Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68eb2319-a68b-35be-87e6-fb54a73f88d2.roa
File:                     68eb2319-a68b-35be-87e6-fb54a73f88d2.roa (raw, json)
Hash identifier:          6+yJIg/4tsO6NxmANBnvlskAQo6+sW9qW+q20cM4f7s=
Subject key identifier:   16:33:F6:B9:BD:3F:67:0C:A4:A6:77:CA:E5:19:85:AB:C4:1E:5F:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB95F2BA53B101227455600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68eb2319-a68b-35be-87e6-fb54a73f88d2.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33667
IP address blocks:        173.8.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:5f:2b:a5:3b:10:12:27:45:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=8917172e-1e3d-47b4-bd82-c960929ff008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:98:5e:83:6b:66:b9:1f:57:25:12:65:ff:
                    5d:64:48:75:f3:cd:00:ff:a7:fc:8c:6e:a6:ad:6c:
                    2a:1b:86:26:1a:b6:c3:fa:b8:3c:60:c8:82:79:67:
                    24:f1:e0:da:1c:23:f0:53:37:e4:b0:cc:db:01:eb:
                    4c:48:e5:3c:d6:df:92:fc:c2:c9:93:b4:2f:85:10:
                    0e:dd:cb:8e:24:0a:8d:ce:90:a7:23:96:0f:80:f4:
                    ab:97:13:d6:48:f7:ee:37:b0:74:63:a6:52:48:bf:
                    68:9a:98:17:36:a9:95:e4:be:5a:68:62:4f:1c:16:
                    64:98:7a:3b:12:1e:4b:f0:87:a6:8b:3d:51:f7:b0:
                    2d:3b:5d:b7:22:26:e4:00:62:bd:12:d9:e1:d5:0b:
                    64:42:cc:41:e1:09:dd:88:44:4c:a3:6e:5f:c1:ce:
                    f8:64:3f:c9:be:b2:98:17:94:03:79:50:08:98:15:
                    c8:51:cf:72:4b:13:f7:17:cf:b6:31:2d:0a:00:21:
                    fb:0f:50:68:98:02:2d:65:a6:51:c4:2c:a8:84:67:
                    b3:e0:f3:b2:5a:13:4f:5a:80:de:65:77:fc:5f:59:
                    dc:11:ab:60:10:0a:b5:d4:54:44:9b:0a:7f:ef:86:
                    d3:24:8e:4d:bc:2d:af:e9:fb:72:0d:96:24:ab:64:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:F6:B9:BD:3F:67:0C:A4:A6:77:CA:E5:19:85:AB:C4:1E:5F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68eb2319-a68b-35be-87e6-fb54a73f88d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.8.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:58:18:29:15:5b:90:bd:e9:6e:1a:80:ec:fe:56:59:29:
         c5:48:bd:d4:58:1a:ec:8b:ec:2e:a3:6e:c8:14:b2:8c:d3:96:
         30:0d:cd:9e:37:cd:90:eb:2e:a3:98:3d:15:0e:2d:95:02:e0:
         e7:94:3a:12:0e:f9:ed:2c:2c:9b:75:c7:e7:a9:74:bd:4b:54:
         cd:9a:8b:fb:9f:66:07:07:ee:bf:41:fc:af:d0:7e:39:64:bf:
         af:86:ae:e4:77:77:f2:cd:26:93:df:15:3a:13:90:70:b9:3a:
         53:d5:fd:23:43:04:0b:17:bc:1b:b6:b6:27:57:c7:3d:91:f4:
         3f:ee:ca:2a:52:96:fe:be:1e:55:71:b9:34:be:b0:bb:09:8a:
         55:ea:0a:c4:cc:5e:c0:db:d6:2f:3c:d6:ff:c8:19:13:36:6e:
         cd:86:6a:e4:2f:30:8e:47:29:13:75:00:67:f1:74:b5:39:4b:
         eb:32:19:8c:6a:ed:61:25:06:8a:9e:1e:ab:e1:58:0c:2f:4d:
         eb:25:4e:b4:56:13:2f:be:76:05:3b:f4:cd:61:55:46:dc:84:
         44:67:a9:60:99:4b:11:9d:74:0f:15:a6:3a:b9:6b:5f:7a:fa:
         4f:b5:ca:bd:ab:c7:b0:1c:c3:61:a2:c9:ae:d3:9e:44:da:db:
         16:5a:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:45 2025 by rpki-client