P+imr7Di97Ym+rSCe2PbqzcdOKyx1g=
Subject key identifier:   CB:EC:B8:D9:14:E5:DA:BE:33:B0:92:2A:9C:5B:94:74:3E:DA:79:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432014AB9040094AF563D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/931c8eeb-9d94-3b99-80f9-832882fa3311.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.55.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:01:4a:b9:04:00:94:af:56:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=c7c77076-6128-45dc-a77d-8d1effe8a10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:21:04:65:c9:08:f8:f8:0e:1b:7b:d1:8d:
                    43:bc:b3:83:d9:3e:e2:a0:bf:bb:80:0f:aa:bc:8a:
                    67:bb:35:b1:97:60:06:af:a1:63:2c:8e:73:36:2a:
                    61:20:29:55:12:c5:60:48:ea:8d:b5:61:16:2d:3a:
                    c7:56:87:04:02:ef:50:c5:7a:44:99:2a:96:49:c1:
                    3d:18:20:87:03:71:76:b2:88:3f:66:c0:48:15:de:
                    76:5d:fd:af:3e:e4:85:15:9f:34:67:de:a3:05:2f:
                    7b:87:49:22:87:00:2c:aa:30:01:d4:a1:cc:03:64:
                    14:d8:55:fe:db:54:f9:9c:cc:9f:b7:5b:38:99:2a:
                    b8:be:73:77:5a:6f:57:c0:c2:bb:b8:a4:5b:cd:38:
                    52:b1:7f:55:d3:97:42:91:60:6e:f3:ae:76:d7:aa:
                    a3:93:6c:50:86:5e:ab:b7:75:72:e9:29:e9:f4:53:
                    dc:2e:bf:ea:79:8c:53:7b:45:a3:48:9c:2c:17:bb:
                    25:7f:a9:73:87:09:91:dc:76:79:33:31:1a:20:4e:
                    86:de:48:f9:4b:d3:13:d4:b1:21:41:55:9f:05:e0:
                    fd:34:9b:25:17:09:d9:dd:e2:34:ee:17:bb:4c:52:
                    d0:a8:04:c9:46:2e:5e:03:10:b6:8b:0e:21:34:76:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EC:B8:D9:14:E5:DA:BE:33:B0:92:2A:9C:5B:94:74:3E:DA:79:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/931c8eeb-9d94-3b99-80f9-832882fa3311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.55.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:62:dd:d0:1d:ed:5c:8b:aa:f5:76:50:a8:81:3d:28:f7:2e:
         a9:44:9e:47:8e:e6:e6:c6:e1:f6:68:ef:78:c4:64:e6:eb:0a:
         92:57:c0:9d:a4:a8:d1:1f:23:6c:75:28:fc:20:53:fb:be:e7:
         12:0a:73:44:b9:b6:73:49:b5:14:46:2c:79:11:92:40:8b:27:
         d0:cc:eb:7e:61:18:fc:2e:e2:7e:fa:9a:6c:91:b7:e2:eb:c2:
         4c:29:f7:ce:25:51:b7:bb:f4:2a:79:06:f7:f5:3b:7a:6e:2b:
         3c:ca:9c:54:a8:08:8f:79:04:76:00:f6:2b:a5:b1:57:7a:bf:
         b7:c4:77:c7:50:46:e7:43:83:4b:1a:c9:2d:bf:4d:3d:a0:c0:
         0e:4c:fb:55:03:82:90:09:ba:16:ff:1b:32:9f:bd:83:e3:19:
         d3:88:67:3d:e4:8f:cf:4d:c1:ba:36:ae:7a:4a:2c:f2:f8:2f:
         99:05:74:cf:a5:66:66:01:8c:f8:cd:26:54:9f:eb:40:36:59:
         86:22:a3:43:d8:66:64:37:e8:eb:b0:c1:2a:36:6e:d6:57:64:
         6b:cc:ff:01:2f:ae:10:62:77:21:cf:77:8e:3d:26:50:a4:9f:
         87:70:1b:d0:e2:36:15:ef:cf:39:54:a8:83:ee:0e:a8:ce:36:
         93:9d:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:08:42 2025 by rpki-client