Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f337a182-96e0-3cfc-9ac9-3c388d3674a8.roa
File:                     f337a182-96e0-3cfc-9ac9-3c388d3674a8.roa (raw, json)
Hash identifier:          B4EdYLbNpFUce5z4sDu9tBkIbh13eVnQ0ZC2R1vptbw=
Subject key identifier:   4B:3C:C7:B3:96:21:87:B3:3F:F0:AE:79:DB:DE:D9:F3:69:07:EB:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F77DD46898A18B0203B780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f337a182-96e0-3cfc-9ac9-3c388d3674a8.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.32.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:7d:d4:68:98:a1:8b:02:03:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e2385505-e571-4731-bbb9-ab04bdf3662e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:b9:b3:56:0b:ea:5b:fc:71:00:a3:d7:b3:
                    19:8a:6d:ff:33:b4:d1:a1:f7:da:03:bc:0f:dc:ce:
                    9c:ec:b8:e5:0f:62:55:e7:cd:d1:4a:87:cc:ab:41:
                    58:92:00:0f:06:11:b1:40:2a:62:87:d8:41:ac:d3:
                    e6:41:fb:50:47:7b:d8:ae:b4:f5:68:ca:9c:57:65:
                    ef:82:be:75:d0:68:3e:b9:4e:15:68:b0:d6:7a:41:
                    31:85:23:3d:5e:11:2d:fe:8f:c1:60:1a:40:bb:05:
                    30:ac:5c:37:55:71:60:6d:74:ac:61:4a:57:60:43:
                    38:0c:6c:0b:d7:ed:49:9e:61:34:99:7a:53:eb:27:
                    71:70:53:cf:c1:e9:0b:ca:b2:80:c4:30:20:2a:62:
                    74:37:88:a1:ac:0c:14:5b:3c:2a:e3:29:58:a6:05:
                    09:ab:55:b3:fe:04:ae:3b:74:d8:d5:f1:27:8f:c3:
                    53:f8:4e:c1:84:4f:62:a3:55:1d:f1:0c:cd:91:ab:
                    59:19:1f:9a:02:97:fe:bf:90:84:20:fd:d5:3a:cd:
                    21:77:2b:99:ef:10:ae:7e:38:60:5e:8d:ae:f4:f8:
                    f8:77:1d:c0:a9:54:0b:00:af:09:7c:89:05:91:45:
                    d6:fe:b7:9c:fd:f2:0e:c9:c7:15:53:d2:19:8d:f3:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3C:C7:B3:96:21:87:B3:3F:F0:AE:79:DB:DE:D9:F3:69:07:EB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f337a182-96e0-3cfc-9ac9-3c388d3674a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:c2:62:e3:09:43:e4:6c:28:3a:b3:1f:99:17:fb:0a:23:
         0b:73:3e:e9:b6:3d:cd:b1:e5:f8:5c:a7:d2:36:b0:cb:0b:fd:
         99:4f:ac:32:76:ed:83:2f:e8:d3:4c:48:47:97:f4:e4:de:f4:
         95:c2:db:da:05:a2:59:21:a5:cd:ad:29:d1:0b:17:fe:a6:5c:
         d1:1f:65:6e:7c:79:ae:1c:0c:b1:ff:e9:71:de:6e:08:dc:e4:
         e0:93:1a:9d:08:b9:b0:74:c1:2e:da:c1:aa:28:fe:84:96:8c:
         49:1d:b7:53:ee:e3:f5:9f:f7:31:93:97:da:a5:35:66:a6:2c:
         e1:b7:cb:ea:78:c4:5c:b9:89:91:34:01:ca:c3:b6:eb:14:46:
         2d:26:8e:c3:ed:79:72:c6:0e:89:96:45:c2:cb:68:08:1c:4e:
         b5:b0:16:8d:8f:e0:72:f0:fb:e9:80:5f:03:bd:c0:af:2c:29:
         7c:4f:0f:fa:4d:26:68:22:55:02:c5:d1:34:37:a3:2a:24:50:
         66:cf:83:a1:ec:5a:2a:fc:35:3d:2e:9d:a2:53:f4:1d:cd:4c:
         ba:ac:93:4b:65:0e:d8:cf:19:ea:97:b3:40:74:8c:50:f2:ae:
         84:36:fc:75:7b:2e:0e:8f:1c:bf:1b:8a:bf:d1:a2:9f:a9:5a:
         be:5f:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:40 2025 by rpki-client