Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee5f1f25-15ab-374d-8863-89cc328f8aed.roa
File:                     ee5f1f25-15ab-374d-8863-89cc328f8aed.roa (raw, json)
Hash identifier:          baFardq8VdThzffliqvz78cKseD2jKJppynd8MHdYh8=
Subject key identifier:   B9:46:2B:56:36:90:66:1D:D8:2F:D1:29:28:E0:44:E1:14:60:A9:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4320198CB58A5D43F6F7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee5f1f25-15ab-374d-8863-89cc328f8aed.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.55.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:01:98:cb:58:a5:d4:3f:6f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=0955148a-1cdb-4acc-8b65-01701d1b50a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:53:9d:62:92:c4:62:26:4a:1f:85:13:23:
                    7f:ab:6b:26:92:6a:eb:9f:c1:3d:e6:ff:fb:0e:4a:
                    17:fc:ac:54:db:39:a7:2f:d2:22:e0:3f:72:f6:c4:
                    f9:7a:69:a9:cb:11:45:9c:a3:79:02:89:f9:c9:1c:
                    bc:45:1f:38:d8:b6:99:dd:a4:e8:1c:8a:52:31:2e:
                    bb:96:29:85:7c:6a:30:f2:88:02:7a:1c:84:11:f8:
                    7f:d4:12:ce:ef:10:b9:ee:3e:ca:da:28:bd:ec:cf:
                    c6:14:63:2e:0e:97:ed:5a:94:cc:70:34:1d:ba:82:
                    80:ff:f1:25:51:70:8d:8a:f2:57:27:e2:cc:c4:d8:
                    53:c7:ff:b2:56:f2:aa:b1:96:f8:fc:9a:11:be:7b:
                    c8:3d:14:bc:33:2a:aa:88:c5:df:60:a4:bd:13:8b:
                    7b:90:3a:11:65:ab:ca:72:14:74:07:ea:c6:12:11:
                    6a:a7:28:87:f7:e6:1b:c7:9b:5f:2c:6f:8a:f2:91:
                    21:46:75:73:1a:71:c5:3a:37:60:3e:bf:7f:07:a9:
                    0b:40:cf:7f:05:8b:da:31:e7:ef:69:78:b9:ec:70:
                    38:32:50:46:5e:50:ec:e2:a5:d9:3a:6f:5c:b0:5f:
                    b8:b0:fe:e2:20:9b:0a:af:95:d6:28:c6:1b:8e:7a:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:46:2B:56:36:90:66:1D:D8:2F:D1:29:28:E0:44:E1:14:60:A9:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee5f1f25-15ab-374d-8863-89cc328f8aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.55.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:62:09:30:4f:b4:fe:3f:87:57:26:eb:31:0d:bd:0e:f3:
         45:8d:42:c3:30:58:c2:23:e7:7d:35:9a:5e:87:5c:9d:ba:b2:
         dc:de:08:27:df:65:41:63:ab:25:cf:f7:57:40:86:4b:33:26:
         68:98:2f:7d:1b:6a:c6:49:95:6b:e6:33:f0:21:0b:33:cc:00:
         bb:ab:4d:cc:c8:f6:83:bf:c6:e2:f6:67:d8:f5:6d:48:c7:b8:
         58:d8:53:7c:e3:1c:21:c1:bf:16:95:ce:b7:84:d6:3d:fc:1f:
         66:42:d6:da:19:b6:c2:52:3a:08:4e:2a:ae:5f:73:cb:fc:71:
         db:65:15:e1:c9:9f:f8:9a:1c:95:05:3c:e1:f5:27:e0:5e:cb:
         58:ce:cf:43:ec:c7:92:49:4b:d5:1c:d3:81:24:7f:08:77:99:
         1e:92:b8:7a:33:96:08:89:99:50:5b:af:bb:f0:ea:39:0c:a7:
         5a:17:5d:db:68:1a:df:84:76:2e:44:2f:b7:36:81:b4:bf:e1:
         aa:5e:05:44:39:dc:45:42:72:86:9e:69:94:d0:20:31:da:af:
         2e:50:3c:52:c6:26:8a:f7:44:c0:91:40:e6:dd:0e:4f:c6:ac:
         e9:fc:68:36:1a:fb:4a:d9:c8:4d:7d:63:fe:8a:74:38:37:a7:
         fd:e1:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:19:34 2025 by rpki-client