Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef710efe-36e2-380f-b9db-d7dfcf1e2cc6.roa
File:                     ef710efe-36e2-380f-b9db-d7dfcf1e2cc6.roa (raw, json)
Hash identifier:          fb82ooKJCbbA+SFrI78z18u5uTnX+ifVgnvc5tuobN0=
Subject key identifier:   B1:E3:B6:15:76:8E:88:47:B5:05:16:E4:4F:E9:8E:66:B2:B0:BC:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430A41BDF5DA6C9210162C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef710efe-36e2-380f-b9db-d7dfcf1e2cc6.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.43.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:a4:1b:df:5d:a6:c9:21:01:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=27ffffef-db2f-459e-a621-94ab3c414290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:ba:b8:20:8a:6d:fd:8a:df:a0:bb:eb:79:
                    d8:d9:3c:a4:ee:a8:76:96:3c:ae:f7:82:3d:d4:4d:
                    22:ff:ac:a4:fc:34:b2:0a:f1:5e:2e:af:a9:69:b9:
                    fa:03:7d:08:a8:98:59:5b:e0:f4:47:73:f4:df:99:
                    0c:56:40:17:91:a0:94:ab:82:1e:33:7f:28:9f:69:
                    3c:32:6e:8e:ce:ed:bf:52:d9:6d:a0:3f:c2:1a:c6:
                    82:bd:ce:d2:35:9d:65:d2:01:67:8a:07:cc:57:12:
                    fc:dd:60:a3:e0:c8:bd:92:23:78:76:a2:46:46:75:
                    1a:18:71:f2:66:1c:75:b3:fa:9a:d9:59:e0:6b:7c:
                    00:60:08:29:8a:b3:81:d8:79:0a:69:b6:f1:9a:74:
                    9b:e4:44:19:fd:79:f1:9f:b2:66:fc:ae:27:fa:9d:
                    a2:93:fe:ef:59:e3:aa:89:32:8d:34:cb:f6:bf:de:
                    28:cb:5d:de:5a:a8:e3:6e:0e:61:98:b3:5f:c9:8f:
                    5c:1e:06:bb:da:bc:35:33:90:5b:84:a1:db:6e:58:
                    c1:92:61:5c:a4:76:f6:53:05:78:e5:c1:a3:cc:18:
                    15:76:6a:6f:9d:d3:ec:ff:42:bc:f1:d6:80:bd:6a:
                    44:03:50:d7:95:4f:4c:0d:42:5a:27:cd:b1:ac:2f:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:B6:15:76:8E:88:47:B5:05:16:E4:4F:E9:8E:66:B2:B0:BC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef710efe-36e2-380f-b9db-d7dfcf1e2cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:c4:1f:2c:87:ed:2a:23:7c:61:53:cc:7c:95:aa:83:bc:c7:
         2a:22:65:91:c1:1e:79:12:7b:e4:50:3b:04:42:07:0b:2f:14:
         73:5d:cc:f9:03:8e:8d:08:a0:6f:b0:0a:18:4f:f0:cf:e3:5d:
         4a:6b:22:d4:28:d0:3a:a2:05:2b:50:6b:e5:7c:ed:ec:50:29:
         b0:43:e7:3f:23:89:98:fc:ba:51:82:9a:fa:d2:03:b5:32:4e:
         bb:fc:2f:23:72:b1:e5:e0:48:d2:2c:6c:f9:fd:73:71:62:4e:
         12:11:63:26:c6:8d:6f:f8:ee:07:bb:0d:e9:32:4d:2e:28:0f:
         d2:b5:80:0e:c5:48:65:b7:19:47:35:64:05:4f:8e:88:28:c3:
         9a:e1:4e:23:e0:de:45:c1:73:c5:49:c3:1d:d8:75:fd:dc:6f:
         27:36:66:5c:70:9b:9c:65:3c:5c:28:ce:83:f9:24:30:bc:5c:
         97:1e:be:39:03:47:0d:7e:c7:73:3c:50:60:bd:2f:30:93:8e:
         ca:03:11:16:f7:02:c8:9b:4d:74:a7:c8:a4:4f:6c:97:1a:11:
         cc:9e:ac:bf:7d:e7:b4:c0:a5:f3:29:3b:05:04:ba:05:63:59:
         b7:f3:0c:01:84:f3:19:0f:a8:64:e1:98:9d:74:53:ee:52:e2:
         01:14:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:50:27 2025 by rpki-client