Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa804654-8ebc-3f6f-988c-2f7712860030.roa
File:                     aa804654-8ebc-3f6f-988c-2f7712860030.roa (raw, json)
Hash identifier:          avwEoR/l3jNkjBeFlZmI9bGzQnYil/nWSQqQPRXbBcY=
Subject key identifier:   AB:63:43:D7:17:E1:1D:0D:8A:CA:2D:88:26:28:83:E8:8B:01:9F:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C077FFB8FD108CF91C82F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa804654-8ebc-3f6f-988c-2f7712860030.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        68.82.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:7f:fb:8f:d1:08:cf:91:c8:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=13165f58-a688-4f9d-ab99-9a0eb42c27fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:32:4a:f1:9f:cb:2e:fb:be:db:5f:db:c9:d8:
                    63:ad:c7:4b:1e:eb:b4:94:2a:a9:42:97:e8:3d:aa:
                    a1:ad:d1:3a:c9:b2:5b:fe:5a:d6:94:82:4a:03:70:
                    ed:62:f3:e0:af:d0:4b:99:7c:25:81:60:15:fb:d6:
                    53:b5:64:6a:5d:cc:64:86:e9:a2:53:9b:78:f3:14:
                    9d:4b:af:c0:2e:5b:bf:7d:cd:d3:fd:74:b2:3a:01:
                    22:98:aa:b9:3c:06:5e:77:24:44:16:24:81:41:ac:
                    b7:5d:79:b9:2c:38:95:da:86:f8:e6:f2:c2:4f:cf:
                    02:87:ea:00:50:b9:d8:5d:83:4a:d1:df:1f:f3:8b:
                    2b:0f:db:e1:0a:0c:b6:9c:e4:19:d4:2e:8f:77:4d:
                    24:5e:75:5b:54:ad:74:9b:a0:ca:ff:2c:1b:96:a1:
                    91:71:e1:f7:94:7b:22:a7:10:2b:17:0b:46:d5:d4:
                    0b:35:b4:88:29:93:dd:7e:e7:73:c5:a0:15:3e:a6:
                    a4:77:e9:30:93:20:55:5e:df:5b:04:4f:2d:30:e1:
                    1a:bc:3a:b2:d0:3b:26:4e:0a:53:15:26:d4:8d:28:
                    fd:41:44:ea:15:c2:a5:38:6a:45:eb:5e:e9:47:46:
                    6c:11:31:d6:8c:36:20:b4:fe:08:f7:31:2c:da:be:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:43:D7:17:E1:1D:0D:8A:CA:2D:88:26:28:83:E8:8B:01:9F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa804654-8ebc-3f6f-988c-2f7712860030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:3d:dc:9f:dd:f9:69:d2:52:3f:a0:03:2f:15:a0:88:cd:c1:
         cc:3e:47:a5:fd:11:b4:f1:e2:4f:23:cf:3b:0b:eb:e6:77:9e:
         06:67:f7:d8:c7:28:63:58:8e:7b:da:1a:08:90:a7:c6:82:4c:
         62:d7:b5:0f:47:a5:35:22:1d:55:ca:aa:49:3e:65:41:f2:a5:
         95:d1:f1:4b:f7:6b:e8:df:ee:50:a3:8d:00:0e:69:fb:73:70:
         dc:cb:b6:e1:62:03:1a:86:95:3e:d2:b3:46:55:74:52:65:7c:
         f3:77:e9:31:54:ff:32:ca:63:26:67:87:f1:1a:93:c5:7a:72:
         1f:73:6d:4d:41:55:56:73:3e:c0:0a:76:a6:fd:9d:45:40:6f:
         e2:32:66:94:b4:37:c6:b0:19:42:33:02:88:99:ba:13:16:c6:
         8e:a2:9f:75:1c:00:f5:20:a2:94:af:21:3d:4a:eb:d2:88:e9:
         0d:b1:1c:b7:3d:9f:29:ca:96:d5:08:ff:58:25:03:bc:e9:a3:
         fb:b6:9e:41:8d:b7:71:7e:03:d9:07:51:f5:85:24:99:27:74:
         99:60:d6:d7:fa:5f:a2:d8:86:56:a4:10:32:ba:10:69:a1:c9:
         4c:3a:ad:c9:8c:9f:99:3b:a5:ce:f6:a4:69:be:1a:7a:5f:32:
         c7:f4:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:01:25 2025 by rpki-client