Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec4ca0a7-a5c4-3a40-aefd-5d65e7abe31f.roa
File:                     ec4ca0a7-a5c4-3a40-aefd-5d65e7abe31f.roa (raw, json)
Hash identifier:          0GlT7KvQOVlvEtTsvtocvvLkMFkjvm7ZGJlWbq4B0UQ=
Subject key identifier:   B2:72:A5:BA:DB:A4:84:88:A6:84:8B:23:C3:67:EA:01:5B:16:94:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0742BC595CAC00BE5FA300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec4ca0a7-a5c4-3a40-aefd-5d65e7abe31f.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        68.83.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:42:bc:59:5c:ac:00:be:5f:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=bc8c69df-dc68-4688-8f91-67bf47ab7f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:4b:54:b4:21:ee:bf:db:49:be:d5:cf:79:
                    91:41:da:71:c9:63:6a:b8:9a:2c:d3:2b:02:26:59:
                    01:96:a3:9f:27:2c:3b:aa:3f:1d:58:1d:f7:ce:36:
                    74:7c:d1:1c:6c:53:41:d3:c0:95:c3:e6:b0:6a:6c:
                    cb:be:7c:94:75:b2:d1:4c:a2:3e:be:d1:93:da:50:
                    28:50:fe:a0:3b:1d:05:87:54:51:ca:5e:5a:91:ee:
                    1b:d9:2a:3e:7f:c5:a9:74:c0:0d:36:05:8e:cc:da:
                    29:73:40:ba:1c:c2:bc:71:f5:a2:e0:81:cf:7a:99:
                    36:ca:30:c7:7e:0e:03:bf:ab:1d:13:b6:76:c5:49:
                    c4:b2:b5:49:b5:5e:17:58:96:b0:97:30:2b:f6:21:
                    23:44:00:2c:52:d3:e9:9e:f2:82:e5:67:af:88:3f:
                    60:2f:aa:ab:b4:42:04:9d:69:e6:db:e2:1b:7a:5d:
                    17:ae:fb:b0:de:f8:76:a0:a2:0a:a6:ae:cd:ca:43:
                    ef:54:1a:64:5e:51:de:49:17:ba:d5:29:bb:55:ed:
                    a8:ad:75:62:1c:d2:5f:d4:5c:71:86:04:3c:8a:22:
                    ea:2d:47:43:d1:45:fb:09:b4:b0:45:78:19:3b:f8:
                    cc:2b:91:af:de:65:18:5b:f0:0f:17:6b:3d:b7:bf:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:72:A5:BA:DB:A4:84:88:A6:84:8B:23:C3:67:EA:01:5B:16:94:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec4ca0a7-a5c4-3a40-aefd-5d65e7abe31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:1f:c1:c6:ab:a1:af:7f:35:91:6b:48:64:4c:2d:db:06:
         6a:19:0d:86:16:e6:04:27:ff:7d:34:0c:2b:18:82:01:0d:d9:
         ae:71:18:01:0b:1f:bb:27:cb:a2:7c:d1:3c:e4:c3:27:43:40:
         88:69:0d:6e:09:f0:23:f7:fd:8b:4f:6f:13:df:47:35:2d:fc:
         d3:6e:17:3c:14:a8:90:14:e7:80:e1:ea:06:61:48:22:b5:5e:
         b3:2a:75:b7:eb:aa:6d:ff:d6:2b:21:a5:af:1c:40:61:d7:79:
         d4:92:41:a3:ac:76:bf:1d:8d:be:d1:97:b2:52:a4:49:4f:81:
         df:0d:a4:49:ab:e2:82:95:73:31:2c:6a:3b:b2:d7:e3:51:52:
         ba:ce:47:5e:2c:cf:5c:9b:f2:94:79:56:7c:09:85:fc:06:92:
         1f:cb:72:ae:0d:79:cb:59:f7:0e:21:ab:df:f5:4d:2a:aa:98:
         b5:e5:d6:6e:87:d1:70:3f:0a:79:19:f9:5d:59:a5:9b:30:09:
         b8:c5:63:7d:cb:fc:6d:a1:e0:6d:33:f7:da:83:a6:0f:46:40:
         a4:a7:28:19:d4:fd:d2:36:11:be:3f:de:e5:cb:a0:b7:ce:6f:
         45:47:63:a6:27:ee:4b:8e:d1:ad:a7:e8:04:3e:aa:ba:93:29:
         b1:00:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:48:46 2025 by rpki-client