Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7c1ad9e-77f3-3198-9692-4aec6f356d76.roa
File:                     e7c1ad9e-77f3-3198-9692-4aec6f356d76.roa (raw, json)
Hash identifier:          80EEF0zZo2akP6WFw622lZ2VpEIUcColmfm5cOIfOR4=
Subject key identifier:   FA:24:14:1C:23:39:85:F5:83:EE:2A:54:89:09:24:BF:2C:88:1B:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05DE5D16B4FD9C5704A400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7c1ad9e-77f3-3198-9692-4aec6f356d76.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        68.81.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:de:5d:16:b4:fd:9c:57:04:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=99568dde-7ffc-4ccc-a605-5a40eef99bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:32:05:db:a4:84:8e:7f:4f:f1:f5:b1:33:
                    e7:62:75:d8:3e:f4:16:a6:b9:a3:f0:fe:87:9c:b4:
                    14:af:8f:c0:18:14:dc:a1:bf:95:9e:6c:66:8a:cb:
                    ef:df:67:4d:72:e2:ed:09:e3:dd:31:af:01:07:ec:
                    23:d1:a3:da:c3:7a:20:27:82:a6:3f:37:71:a5:fe:
                    fa:e2:9f:b9:35:31:17:b6:8f:74:18:41:71:5d:0b:
                    39:b5:12:c8:ff:0f:cf:2b:f0:58:ab:96:84:cc:9a:
                    d6:a4:f5:a0:7c:ef:ac:bb:2d:8e:61:ec:e2:47:76:
                    23:d4:44:58:21:f2:97:f8:f1:c5:61:ab:13:84:1f:
                    36:51:94:6a:3a:10:b6:11:fc:20:ae:18:4c:79:d2:
                    fa:11:ed:2f:8c:0a:a9:ad:d2:9b:43:82:d9:6b:05:
                    a5:eb:cc:80:4b:98:a0:d4:43:1a:90:b7:88:d4:5e:
                    be:bb:95:28:47:8b:71:23:d6:2c:46:e7:a6:63:e5:
                    35:ff:ec:ec:55:aa:8e:54:77:93:b1:c7:22:fe:e2:
                    de:5b:79:5e:75:08:00:02:7e:a9:c3:3b:3e:10:a6:
                    ed:22:62:fd:a0:04:00:38:22:2e:66:be:58:45:20:
                    2f:07:01:19:a5:d5:d6:43:ce:62:aa:e5:4b:3d:ca:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:24:14:1C:23:39:85:F5:83:EE:2A:54:89:09:24:BF:2C:88:1B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7c1ad9e-77f3-3198-9692-4aec6f356d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:7c:13:ad:cd:28:e1:e6:2b:ea:9b:52:3c:06:1e:d8:e1:
         df:72:48:84:c8:ec:ad:a9:cf:04:6f:ae:71:71:9a:a9:23:aa:
         a5:a3:10:18:51:1b:b3:6d:41:76:66:69:fb:51:3d:db:50:4f:
         23:01:68:4d:57:b7:26:79:d9:48:10:3c:80:de:fc:e1:b7:18:
         1a:bc:b8:e5:65:df:ec:7f:65:2d:0e:87:68:7c:eb:ed:3e:2e:
         70:ea:a9:ff:e1:6f:fe:30:f8:bd:05:b5:34:e2:15:dc:3e:5c:
         c5:ea:1d:13:13:ac:ba:d7:5b:ed:93:66:f4:2d:27:68:a0:ba:
         26:81:96:9f:b7:fb:17:5d:09:f8:cc:80:33:51:e6:df:36:cc:
         d4:13:0d:5c:01:12:0f:b0:00:61:c1:61:5a:51:b8:08:a3:8b:
         1f:1c:39:8d:00:c6:32:f5:05:7b:4a:18:9b:f1:72:5f:72:a9:
         87:51:c8:f6:07:7e:fa:4f:05:e3:ad:6d:77:06:c5:a5:b9:d6:
         c4:36:62:30:5d:33:3b:9e:2b:3a:82:47:ab:da:96:23:65:98:
         2b:f6:29:2f:16:8f:3c:c8:35:7b:95:8e:22:12:01:83:a6:10:
         c2:b6:46:82:01:80:10:03:6b:29:07:2d:44:74:fe:de:7d:c7:
         9e:65:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:45:17 2025 by rpki-client