Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f228cde8-4fe2-30f1-ad6c-d3fadc627a26.roa
File:                     f228cde8-4fe2-30f1-ad6c-d3fadc627a26.roa (raw, json)
Hash identifier:          qXPmbFIZkta0nSEIVq2vXTJcQEbU5+nc621gY7z400A=
Subject key identifier:   92:CD:01:86:98:89:E5:0D:F0:91:CC:3C:C0:4E:1A:06:4A:3E:AF:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA577603B5D8C453331580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f228cde8-4fe2-30f1-ad6c-d3fadc627a26.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.37.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:57:76:03:b5:d8:c4:53:33:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=27f3a100-5201-489c-9c14-a4d86af52892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:c9:ec:48:1d:2c:71:30:5b:00:a6:5a:dd:
                    16:e7:cf:a7:e2:98:7d:28:f9:cd:a3:1e:25:70:54:
                    5d:fe:4d:b3:40:8d:4d:25:82:13:3e:db:c5:79:9a:
                    ee:a3:da:67:7f:84:ab:70:f6:ba:cb:23:2b:fe:a8:
                    dd:ac:da:6a:81:0f:96:d3:8b:25:75:cf:36:76:2c:
                    75:a8:33:b6:c6:a6:d1:53:d2:13:3b:fb:18:b3:32:
                    25:56:d2:fc:62:da:5c:33:05:29:f9:52:0d:93:1b:
                    84:6a:37:b2:6e:44:78:b9:7c:11:35:87:f9:cf:b4:
                    d3:85:c4:c9:e5:7e:b4:3a:61:e6:83:6e:89:03:25:
                    4e:46:e5:88:21:31:a3:02:de:52:81:1e:b7:00:25:
                    14:23:e4:34:3a:6e:9d:73:cc:51:16:7c:e1:89:be:
                    5d:c6:ad:6b:e0:ba:61:2a:35:21:05:39:72:ab:85:
                    74:17:cb:c4:e7:8a:fc:57:e8:af:f8:6e:b9:22:29:
                    b3:b2:a2:a2:b7:be:d2:e7:7f:86:a2:22:1a:d5:f5:
                    57:1f:b2:f7:73:07:cb:77:a3:13:34:7e:36:c6:0a:
                    13:49:67:6a:73:be:c4:cb:f1:1b:19:d8:8d:a7:65:
                    a7:f1:dc:a8:2b:9a:aa:0e:ab:50:03:d6:d7:ed:46:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:01:86:98:89:E5:0D:F0:91:CC:3C:C0:4E:1A:06:4A:3E:AF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f228cde8-4fe2-30f1-ad6c-d3fadc627a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:dd:4c:cd:fb:0b:29:ae:7e:55:2e:a5:d4:d1:b5:84:03:
         b9:cd:44:ed:55:04:dd:90:13:4d:3b:0e:51:28:85:1e:46:41:
         3f:13:5c:dd:5a:a5:c8:ec:4b:29:d6:73:28:25:11:f1:4d:4d:
         65:42:15:7e:01:05:fb:eb:8c:ab:7b:c6:12:96:d0:46:7b:f5:
         4e:bf:32:29:e0:eb:cc:de:4c:06:2f:6b:22:3f:39:af:57:df:
         87:79:39:bc:9d:04:b5:a0:2d:54:99:cf:c1:12:4a:51:05:94:
         b2:b0:86:b4:33:f6:78:28:57:a5:84:ba:c0:3f:3f:16:6d:d0:
         a3:ab:8d:09:aa:c4:d3:8e:83:b0:f9:7f:93:53:44:77:3b:37:
         25:64:08:cf:f6:1e:ae:76:39:12:20:6e:21:ef:0a:95:df:93:
         05:94:ae:8b:4a:eb:b9:55:4f:54:3b:ce:dd:78:f7:ec:f0:7c:
         3d:ea:01:a5:4a:03:89:8a:30:5a:6d:04:10:40:fd:6e:23:85:
         e8:eb:42:13:c1:e8:a8:1c:7e:af:7b:eb:99:a3:72:f5:b1:95:
         88:96:f8:2e:05:4f:7f:ee:4c:34:ef:80:92:71:61:8f:22:06:
         75:a0:b5:5e:21:8b:75:62:15:2a:52:65:4e:53:8c:98:73:78:
         bc:cf:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:50:31 2025 by rpki-client