Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa
File:                     34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa (raw, json)
Hash identifier:          bOgvu/BhzM5LhUoyTweAFuRfNpMG3P8ThxQdC7nrObw=
Subject key identifier:   C1:08:77:B0:4A:45:F4:EE:FA:C2:DF:4D:41:94:F8:05:9E:E5:0F:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC44AEE52DABE711CA7A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        68.58.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:4a:ee:52:da:be:71:1c:a7:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=51597de5-2570-4b04-a791-d7fb633da464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:b8:26:90:c9:43:73:8f:f6:66:c2:e3:47:
                    4a:ce:30:a2:87:a8:c5:6c:b9:ea:53:8b:92:a3:fa:
                    e5:33:4a:1d:f6:64:c7:0d:e2:0e:a4:38:9f:df:03:
                    27:82:fa:69:3e:2c:9d:00:5b:36:5a:92:fd:db:25:
                    a7:5f:5f:03:9c:a4:66:4a:c3:38:20:42:e7:a7:8a:
                    7c:0d:61:dd:bb:38:a6:1b:a3:c7:d0:28:79:25:6a:
                    fe:f9:28:b5:12:9e:39:98:a0:99:a6:64:84:09:3c:
                    18:de:6b:bf:94:99:31:3c:a7:04:09:f3:7a:75:05:
                    11:61:c1:46:e6:a8:d3:65:69:f1:ad:ed:3f:42:ca:
                    0d:41:e0:a8:9a:81:c7:eb:4e:fb:f5:3a:7b:ac:06:
                    91:31:82:61:8d:85:e2:88:04:13:eb:1d:4a:d3:f9:
                    9e:8f:3e:99:be:1e:57:9d:f2:50:84:82:4d:6b:e7:
                    3c:e5:2c:39:c1:64:55:27:83:09:c9:00:68:13:e3:
                    ed:ed:34:61:6e:7a:83:91:c5:ba:45:ee:db:92:09:
                    2e:a8:6b:ac:98:23:3d:79:5f:f6:4b:08:88:c3:76:
                    9c:11:e7:4a:4e:52:ce:59:75:f3:8d:52:bb:47:21:
                    fc:95:27:1a:04:5c:58:07:a9:ab:b0:2e:9f:41:df:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:08:77:B0:4A:45:F4:EE:FA:C2:DF:4D:41:94:F8:05:9E:E5:0F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:93:23:dc:df:da:f1:ae:73:75:9e:a0:f1:88:38:71:00:95:
         c3:94:db:5c:d3:fd:13:3a:16:db:5a:b1:c3:b1:60:4a:18:24:
         c7:ef:7e:0a:86:50:0d:f5:d3:ce:a1:58:7a:b8:82:22:2d:09:
         a7:90:48:ba:ae:17:5d:55:2c:91:54:9a:81:b6:fe:49:16:81:
         1f:5e:02:03:7c:db:5c:8e:b0:6f:af:83:bc:74:9d:f4:e0:53:
         e7:bb:04:4b:3d:50:e3:cc:4c:7e:76:c7:56:6d:18:6d:2a:87:
         09:f0:00:37:b1:a7:fd:7b:1c:18:72:78:55:df:3d:a0:53:28:
         d4:a3:d5:53:ce:03:85:32:bd:78:d2:ac:8c:6d:42:66:f3:f1:
         5c:69:21:0a:55:8f:6d:d8:80:5e:0d:e6:55:3a:d8:92:61:57:
         b8:5a:93:bd:d0:dd:aa:95:a4:37:39:68:50:80:85:b9:3e:2e:
         89:3e:0d:db:83:07:40:0e:0b:e4:e5:a0:ac:27:4e:dc:fd:4f:
         61:a1:a8:f7:ba:e5:13:1f:23:03:79:bb:ce:9c:bc:6b:8f:cd:
         97:fa:4c:3b:b7:8a:c6:b6:c0:7a:03:ca:1d:5c:c0:86:e5:84:
         c5:d3:c4:ed:5f:c3:cb:1b:97:a2:47:16:66:58:f3:63:9f:b2:
         5d:9f:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:09:55 2025 by rpki-client