Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a03884-4588-3194-bc2b-cdd44f9536b1.roa
File:                     c8a03884-4588-3194-bc2b-cdd44f9536b1.roa (raw, json)
Hash identifier:          kIQzyZSdsaxeN0BmoFZGoSpTxD3dKf5+Hyh6NYzQXUw=
Subject key identifier:   A6:73:32:32:0E:DC:7F:68:B6:BB:B4:AB:70:89:24:79:9E:4F:4B:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C059852092191087011EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a03884-4588-3194-bc2b-cdd44f9536b1.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        174.52.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:98:52:09:21:91:08:70:11:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2a73fa26-6da7-43a5-bb81-d195605f45bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:72:ee:a7:55:b7:1c:ef:61:c5:55:4b:2e:
                    d1:e5:45:23:07:f2:28:81:fb:7f:a6:eb:79:cb:ce:
                    40:bc:2c:50:3e:9f:be:de:45:72:39:57:a2:f5:c0:
                    9f:2a:51:28:03:86:0a:42:72:9b:69:1a:7f:98:47:
                    a1:b4:9a:f2:5e:5d:d4:b3:fc:21:b7:a9:aa:2d:68:
                    37:4f:7a:5f:3c:1a:f9:2a:94:5d:12:41:85:72:ac:
                    df:5e:78:14:41:af:20:43:a4:ce:be:ff:88:0a:d1:
                    3b:ca:72:ba:ef:0b:04:bc:42:26:38:54:dd:bd:ba:
                    36:06:d6:ed:cb:44:6d:b4:f1:67:57:36:25:a5:67:
                    9d:91:22:05:d9:e7:47:96:17:a7:94:0f:76:2b:2e:
                    cd:b0:6e:ab:74:29:30:38:72:b9:ba:79:01:a4:ca:
                    ed:42:05:54:07:ee:85:e4:8b:27:61:7b:0d:c9:f8:
                    e8:6c:61:cb:80:59:e1:40:ba:26:5d:4d:9f:9c:35:
                    1b:27:59:8d:d4:6e:45:f1:a6:29:c7:b4:88:ca:3d:
                    68:37:6f:83:7a:b9:ff:35:1c:5f:a9:8c:e4:44:65:
                    6c:91:c5:01:e4:38:fa:ad:cc:60:0f:c8:d5:77:9c:
                    ad:21:a6:8a:a6:70:87:d1:e4:f5:a2:84:9e:e1:33:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:73:32:32:0E:DC:7F:68:B6:BB:B4:AB:70:89:24:79:9E:4F:4B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a03884-4588-3194-bc2b-cdd44f9536b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:85:53:8e:8d:ca:80:cc:87:6c:63:49:08:dd:ff:18:1b:17:
         11:3a:86:e5:c7:a5:6d:57:f2:b5:97:2c:5f:3d:62:d4:f0:5e:
         e4:54:63:9f:3b:2f:a5:d6:a1:aa:34:99:ae:f6:5c:2b:97:0d:
         80:33:44:96:b0:a8:ae:e0:59:af:96:ce:85:06:98:99:26:1d:
         5b:d9:9f:c5:56:f6:8b:b7:d9:92:99:5b:17:c0:26:47:66:db:
         16:03:e2:98:c5:69:30:8b:7a:fc:c7:87:45:80:f9:9f:46:bb:
         a6:dd:b8:6c:9b:30:3c:ab:ce:ff:cb:35:81:d1:f5:bb:6e:39:
         0d:e6:2a:7a:05:2b:f9:d7:90:ac:72:95:cc:07:a3:ad:6f:07:
         5b:98:30:a0:dc:d9:e7:4d:18:67:d2:10:6d:d4:d4:93:d4:3b:
         ec:0a:4b:af:96:b5:7e:2a:64:33:d8:9c:4b:f9:1f:71:8a:8c:
         3a:ae:04:5b:a0:13:04:07:ed:c2:47:e6:f3:77:e6:b2:49:ce:
         db:ec:95:11:25:66:6c:43:6c:bc:80:fa:24:6e:08:17:02:1c:
         bf:cd:de:25:cb:30:a8:57:39:62:c1:e1:73:40:14:df:3b:1e:
         b5:97:40:f3:f3:a8:d7:35:99:1a:cd:82:59:05:db:88:48:44:
         c5:9f:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:15:12 2025 by rpki-client