Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad98de84-1a95-3585-a4f0-c059de16d353.roa
File:                     ad98de84-1a95-3585-a4f0-c059de16d353.roa (raw, json)
Hash identifier:          IDHVKPg3MPIuFX6mE2FOhzixT9MfSyKJ1yNMvOGl20Y=
Subject key identifier:   41:EE:F2:09:10:3C:45:F9:61:15:84:4D:F0:2F:2D:B3:0B:76:4B:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA5EF2E0F2EC04971C1500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad98de84-1a95-3585-a4f0-c059de16d353.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.42.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:5e:f2:e0:f2:ec:04:97:1c:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0a5f6223-4e0e-4eb3-95f5-774570154a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:d3:f9:7b:77:fb:bd:0f:cb:a2:c7:98:93:
                    45:e0:68:65:05:c0:42:50:08:d7:8f:06:39:75:f1:
                    cf:b2:7d:ca:67:13:db:dd:67:8f:d3:1d:5a:fb:c3:
                    27:d5:04:5d:3e:dc:f5:87:9f:dc:8c:e6:32:84:44:
                    bb:1d:ed:06:60:13:8a:be:ce:89:c9:22:5a:de:03:
                    b8:64:a4:1f:2e:25:e7:b2:e5:9e:d0:90:2d:40:1a:
                    7e:56:30:fc:32:2b:3f:a3:59:ee:69:20:46:9d:5a:
                    1e:d9:a2:ac:3b:8d:47:e7:ae:53:9a:c9:0a:61:fd:
                    cc:cf:f3:49:55:9e:ad:a8:e3:a9:bb:ab:9c:80:8f:
                    31:d3:ff:14:5c:1a:f5:c5:d8:d8:8f:97:e0:a0:c8:
                    b9:7c:cb:e4:10:c3:74:de:15:6a:cb:c5:f3:6b:55:
                    07:94:09:6e:89:14:9f:68:7c:72:f7:0b:56:69:a5:
                    26:fc:d3:3f:36:68:29:b1:31:05:5b:8f:98:37:da:
                    d6:c2:e6:7f:67:d3:3b:13:0a:1e:d6:1e:c1:cc:e6:
                    41:60:34:bc:cc:28:53:e7:4b:45:95:00:21:8f:43:
                    d6:91:ab:b7:22:d1:a8:0b:41:de:36:9e:cd:eb:d2:
                    d3:08:31:2b:43:d6:26:46:95:1f:47:dc:51:a1:c6:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:F2:09:10:3C:45:F9:61:15:84:4D:F0:2F:2D:B3:0B:76:4B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad98de84-1a95-3585-a4f0-c059de16d353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.42.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8a:c8:6d:46:6f:73:2f:e3:c2:58:4f:3e:e5:e2:b3:a8:89:
         68:cf:df:1a:df:51:35:21:e5:38:40:77:78:12:f9:d1:18:65:
         43:62:96:63:35:b2:8c:c2:52:c0:7f:98:39:f3:df:f0:cd:b8:
         eb:39:17:df:ba:f6:ed:d5:9b:3e:97:40:0e:53:c8:4d:49:5c:
         67:48:ee:83:26:f4:2a:87:4d:0e:92:90:de:02:7e:42:11:bc:
         aa:d1:ce:00:ca:38:c2:13:49:66:05:83:6b:e8:c0:0e:a3:01:
         27:42:f2:15:83:c8:f3:c2:44:37:12:80:72:b8:31:a4:d2:14:
         35:f5:cc:9c:eb:b4:0c:f8:32:5f:d6:3b:ad:7a:e8:cb:e9:76:
         0c:2e:73:24:7e:94:26:29:02:86:01:f8:f7:12:1b:67:9a:ad:
         96:2a:46:f2:a2:67:db:06:a5:b3:13:7c:a8:a6:ac:a0:81:29:
         a8:84:dc:da:19:ef:4d:4c:55:fd:b8:4d:2f:6d:79:3b:22:a9:
         9c:41:6f:15:98:3c:86:36:40:95:6d:1e:82:0f:f2:57:55:3e:
         47:35:45:0a:a8:f9:8a:1f:99:e6:3e:bf:1b:8c:e5:da:88:24:
         9e:16:f7:ab:d1:10:24:f0:bf:c6:96:21:58:3d:32:3e:57:35:
         d2:1c:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:01:19 2025 by rpki-client