Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa
File:                     655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa (raw, json)
Hash identifier:          31YfCji/tyAidWfBkjL0ddMX3vxtYNGR2386rHkc4mU=
Subject key identifier:   04:5F:6C:1A:2A:51:93:BC:28:CE:F6:CB:FB:A1:49:05:99:67:B6:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA55C67B064A8BB7EFAB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.36.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:55:c6:7b:06:4a:8b:b7:ef:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9bf036e8-97cb-4b6e-92f9-e64cecd6eceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:e4:6a:4c:82:71:db:a4:ab:9a:1a:32:b5:
                    66:db:23:d2:79:21:61:4e:c3:a5:fe:de:17:3f:08:
                    c1:d8:10:63:27:64:42:00:cb:7b:94:94:6d:cb:38:
                    62:dd:b8:9b:b2:e8:5d:f7:d9:49:3f:de:01:36:e7:
                    17:83:d1:41:1d:a3:92:a4:0a:16:59:0b:13:77:8b:
                    8b:8a:e0:be:d6:f4:42:81:66:20:08:99:ab:eb:52:
                    d8:11:b3:3a:87:84:81:a6:71:8c:30:1d:2f:3a:c9:
                    b3:aa:5d:f4:54:ae:f3:6a:0d:4b:59:05:cf:08:df:
                    33:91:4f:f6:f5:c9:3c:99:0b:66:16:82:ba:1c:bf:
                    ab:39:88:05:39:da:db:cc:80:27:53:ff:30:b1:36:
                    82:32:b7:90:6d:ad:0b:ae:27:ac:fd:5b:f5:18:71:
                    63:86:5b:3e:72:06:f2:99:e1:d2:9f:01:14:d3:31:
                    e3:87:fd:b8:9d:da:ad:ca:21:6d:37:36:b2:74:fa:
                    73:3b:38:be:a2:3f:cb:fa:7c:2f:7d:c2:57:df:84:
                    d2:b4:2c:55:43:51:08:5e:9e:e1:a6:61:22:87:6a:
                    0b:5f:e1:db:b3:7a:57:99:83:14:6c:df:68:fa:38:
                    10:7d:c4:a8:0a:c2:b0:da:bd:57:fb:64:25:26:fe:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:6C:1A:2A:51:93:BC:28:CE:F6:CB:FB:A1:49:05:99:67:B6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/655c48f1-6a1b-3b36-a6e2-131b8ec36704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:3f:1f:4f:db:6e:49:6a:8b:69:cd:e3:2d:1d:62:ca:f1:
         54:08:42:d0:75:c4:2c:0c:ae:f5:13:1d:7d:d5:b3:b3:0d:2b:
         2b:a2:e1:28:ba:7c:15:3e:3b:d9:5b:95:67:0c:f4:5d:f1:26:
         22:38:65:6f:5d:f1:e1:5c:5e:3f:f4:75:a8:c0:fe:0e:89:54:
         bf:77:01:09:fa:44:00:42:56:25:e9:e3:ec:af:72:4b:f8:42:
         44:19:7e:e0:45:89:62:b9:a3:2a:ba:e1:85:5c:0d:6b:92:00:
         e2:17:2e:b4:af:0a:4f:8f:0d:c1:dd:e8:01:40:9c:67:af:20:
         85:9a:e4:64:bc:96:62:a5:c9:b3:7b:4c:ad:30:8b:cf:00:0f:
         de:fe:3f:65:c4:6b:fe:56:e7:27:6d:9b:1b:8a:c3:1d:67:c4:
         a1:1e:63:b7:c8:ba:05:c4:e4:76:45:f5:0f:c8:5f:10:9c:0c:
         96:ac:5b:3b:c0:01:12:8c:10:33:62:98:6b:32:5e:23:02:4b:
         20:8b:02:1b:cf:d4:e8:41:e2:9b:8d:e5:79:bd:4f:5a:25:47:
         d2:41:cc:5c:2a:b8:ce:18:6b:e6:35:21:79:4c:fe:0a:06:cb:
         af:50:49:99:70:67:ce:13:c6:6b:81:34:46:53:fd:ba:a5:23:
         ee:c9:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:13:50 2025 by rpki-client