Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0977776-426d-3da8-932d-45f82d8ecbe5.roa
File:                     e0977776-426d-3da8-932d-45f82d8ecbe5.roa (raw, json)
Hash identifier:          okmzIZln67AanCtm+ft7aQiIvgcD7KY8qdh0KnWv11A=
Subject key identifier:   37:6E:EC:0E:B2:EC:B3:49:A8:B5:FA:23:34:CA:CD:EB:DE:6A:68:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0629CD72E77A2BF91DE880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0977776-426d-3da8-932d-45f82d8ecbe5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        68.39.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:29:cd:72:e7:7a:2b:f9:1d:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=04e31240-5fdf-426b-ac10-0b1148ef60cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:02:1f:bd:58:31:3a:c3:43:ea:34:19:38:
                    08:ac:99:70:8e:9f:bd:29:30:c6:1a:07:6b:0d:23:
                    de:0c:32:6e:3e:77:55:f9:c0:02:78:1a:a0:42:11:
                    05:77:30:c4:68:80:00:b4:18:1e:c0:04:22:91:80:
                    94:4d:e1:00:46:bd:ae:89:19:e8:94:7e:3a:49:25:
                    76:37:31:7c:c6:bb:67:1a:97:8c:46:f0:0d:ce:91:
                    6e:4f:02:cb:cb:9c:4a:a3:25:62:d0:a5:67:60:52:
                    9c:c5:be:15:80:52:b1:76:10:83:de:7a:1a:cc:86:
                    05:47:0a:67:e5:51:ef:aa:0a:f5:7b:50:b3:fb:cb:
                    ef:39:7e:20:3e:cb:40:95:1f:f2:9d:9c:db:95:52:
                    4a:07:01:29:fd:68:f2:3b:e3:3f:d2:48:3f:bb:6f:
                    13:3d:5c:f0:69:4d:ff:99:cb:20:05:f0:85:e4:86:
                    68:fc:f0:8e:51:99:77:94:b7:42:f7:4b:49:23:5e:
                    77:8e:12:d7:e8:ba:cb:5a:a9:6a:12:59:47:11:7c:
                    a8:86:c4:ed:d5:04:49:c1:91:c3:d7:50:71:f4:bb:
                    8c:32:9c:97:97:5e:7b:c8:04:ed:f1:8a:f3:fe:b1:
                    29:b1:c0:6e:98:5d:78:68:f8:b9:c1:c1:2b:cc:ea:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:EC:0E:B2:EC:B3:49:A8:B5:FA:23:34:CA:CD:EB:DE:6A:68:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0977776-426d-3da8-932d-45f82d8ecbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.39.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:f0:d1:78:65:e0:21:74:ac:4b:bc:b4:85:26:a4:b8:c1:f6:
         99:60:cb:58:d8:6f:11:3c:64:ac:a0:b5:f0:b8:13:a4:6d:ed:
         da:ad:45:b1:79:a4:32:e6:db:6d:ee:c6:32:d9:57:40:fa:74:
         2d:18:db:d3:83:f5:29:8b:94:9b:cc:6a:da:a4:42:e1:8a:70:
         0a:86:d4:f6:d4:6c:2d:98:c6:6f:0d:f7:4b:25:05:05:eb:f2:
         69:a1:ba:09:68:e1:ae:3d:91:fc:81:91:94:06:67:58:0b:07:
         fb:a4:40:e1:71:2f:21:57:1b:f4:5d:4b:a9:88:b3:79:f4:96:
         fc:79:a8:aa:54:ff:19:3e:42:3a:7a:4b:d5:83:b8:a8:77:c7:
         55:b8:ca:ef:93:de:28:d1:b6:f3:b9:fa:f6:33:9b:c8:d1:aa:
         78:51:b5:9f:d6:79:50:47:6b:6f:09:8c:1c:5e:f1:a4:37:00:
         d2:fd:b6:76:98:b5:cc:08:ef:d8:99:69:19:20:26:ec:78:69:
         7e:25:12:24:57:f5:2d:8b:ef:d2:89:dd:69:d2:ae:4f:70:c0:
         b2:2a:63:0b:05:5f:bf:80:50:05:81:6b:54:7c:02:8f:ad:76:
         e7:9b:02:ef:0f:44:fc:15:f9:50:6a:3c:9c:d0:61:8f:dd:cd:
         04:40:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:49:17 2025 by rpki-client