Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acae05c5-78ba-3a68-8f99-d177f1130ee9.roa
File:                     acae05c5-78ba-3a68-8f99-d177f1130ee9.roa (raw, json)
Hash identifier:          4jr46I9M3TkbB5Budmfz9kb9k4F62xcnclc/DU6eyMk=
Subject key identifier:   FF:5C:9B:99:40:FF:B0:88:AF:C7:C9:C5:13:D2:BD:86:4E:D9:BA:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430611CDF3AA388259F9CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acae05c5-78ba-3a68-8f99-d177f1130ee9.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.68.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:61:1c:df:3a:a3:88:25:9f:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=118c9ee7-2357-44f1-9269-e3dfc76d2539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:52:a2:65:68:e4:87:cb:2a:ec:38:c9:ca:
                    e2:01:02:15:e2:6d:a5:c7:af:ba:06:d3:97:41:aa:
                    5b:58:65:c6:21:48:7e:ec:1f:5f:2f:2d:63:a1:5b:
                    b8:65:74:fd:3a:0a:5f:ef:8f:98:41:29:58:e9:77:
                    38:d1:db:b1:9d:f8:47:b1:c3:78:84:e1:ab:d3:e4:
                    8f:c5:f2:fc:7d:30:87:11:70:13:a5:1a:3a:22:5c:
                    7e:6d:78:11:0d:6d:25:dc:c8:7a:97:cd:c1:f1:18:
                    ca:fc:6c:6a:34:c4:78:99:90:08:c6:a3:39:8b:9f:
                    17:8e:dd:1f:3c:9f:bc:af:76:83:09:3f:c5:d4:50:
                    f0:34:0c:cc:b4:cc:56:7f:97:e1:74:23:69:43:d2:
                    ef:02:ea:96:80:cb:84:e6:ff:d9:e0:02:1f:7a:72:
                    03:43:84:85:e8:1d:3a:0f:b1:f1:91:c1:55:f4:fa:
                    eb:e5:f5:18:f4:74:83:2a:f5:dd:3a:87:11:d9:52:
                    94:4b:cf:35:2f:da:29:65:40:cf:6e:37:0f:1d:eb:
                    ea:4d:bc:c8:50:67:90:59:ab:17:2c:54:ee:ac:3b:
                    04:5f:6e:9f:0e:19:0d:71:c0:06:52:2d:33:8f:ab:
                    d5:84:41:e7:d8:aa:ff:89:7a:aa:b2:f7:24:29:86:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:9B:99:40:FF:B0:88:AF:C7:C9:C5:13:D2:BD:86:4E:D9:BA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acae05c5-78ba-3a68-8f99-d177f1130ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:ea:e9:d4:16:d1:9b:9e:58:de:c0:c8:d7:d2:2a:a5:a6:
         4d:86:dc:4b:36:a4:3c:2b:ce:c6:5a:e8:c0:ba:26:39:d9:57:
         b2:81:00:e4:7d:f1:8e:1f:7b:f1:85:53:a9:a4:7b:e1:94:f8:
         d4:b9:17:48:8e:4e:9d:03:fa:d9:08:c4:af:58:89:76:ee:01:
         0d:5b:92:a5:2f:50:2f:fc:7c:ba:5b:fb:f4:11:9d:94:2c:3a:
         3d:9e:fd:ec:8a:8e:44:ab:80:e9:88:e4:85:9d:ab:5a:76:c5:
         53:0f:9f:3c:8a:0f:df:3a:91:36:f9:65:74:77:d5:9a:14:d9:
         46:fb:25:b0:28:b1:a1:1c:47:82:13:3f:7f:b0:54:bf:c4:76:
         86:f5:a3:4e:0e:09:3c:db:46:81:4a:61:2e:23:1c:5c:69:77:
         8b:55:cb:d0:da:d1:2c:6d:41:e4:b7:15:e5:a0:1d:c6:5e:ba:
         60:7b:8b:9f:c2:cf:63:39:43:1e:08:fb:6f:da:14:77:e6:ca:
         96:b0:95:20:4e:6a:51:86:36:62:b7:e9:c3:90:b2:51:85:ff:
         f8:56:1f:7e:a7:1b:98:07:ab:59:f6:44:14:ff:cb:94:b1:ba:
         12:02:f6:da:de:fd:7e:23:03:75:96:73:9e:11:e5:0c:5b:a1:
         5b:12:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:05:08 2025 by rpki-client