Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/464a8393-a9c7-307b-83af-1a7f62740290.roa
File:                     464a8393-a9c7-307b-83af-1a7f62740290.roa (raw, json)
Hash identifier:          BADRrWddWVJHaq1u6cELQxFdpxZykoAx0BTNd/SWpMM=
Subject key identifier:   CE:7E:59:A6:A1:50:F8:16:B4:80:AF:F8:40:02:63:51:7D:7A:E5:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD886F33F235DE4A6E7268
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/464a8393-a9c7-307b-83af-1a7f62740290.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        68.83.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:88:6f:33:f2:35:de:4a:6e:72:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5e8d4fd3-2edc-496b-acfc-108f46ba8462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:9c:76:62:85:89:e3:d6:9b:00:d0:55:2b:
                    d4:9d:36:ee:67:f1:5f:e9:fb:64:7c:38:8f:fc:c9:
                    3e:78:a3:ac:4b:1a:e7:cb:98:db:d9:ba:d7:34:75:
                    03:d0:78:f1:38:4b:1c:73:50:d7:3a:74:7e:d4:a2:
                    38:00:80:bc:55:c1:7e:51:03:a9:63:ae:66:74:6b:
                    61:63:5e:82:a3:d5:74:b5:90:4f:ce:bb:63:ee:c0:
                    9a:77:48:ce:44:94:03:5e:ae:25:f9:d9:d6:bc:de:
                    dc:05:d4:97:cc:fc:30:80:f4:23:55:e6:9f:bb:63:
                    e0:3c:8a:23:eb:ab:da:ec:5f:51:a5:ef:82:7d:dd:
                    1f:5e:3b:37:d8:3a:49:f2:90:ce:e8:37:4f:49:26:
                    3c:19:92:88:59:1a:1d:69:13:dc:d2:74:09:19:e7:
                    93:f6:e8:6e:e0:ab:24:3e:68:95:ab:45:18:48:cf:
                    46:f4:2f:cc:86:38:04:e0:c0:e0:50:41:39:25:dc:
                    74:91:5a:4f:2b:4b:40:b0:62:20:77:ce:45:81:fc:
                    0b:ed:09:0b:3f:df:a8:6f:25:61:3f:06:2b:6f:25:
                    ac:f2:08:61:02:60:8e:c3:71:65:b7:5a:d5:89:39:
                    27:88:8a:48:d2:4f:45:60:6a:c2:9f:4f:61:dc:c7:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:59:A6:A1:50:F8:16:B4:80:AF:F8:40:02:63:51:7D:7A:E5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/464a8393-a9c7-307b-83af-1a7f62740290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:7d:5a:20:4b:a1:0e:0f:3d:36:dd:99:e8:d7:96:32:1c:c0:
         06:c6:65:08:0e:f6:d2:41:41:88:86:b5:a4:3c:43:fc:84:16:
         cd:a4:c5:47:3c:c5:0f:43:11:26:30:11:3a:1d:bb:be:17:6d:
         3f:7c:56:36:1f:f9:bf:fe:92:6c:ed:66:20:b1:d0:12:e5:6a:
         08:3f:03:43:3b:e8:5b:49:f6:2b:8b:04:f8:86:30:6a:97:a9:
         c7:8a:62:31:69:fa:31:90:17:b8:5d:51:18:1f:c5:bb:4c:7d:
         66:23:d8:18:ce:d5:8c:c1:5d:21:b5:fc:6c:5b:99:38:7b:1a:
         4f:99:4c:7a:b4:fc:08:41:7c:f9:6c:fb:76:e2:ea:a5:e6:53:
         a5:97:2b:8e:94:74:55:92:1a:09:ed:a5:0f:f4:32:35:ef:ee:
         3b:82:de:eb:fb:d4:f7:59:ba:4b:e2:7d:1f:cc:0a:12:4d:70:
         c2:c5:c4:e7:54:1c:03:c2:c9:93:f9:5d:ce:db:66:61:8d:a1:
         72:92:2e:19:6d:8d:12:3c:99:cd:4a:3b:92:48:0e:b5:43:9c:
         42:e4:89:54:c0:2b:55:fa:f3:15:74:e1:41:46:34:7f:83:18:
         06:91:63:22:56:ae:21:51:76:0e:7a:01:6c:75:78:8a:5f:88:
         25:73:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:52 2025 by rpki-client