Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2675074f-3ccf-3307-b863-c4d73009aeae.roa
File:                     2675074f-3ccf-3307-b863-c4d73009aeae.roa (raw, json)
Hash identifier:          4PdDdkL5yt/AgxuX3/kvAsOEgkUXzsCZhptUw27bneY=
Subject key identifier:   C8:FE:A7:7D:24:DA:88:4F:76:50:A2:C9:7B:F7:84:EF:10:12:82:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB3B803821CB2B4D37F9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2675074f-3ccf-3307-b863-c4d73009aeae.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.32.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:3b:80:38:21:cb:2b:4d:37:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=90c0268e-791a-4c01-93c6-c230e36a8f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:08:7b:46:19:df:68:de:b8:97:24:24:28:
                    d5:60:e7:50:dc:d3:47:41:ab:d3:e8:07:b7:ad:51:
                    f1:46:0b:4a:28:15:b8:da:ba:81:07:f1:26:c7:f3:
                    05:af:53:9b:18:7f:8f:a6:cd:62:45:f2:0b:25:da:
                    ae:56:e2:5f:b4:db:32:27:4b:2b:94:7d:af:e5:fa:
                    68:76:d9:3d:ca:61:ae:82:a8:8c:b5:e5:15:57:14:
                    a7:ae:8d:5a:28:cf:5b:83:4a:66:c6:5d:4d:9e:af:
                    e1:50:97:b8:53:e0:71:d4:9c:1a:fe:21:7b:ff:6b:
                    40:94:67:9b:a3:e7:0a:67:c0:bb:f1:90:04:ec:aa:
                    64:c1:71:03:dc:72:36:4e:ec:c1:5d:46:16:f4:57:
                    73:c9:9a:e9:fc:e0:99:42:c1:56:ce:c1:1a:f0:9d:
                    15:78:53:10:70:7c:13:e4:4d:53:8e:d4:6b:17:d0:
                    9e:45:bd:83:b7:eb:8e:4e:bc:cf:c1:ed:48:ea:02:
                    f3:01:7f:a3:7a:10:ed:7c:35:c4:f8:ae:1d:5d:1e:
                    9d:d3:33:a5:e2:0f:1c:07:3a:fd:54:86:ad:af:0b:
                    58:bf:b2:75:03:66:84:86:28:15:73:fe:07:5a:99:
                    56:51:9f:59:b8:9f:02:63:63:c6:9b:2e:0d:52:0c:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FE:A7:7D:24:DA:88:4F:76:50:A2:C9:7B:F7:84:EF:10:12:82:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2675074f-3ccf-3307-b863-c4d73009aeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:a1:ab:43:8b:0b:0d:97:95:28:c7:96:61:0c:b9:d6:68:
         82:9b:61:4f:77:d9:2e:ad:33:ab:78:dd:58:fd:2f:11:ca:06:
         57:70:c5:30:aa:b9:1e:1e:12:de:d0:2b:a3:ed:a1:01:48:91:
         a3:06:2c:1c:eb:1a:49:96:36:96:d5:7f:3e:fe:e3:46:30:58:
         4a:95:2d:47:ca:04:89:2a:63:1b:50:87:93:46:8d:7d:34:c8:
         fc:6a:33:b9:6f:02:fe:58:f2:61:45:b5:6e:a6:5a:06:d3:bf:
         82:0d:f7:b1:9d:a2:6d:13:9c:59:76:f3:1c:53:40:3a:8d:a5:
         5e:84:95:aa:7b:5c:36:a1:69:25:70:e0:3c:92:3d:38:25:93:
         4f:ed:5f:e5:e3:2b:87:50:43:1c:af:15:c8:c6:24:77:35:f2:
         a3:d6:4e:f5:79:35:54:65:bb:f5:86:75:64:1b:66:1b:ad:1f:
         f2:5e:fd:ce:5a:03:42:81:92:9c:d8:6b:e6:07:de:fc:34:c4:
         60:d8:1d:9d:52:45:2c:a2:58:67:fd:b3:67:30:2f:9c:ce:6d:
         fc:1d:d2:87:7b:a5:2d:46:1f:9d:83:8b:1e:1c:b1:8d:e7:dc:
         db:36:8c:ac:ef:25:0b:d2:6c:b3:3e:ba:28:a3:1f:0d:30:3b:
         f2:7e:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:02:07 2025 by rpki-client