Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e125b96e-853e-3637-875b-d5b8b505a52d.roa
File:                     e125b96e-853e-3637-875b-d5b8b505a52d.roa (raw, json)
Hash identifier:          y6t3jSpjSf/KlyNjmOYvq//eiryHrzpt4idrk30ZQ/s=
Subject key identifier:   05:CB:96:06:BA:C6:81:15:FF:55:BD:C2:85:E7:AB:AF:FA:64:11:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431FE8E54615327EB7E9080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e125b96e-853e-3637-875b-d5b8b505a52d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.49.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:fe:8e:54:61:53:27:eb:7e:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=a23354ab-ad65-40fb-93b8-66e2d28bd745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:72:68:e8:e4:03:f8:8c:be:d3:d8:65:e7:
                    da:e6:d1:21:9a:60:0f:b6:9c:bf:8a:fa:0b:7e:34:
                    4c:fd:1a:b8:bc:20:53:27:86:1b:28:71:ac:7e:e9:
                    41:b5:a8:a5:e5:36:ff:26:76:18:a2:92:6a:b7:b2:
                    00:52:d1:d1:db:b4:82:93:db:37:7e:ec:83:c5:09:
                    e9:7e:2b:5a:9a:7a:18:1b:a0:80:2c:f8:dc:44:95:
                    19:66:48:d5:31:7b:0c:62:22:8d:fd:e9:c7:71:cf:
                    b4:46:9a:ee:71:90:3d:e9:4b:93:8f:56:0e:d2:0e:
                    06:c7:1c:ef:c4:be:e8:78:62:bd:18:8c:d6:30:e3:
                    da:b3:ee:1b:b1:92:4c:00:56:4d:3f:90:0a:b9:cd:
                    06:ef:9a:a8:73:79:ff:52:b1:77:0e:d9:19:f3:79:
                    ad:c7:53:78:f4:f5:68:65:aa:31:a9:0d:47:11:f3:
                    19:34:68:86:3c:c7:3e:fa:76:16:e5:18:c6:dc:88:
                    71:84:2a:6d:58:a1:13:5e:51:eb:fd:b1:0e:a9:20:
                    58:6f:81:0b:dc:af:7a:4a:66:17:d9:84:d5:6f:05:
                    63:bf:1d:58:56:47:6c:eb:fe:cc:9b:f7:45:75:f9:
                    15:68:29:8f:34:4a:2e:a7:27:d1:84:73:c0:6f:e9:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:96:06:BA:C6:81:15:FF:55:BD:C2:85:E7:AB:AF:FA:64:11:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e125b96e-853e-3637-875b-d5b8b505a52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:16:5c:d5:a6:fe:1c:fe:c5:02:b5:4f:6c:ec:a2:56:1a:a7:
         77:c5:8a:68:32:1e:87:64:5f:8e:cf:a6:84:84:6c:0f:f2:12:
         d8:8a:f8:06:30:35:e0:e5:a3:c3:d3:8e:76:e6:fe:fa:85:d1:
         c8:34:e7:15:09:9c:1e:23:e7:d6:a8:17:5c:d6:dc:a5:ac:ed:
         be:38:1a:72:83:0c:10:bb:17:c2:7f:d9:10:c4:e2:2d:2b:2f:
         7a:01:ac:2b:5f:cf:18:d1:2a:9f:54:47:99:78:53:9b:98:8b:
         d2:69:4d:cd:6b:64:52:6d:08:dc:4a:aa:48:eb:0b:fb:92:2e:
         85:6b:b8:4c:11:cf:82:01:4f:e7:f7:b7:35:3a:b5:01:1c:eb:
         05:e7:74:d7:0d:ad:55:3b:b5:dd:47:6e:c2:1b:58:f3:b8:0b:
         e8:e8:eb:d9:40:6c:43:1e:37:5d:76:e9:8c:0f:38:47:b7:b2:
         a6:ab:ea:3f:b2:9e:32:69:e4:dd:07:4b:9e:f4:70:36:3b:05:
         53:e5:2b:2e:56:b5:ef:16:96:0d:9a:3d:65:da:70:56:1f:94:
         60:b9:3e:89:98:5f:28:6b:8e:75:78:de:1f:2d:2d:8c:05:60:
         ae:9a:df:50:23:3c:70:c7:83:cc:29:ef:37:4c:f0:9a:26:18:
         1f:ea:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:31:35 2025 by rpki-client