Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa
File:                     4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa (raw, json)
Hash identifier:          EYbaJAO2tREXxKlXpvswbow9rdt0A3VTPBe47a3TtLY=
Subject key identifier:   AD:6A:3E:4B:BF:A2:8F:B5:BD:4A:99:39:38:0C:EF:CA:6F:CA:59:D5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA933E7BE7D3D072E367B0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     855
IP address blocks:        142.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:93:3e:7b:e7:d3:d0:72:e3:67:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6eed1bf3-3300-4f2b-ab48-07b942688c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:27:3e:86:5d:db:65:ba:e1:6f:2f:c9:de:
                    56:52:d8:ec:de:46:59:cd:ff:55:dd:fe:74:8a:90:
                    0b:81:13:9f:03:e0:bc:8f:ec:b7:d8:de:97:4b:64:
                    ab:cd:87:ef:14:e1:4f:13:48:17:11:74:59:80:9e:
                    a2:a9:cf:bb:d7:35:3d:91:8b:07:a5:89:75:29:37:
                    32:cc:aa:86:2e:c4:5b:1b:18:60:fe:af:d8:12:27:
                    09:91:82:a3:15:0d:71:33:1f:64:23:8a:9e:1a:05:
                    23:13:b7:8c:ae:62:4f:b6:66:f9:80:9c:10:1c:d7:
                    66:7c:b2:fa:06:fb:da:b5:64:68:ae:1a:fa:8a:41:
                    c2:de:b8:71:4c:71:ad:43:39:17:04:09:20:0f:55:
                    65:20:74:77:52:64:2c:fe:0b:c9:e9:34:94:c5:c7:
                    db:28:8e:72:dd:a3:02:3f:46:2b:63:11:87:5d:1c:
                    cc:72:8f:6a:7b:d4:d9:79:5b:0b:e2:83:c2:fd:e5:
                    0f:26:32:ae:be:0f:9f:7c:d4:17:91:9a:a6:38:1a:
                    8e:ab:0e:cb:e6:48:01:f8:17:45:88:24:1e:2b:89:
                    e9:d9:e3:69:0e:ad:fe:ba:73:6c:66:53:b4:10:cc:
                    90:4c:a9:aa:60:c3:e6:2b:2e:62:aa:a0:8d:9e:3b:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:3E:4B:BF:A2:8F:B5:BD:4A:99:39:38:0C:EF:CA:6F:CA:59:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ac2b62a-3a43-3f1e-b1ea-43b1b34df8fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:87:b5:95:47:3f:b2:3b:a8:55:c0:aa:31:c7:88:2c:09:e5:
         33:2d:88:1d:98:b6:51:84:e2:5b:4f:d1:03:56:04:59:25:6f:
         81:90:51:ff:8c:1f:6e:d7:78:2f:df:2f:08:07:76:24:1c:68:
         2f:a7:9b:a2:6f:a8:50:da:ea:97:dc:84:7b:f3:a0:1e:9d:b7:
         f7:ec:29:03:c5:b8:58:d2:32:4b:03:dc:3c:b0:47:d4:c3:5c:
         ca:c2:98:60:b8:b2:b9:06:13:0f:47:5b:43:e7:f2:42:dd:bc:
         3d:bb:16:1a:ed:20:64:dc:b9:c6:9c:1f:35:dd:36:1f:fd:8b:
         7c:e4:23:13:d8:7e:fb:f4:de:00:be:94:8b:52:b8:d4:e5:0f:
         78:40:00:d1:91:2c:f8:20:74:db:c1:51:e9:3b:4c:45:76:62:
         3c:41:04:b9:c5:d0:ce:d3:e4:57:26:ab:62:ac:97:f6:8a:2a:
         c5:0d:93:b3:aa:1c:9e:bc:7b:f4:ff:cd:90:5b:72:d8:81:c8:
         f1:b2:4b:96:f8:8b:61:a9:2a:16:4b:a9:45:2e:63:ea:32:b3:
         cd:f0:ab:d6:7e:6d:03:53:89:da:10:30:80:c6:ca:49:d3:50:
         94:bd:88:79:f4:9e:49:07:56:12:d9:8d:c8:97:af:7c:dc:43:
         05:8a:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:29:52 2025 by rpki-client