Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b590f38-61d3-3316-bed3-e3aec7e20f52.roa
File:                     6b590f38-61d3-3316-bed3-e3aec7e20f52.roa (raw, json)
Hash identifier:          x2ePQ2SShMLo8C91Cs7LfPl0XTgyoqJ4xQHA7DIPlGg=
Subject key identifier:   FB:11:11:E5:39:3A:AE:3F:70:79:B9:A7:6B:C2:97:0B:EA:1D:23:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBB0B94FCD2638F299A8B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b590f38-61d3-3316-bed3-e3aec7e20f52.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33650
IP address blocks:        74.95.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:b0:b9:4f:cd:26:38:f2:99:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=32663b0e-af98-49a9-9f56-1b9fa390e494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:42:54:58:f9:f4:28:74:12:ac:7c:7a:c4:
                    79:c1:24:03:48:4b:56:ed:a0:fe:11:4c:aa:de:6d:
                    76:e1:ac:51:f8:61:8f:08:b5:49:10:19:88:23:3f:
                    bc:d3:0d:ad:50:7a:bb:5d:9b:ca:42:5c:87:95:43:
                    62:02:32:b3:db:a2:6e:91:1e:5a:97:bd:2e:e6:2f:
                    7e:eb:07:c2:89:df:36:a6:11:1a:40:6d:d3:ff:50:
                    c5:16:5a:db:46:e0:0d:f2:d5:9d:bc:2a:2a:c7:e6:
                    30:28:35:05:b7:e8:e9:4d:6f:6a:0f:8e:d0:d7:e0:
                    56:a4:a8:cb:ea:cf:81:10:84:e0:9a:c4:b7:9a:66:
                    fd:06:ae:1a:7b:e2:d9:71:b8:00:dc:90:0c:f2:88:
                    c1:04:a1:de:8f:1d:93:c3:ae:a3:38:1c:98:b3:3f:
                    c0:22:49:d3:40:7a:99:fd:50:9f:f5:66:85:7e:c1:
                    48:d4:c8:07:cb:a9:bc:9a:5d:28:c3:27:12:d4:b0:
                    cb:22:56:a0:ca:b3:67:ba:81:36:e3:c4:06:6d:cd:
                    66:ea:f3:92:e2:70:09:2d:69:bb:b6:f3:ca:d9:28:
                    f3:33:2c:14:c7:cb:9e:b6:72:6d:0b:2c:b2:41:02:
                    34:8c:30:05:e9:d6:6d:7f:3e:74:31:c3:a0:74:0d:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:11:E5:39:3A:AE:3F:70:79:B9:A7:6B:C2:97:0B:EA:1D:23:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b590f38-61d3-3316-bed3-e3aec7e20f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.95.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f8:65:c4:58:13:38:62:1c:36:9d:8a:8d:79:7a:74:ae:04:
         28:d6:81:ad:c0:f1:fe:80:42:0e:c9:49:b5:84:b1:c1:06:db:
         2e:32:70:52:78:63:1f:f2:a1:85:53:b6:87:e4:23:a5:63:04:
         6b:d9:f0:dd:0f:34:0b:37:29:50:19:8e:ab:28:2d:be:d5:b0:
         4b:26:38:37:6b:a2:28:8a:77:65:68:5c:fa:2c:b0:d8:6a:23:
         b4:18:eb:0f:1e:97:f3:27:75:56:57:ff:6e:18:1d:40:78:63:
         a1:45:a8:f6:cc:be:50:81:32:62:4c:9f:8b:8d:e5:33:eb:f9:
         cd:b1:51:f2:e7:04:0d:ec:6d:e0:97:3d:14:2b:2d:15:4d:48:
         4a:df:42:1c:cd:a1:a0:7d:0a:db:3c:b9:8d:3b:fd:32:01:3a:
         00:c6:84:84:d2:ca:7a:f2:e4:85:f9:c1:ba:43:ce:29:97:23:
         e0:ad:84:91:d4:9e:d3:81:1b:1c:f2:19:f0:e3:ac:99:a2:8c:
         ec:0c:cd:c2:23:09:74:e3:53:f7:f8:83:f7:8e:ae:43:d7:ba:
         44:29:0d:f4:96:d9:2c:bb:95:27:aa:7c:4d:0e:3d:d9:e4:67:
         7c:69:d5:a5:61:95:5d:1d:af:24:3b:95:c2:90:0b:a2:b1:81:
         1d:fb:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:07:42 2025 by rpki-client