Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c71880-bd4e-3ca3-9700-46f690b77542.roa
File:                     87c71880-bd4e-3ca3-9700-46f690b77542.roa (raw, json)
Hash identifier:          mmdpkBlS5RZ+AHWObWp4Q4VbpRe0IkO0HSl4znIPS3I=
Subject key identifier:   6B:13:AE:8A:E0:30:AE:3F:ED:34:7C:06:8E:3D:A7:4D:5E:19:4D:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC37C5CDF468152E878BE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c71880-bd4e-3ca3-9700-46f690b77542.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        68.83.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:7c:5c:df:46:81:52:e8:78:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=13a59675-0dd3-46b2-857b-336a268ef907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:a9:ee:00:6d:e0:d8:b0:ff:85:19:ab:09:
                    ea:fc:5c:ae:0d:24:2c:09:b3:04:22:b5:a1:02:c0:
                    98:bb:61:1d:3c:b3:5a:ab:42:ac:2c:e7:04:a3:df:
                    a6:3d:ac:a8:d9:16:b6:56:a3:31:5b:d5:c7:d6:69:
                    69:22:74:c7:f9:f9:f5:dc:5d:d9:b6:f9:16:d0:8a:
                    12:db:a8:e2:9b:66:b5:13:e1:f6:70:41:89:5f:c5:
                    51:67:ae:96:17:4f:ec:5b:e7:64:94:5b:84:a6:e2:
                    ea:f3:a6:b3:5d:e7:85:eb:99:a8:7c:c0:fa:93:cf:
                    ab:dc:60:68:e5:8b:63:b6:bc:d4:a7:b1:c1:01:a6:
                    85:a2:14:bd:fa:8c:58:0e:74:a9:13:58:49:92:f6:
                    b1:01:01:25:3e:39:04:e9:02:bd:99:23:ee:b9:65:
                    55:ee:3d:c7:85:8c:30:2e:36:68:b3:90:b3:c7:5f:
                    78:fb:04:1f:14:52:68:23:1a:f5:9c:e1:17:8e:56:
                    a3:e8:48:8e:cb:d6:3e:0d:a8:e7:be:22:75:a0:73:
                    cd:59:e7:a4:eb:b6:60:c6:15:3e:9f:38:9a:6f:2e:
                    e6:ee:f7:77:2f:6f:0c:49:be:93:5d:62:44:dc:46:
                    d5:93:da:77:b3:91:4c:ac:3f:e8:2a:fa:0b:a6:ab:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:AE:8A:E0:30:AE:3F:ED:34:7C:06:8E:3D:A7:4D:5E:19:4D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c71880-bd4e-3ca3-9700-46f690b77542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:7d:58:a9:5e:e3:a1:f4:01:18:59:a8:0c:b4:7f:61:1b:
         ae:58:6e:e1:3e:fd:a0:53:58:d4:f6:40:e9:d3:59:ab:e3:bd:
         fa:64:c7:bc:c9:ea:5e:86:62:56:d9:d8:13:d7:79:d7:bf:07:
         99:38:4c:51:90:7f:45:58:fb:9d:68:07:b4:34:f1:30:c5:e0:
         51:ca:19:66:3d:20:c6:15:52:ec:1a:46:82:74:7c:dc:05:15:
         38:ea:8a:59:11:1c:18:5a:82:38:df:5d:82:c0:92:bf:4f:14:
         24:64:53:a3:cf:07:3b:d7:b3:78:a0:ab:36:f7:9a:ad:21:44:
         43:a2:c1:f2:45:61:71:78:ad:5e:50:4c:3e:ed:78:9c:c4:86:
         38:da:85:99:3f:ab:7d:0d:b6:9f:4a:d5:66:85:52:23:5f:d6:
         47:21:5f:36:05:47:17:32:b1:44:b7:ac:7e:ac:22:91:f2:73:
         aa:0a:cb:64:36:2d:3d:5d:2c:cb:92:26:c5:7a:be:50:61:8a:
         8a:97:47:a1:ed:c5:ae:5d:de:ca:ef:e3:03:c4:c2:28:d9:2f:
         32:ea:af:bd:de:7e:eb:c1:85:a4:ba:65:b1:68:d8:c6:f3:38:
         7b:e9:6c:8d:64:7a:54:44:09:8b:cf:b2:bb:03:81:89:15:75:
         35:ec:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:31:10 2025 by rpki-client