Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa
File:                     af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa (raw, json)
Hash identifier:          0oQVtYM5Ws1WxXTUwM31Pl/gNCCY71NQxLhG3u5LBk0=
Subject key identifier:   67:2A:17:39:30:24:CB:46:34:47:90:5D:58:5F:BB:AB:8B:0E:0C:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75A7061EDEF5D4299DB930
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        68.34.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:a7:06:1e:de:f5:d4:29:9d:b9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=eac09b37-d9cb-40eb-9025-005546493678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:a4:2f:d9:24:4a:74:d0:cd:52:b3:61:70:
                    63:96:59:2b:ba:3a:d5:18:72:a6:60:34:28:3a:6a:
                    df:a3:2e:99:a5:15:91:93:bd:46:e8:6e:9e:0d:30:
                    44:35:aa:57:f7:eb:06:80:00:ff:01:fd:a9:5b:ab:
                    aa:6f:fa:dc:40:df:1c:a3:ae:4f:12:30:8e:b4:29:
                    e0:ed:f7:00:10:51:25:57:e3:f3:de:29:c2:bb:89:
                    52:ad:8f:a8:e4:c7:ac:1f:f6:73:9f:80:33:46:06:
                    f6:5e:7f:c1:d1:07:c7:c2:3a:2e:35:f5:dd:f3:59:
                    65:96:bb:ba:66:5b:e3:fc:64:ab:19:a8:b0:0e:09:
                    b7:8d:24:45:e3:69:43:cd:2b:8a:cb:28:c2:aa:d0:
                    5f:db:44:5b:7e:01:a7:05:2f:03:ee:a7:c9:d0:55:
                    47:a7:0c:ce:bf:e7:94:3b:3e:ed:0a:7d:f7:a4:26:
                    62:be:86:8a:da:99:31:61:a0:e7:d9:c4:6c:b9:32:
                    78:2d:2a:1d:62:f3:ca:ff:6b:71:48:15:8f:fa:5b:
                    58:05:3d:c6:9a:72:6b:57:70:ad:17:b0:a5:fe:85:
                    39:18:cd:12:7b:3c:51:61:7b:8a:1a:84:20:42:91:
                    20:40:5e:06:57:80:37:85:5c:94:6c:a4:08:08:61:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2A:17:39:30:24:CB:46:34:47:90:5D:58:5F:BB:AB:8B:0E:0C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:30:83:3f:f4:d3:22:8d:e0:54:04:1a:b0:47:e8:f2:b0:
         24:23:26:8f:b6:50:70:03:bc:88:76:54:27:a2:bc:8b:45:30:
         d3:d0:67:5a:b9:5a:d1:02:f7:0e:4f:13:a0:aa:71:53:c1:95:
         7e:32:b0:a3:e9:a0:34:c5:df:e3:45:0f:33:36:bb:ec:67:cc:
         59:17:9e:80:bc:01:07:b8:3e:c3:fb:fc:9e:92:f4:dd:bd:fe:
         e7:d7:95:29:07:f9:42:4f:7f:44:16:e6:f5:01:5a:a5:05:e4:
         ad:14:2d:3a:e5:d1:c0:44:dc:81:7d:cb:80:89:c8:05:c3:27:
         3d:5b:4e:37:05:69:11:be:5f:3b:85:f1:41:be:de:1b:46:1c:
         51:ac:2c:7f:70:27:b6:b1:97:57:c0:ca:53:df:7d:e4:e0:23:
         4d:05:ec:83:c8:b0:f3:a1:de:58:0c:98:02:7f:d8:de:ed:cf:
         09:e1:89:0e:c4:23:02:d0:cf:46:3f:cf:e7:01:c9:d2:66:f7:
         3c:26:2d:c0:15:7a:16:6a:c5:ef:09:28:21:36:e9:0b:47:c2:
         40:1e:fc:4c:54:bc:ce:49:86:f4:aa:61:68:ac:ed:47:fc:78:
         49:02:76:36:d1:c3:ca:6f:6f:19:86:f9:65:df:36:a1:ae:9c:
         c9:7d:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:50:14 2025 by rpki-client