Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e125b96e-853e-3637-875b-d5b8b505a52d.roa
File:                     e125b96e-853e-3637-875b-d5b8b505a52d.roa (raw, json)
Hash identifier:          icqD+wyb4OlLGNXCeN1cwiL0/vQ83MCyNFBgx2Qpe2Y=
Subject key identifier:   92:EF:63:96:C6:DD:EF:84:44:BE:A2:05:FE:CC:D9:8F:60:F0:62:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA67E539448BD584647210
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e125b96e-853e-3637-875b-d5b8b505a52d.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.49.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:67:e5:39:44:8b:d5:84:64:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d6d5c6dc-7cce-429a-95de-c336878b7d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:6c:58:2c:c8:aa:04:23:c0:0a:a6:62:d4:
                    63:30:0e:5a:1f:ae:09:ea:f8:75:62:31:fe:54:c5:
                    1b:a4:9a:e4:0b:86:ed:d9:83:15:9e:cf:15:19:4e:
                    8d:d6:68:bd:51:3b:ce:25:02:79:f4:49:4a:78:8a:
                    e4:64:12:0d:15:e7:de:4c:84:50:27:e5:f7:2c:e3:
                    7c:55:72:39:32:89:d9:dc:f7:83:d6:37:99:64:ee:
                    da:19:32:61:35:44:1d:74:bb:05:41:e1:22:b4:91:
                    df:e1:58:94:ea:50:c5:75:fc:94:83:7e:8b:e9:56:
                    e3:70:c2:02:5e:29:9c:ea:09:80:a0:7d:46:e2:70:
                    2a:f4:eb:d1:cd:34:ac:76:bf:f5:8c:be:67:31:d8:
                    20:63:bf:d6:d6:01:5c:a9:9e:68:f0:4c:85:1c:ed:
                    19:2b:6e:b1:c8:bd:16:de:37:b4:47:4f:d1:3e:11:
                    92:a6:0a:9f:65:81:52:55:41:e8:28:e7:bd:98:ad:
                    b8:31:6b:fc:12:d1:53:c5:1a:8f:37:a1:b0:56:a8:
                    97:bb:13:fd:99:ed:7e:28:e9:45:36:c9:10:15:41:
                    f9:ac:dd:76:a3:3a:e0:72:83:8e:6b:0b:f4:25:22:
                    ee:c7:9e:6d:7f:8a:2f:ef:57:85:0d:83:c8:ed:e8:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EF:63:96:C6:DD:EF:84:44:BE:A2:05:FE:CC:D9:8F:60:F0:62:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e125b96e-853e-3637-875b-d5b8b505a52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7a:e3:c0:fe:7d:33:26:09:74:30:61:db:42:a1:df:4e:4e:
         0d:2a:e4:5e:c7:fb:05:63:ed:cd:ff:72:78:98:27:e6:2b:5d:
         cd:60:0c:a1:99:2c:34:2f:3b:20:80:d0:5b:ee:f1:69:59:5e:
         27:05:53:2c:60:8e:8f:2c:c9:9b:07:70:a1:30:0c:97:44:9f:
         dd:15:52:14:63:76:2e:db:1c:69:b4:45:4f:ab:b5:43:f9:d7:
         5e:69:ce:7e:0f:3e:ab:47:03:d9:c8:ac:85:f6:bb:29:32:41:
         5e:2b:03:db:54:e1:e5:48:43:93:9a:82:7d:f2:00:c7:c9:7d:
         d4:a5:8e:5d:22:6d:b0:a6:04:f9:89:dc:30:04:8b:4d:76:6e:
         4a:51:69:14:c8:01:ea:32:85:b0:57:36:4c:8f:41:c9:79:e3:
         db:31:11:44:23:bc:f9:b3:62:7c:ff:bc:7b:ce:d3:00:c7:b1:
         66:c7:ed:6c:93:5e:ca:6d:56:c8:99:31:62:38:11:be:47:37:
         cf:db:c9:9c:93:f8:b9:7f:6a:54:c6:dc:d9:d6:0d:6d:55:bf:
         0a:2e:1e:30:09:3f:ab:38:dd:00:7c:1f:c7:b4:59:fa:bd:9a:
         55:14:c2:3a:43:e7:12:98:0d:4c:ac:18:3b:b4:a8:57:4d:0d:
         dd:0c:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:35:39 2025 by rpki-client