Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bcabfa3-82da-34ee-8f5c-567f7da76558.roa
File:                     9bcabfa3-82da-34ee-8f5c-567f7da76558.roa (raw, json)
Hash identifier:          Pwov8GavvVIs4SiL8AiAFGryi/r0TnwD3H4xZ1FfqjM=
Subject key identifier:   8B:A0:A6:A6:0A:DE:58:DB:AC:A9:53:82:77:A0:96:B1:8F:B9:BD:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C062F47DA22ECBB8D775400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bcabfa3-82da-34ee-8f5c-567f7da76558.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        68.44.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:2f:47:da:22:ec:bb:8d:77:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=232b82ca-5ac0-44f9-b1be-946fe03a76c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:bf:e7:e2:90:e1:d5:86:1e:35:e5:c4:94:
                    3d:bc:49:c1:9c:f4:cc:3b:83:e8:19:02:4a:83:8a:
                    02:98:1a:4c:76:4b:0a:87:1b:cd:aa:d3:ab:31:cd:
                    7f:8d:9d:14:f7:17:ed:07:06:56:02:20:6f:27:12:
                    c4:b3:d0:e5:da:3b:32:58:1d:6d:51:d2:28:40:b9:
                    31:34:bb:79:02:63:46:90:3d:91:c0:53:ec:be:6b:
                    3d:ac:b9:57:c9:9e:3d:8d:0d:09:3e:09:1a:c8:09:
                    a1:2c:e5:ab:1d:01:6c:9e:7c:f0:18:d7:13:20:9c:
                    56:cc:12:24:78:21:d7:e4:f7:55:82:36:1e:07:c6:
                    72:d6:f7:c4:ea:17:6a:a4:79:5d:d3:68:33:de:87:
                    35:e3:5b:cd:69:d0:e1:78:23:60:b6:7b:4f:f5:96:
                    aa:b5:e5:2d:37:d3:26:d3:38:45:24:49:03:03:72:
                    77:8e:10:15:50:8a:3f:16:dc:78:1d:17:95:d6:28:
                    b8:d6:2f:66:ac:1f:db:55:b0:37:14:f5:43:8f:29:
                    ae:02:24:9e:19:94:41:16:8e:f7:cb:cb:a0:2f:00:
                    84:62:d7:33:99:f4:73:de:b7:52:18:20:42:4a:ad:
                    c5:dc:29:50:c2:70:e1:52:5a:26:b1:1a:4d:70:9d:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:A6:A6:0A:DE:58:DB:AC:A9:53:82:77:A0:96:B1:8F:B9:BD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bcabfa3-82da-34ee-8f5c-567f7da76558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.44.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:15:36:92:78:43:10:b9:8b:16:bf:a6:71:a1:0c:fc:4a:
         ac:c6:f3:dd:fa:88:14:69:79:c0:9e:b3:ec:d5:87:60:95:11:
         8d:08:71:ab:87:c1:f4:0e:45:4c:79:f7:9e:61:2a:d9:59:58:
         0d:2e:a7:d1:fd:27:34:52:46:f7:86:da:8c:3f:a9:ed:51:62:
         16:dd:46:94:45:e0:aa:92:67:3b:59:18:80:66:e2:76:97:89:
         32:dc:9c:ae:43:5d:9d:55:e7:b3:d8:c6:68:84:c5:44:93:f8:
         45:03:55:2b:2f:33:f6:a0:70:a6:16:a6:74:39:52:93:a8:ac:
         a9:80:bc:08:68:73:0d:25:9a:69:dc:e5:29:38:e4:f7:72:dc:
         99:1f:ac:9c:6a:23:e6:50:ef:1e:49:01:f2:33:f1:2a:0f:c0:
         fc:50:58:9d:0b:24:d2:03:05:31:03:bf:66:01:06:72:9f:69:
         5e:e7:1c:e1:1b:58:63:c1:9f:5a:f2:8b:08:52:59:f6:fd:a1:
         2b:b4:e6:06:c8:0d:d7:54:bd:87:86:0c:4f:87:0f:2c:88:65:
         e1:d8:2a:7c:51:4b:04:e0:0c:10:90:0d:42:ef:1a:f4:0a:78:
         cb:e5:48:f5:73:4c:ca:1f:7a:ea:e6:6e:95:c3:34:db:c1:bb:
         34:24:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:56:33 2025 by rpki-client