Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2c1953-f5b1-3b76-84d6-2111c5537906.roa
File:                     fb2c1953-f5b1-3b76-84d6-2111c5537906.roa (raw, json)
Hash identifier:          tGQoEGBB4qP7D1Pp/cXvOYiH2uOVCHFuuU+eC4z9NN4=
Subject key identifier:   8D:13:3C:78:70:9D:84:42:1D:1C:08:72:16:E2:4B:8A:E0:3F:9C:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06252E090009F98D0D6700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2c1953-f5b1-3b76-84d6-2111c5537906.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        67.186.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:25:2e:09:00:09:f9:8d:0d:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=9dbc6bbe-b707-412e-a4e2-212f80d74fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:ef:25:fa:f8:ad:31:b7:26:c0:43:1f:13:
                    c9:df:ca:36:0c:73:90:30:af:bd:47:4c:64:f8:bf:
                    13:ff:b1:77:07:c6:4b:cf:c3:a5:37:ed:14:88:99:
                    bb:70:42:98:5a:1e:ce:c1:7d:72:68:a1:78:8f:fc:
                    b4:c3:d0:d0:a0:2f:61:01:2f:30:bf:f0:48:96:1e:
                    3d:22:67:99:12:ba:b4:e1:ee:bf:0f:a1:49:8a:2f:
                    8b:fe:a5:cb:63:56:04:bb:96:8f:18:fc:f8:70:55:
                    49:15:e3:a5:1f:30:67:a6:80:a8:72:4f:c2:2d:59:
                    38:b1:9c:8f:c6:3d:c7:53:72:82:40:a3:2d:ec:8a:
                    8b:1e:24:4d:61:94:d1:01:7f:14:d2:e2:36:df:5a:
                    55:e7:8a:fc:6a:af:68:e2:98:7f:b4:e0:e3:3d:b2:
                    04:c4:c0:a4:87:3c:af:5d:cc:70:87:49:4a:75:ae:
                    9c:a6:b5:6e:11:14:53:6d:9f:4b:2f:01:b1:0b:1f:
                    ea:a7:36:bd:fb:e7:60:65:0e:71:c9:4e:b6:c0:16:
                    fe:31:ec:25:84:ca:e3:ca:a0:59:21:88:9c:93:b0:
                    96:a7:7b:ff:7d:f9:8f:12:b2:e3:35:b4:70:21:58:
                    55:a6:9c:ea:7e:96:f2:90:c3:ef:44:e7:86:3b:40:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:3C:78:70:9D:84:42:1D:1C:08:72:16:E2:4B:8A:E0:3F:9C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2c1953-f5b1-3b76-84d6-2111c5537906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.186.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:cc:33:89:35:19:f7:66:48:65:85:43:d7:c0:9b:28:84:
         b6:e7:b5:a9:3a:33:79:3b:b1:b5:a9:10:19:f2:58:6e:da:25:
         72:77:87:14:d5:33:78:43:03:ce:36:d2:e9:9e:a3:a3:18:62:
         fd:e7:ad:38:08:e1:cc:23:cb:40:52:74:94:0d:80:2d:ab:35:
         7e:da:b4:8e:f3:41:e6:d1:ee:f7:7a:f6:d7:bb:56:bb:ef:da:
         a4:ce:14:71:2d:d1:cb:c8:7b:da:98:9d:be:99:e4:eb:89:c7:
         e7:4a:76:2e:8a:d6:20:a0:01:41:a6:90:3c:29:ee:a7:0e:9d:
         af:3b:ae:0a:dd:bb:4d:71:4b:ef:ae:0a:71:ec:60:a4:1c:0d:
         5e:63:80:68:66:e4:d2:b1:ac:c8:f2:97:63:de:0c:28:ff:db:
         9f:4b:ad:2c:0d:60:0c:22:1e:75:17:7f:22:c4:44:7c:95:81:
         46:23:37:d1:00:5f:bb:58:43:73:ea:63:53:c0:46:bc:8f:91:
         47:47:7b:6c:84:99:39:67:34:46:5b:47:dd:3a:43:f1:01:0d:
         a1:af:d8:8b:88:e6:78:d0:b1:b0:15:a8:af:1b:e3:5a:dd:59:
         1f:89:e2:ef:ee:04:12:47:ce:98:8c:e7:8c:6f:21:80:23:87:
         8b:af:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:41:37 2025 by rpki-client