Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e5dd397-565d-3a24-ab48-74e0eccaba87.roa
File:                     9e5dd397-565d-3a24-ab48-74e0eccaba87.roa (raw, json)
Hash identifier:          HdoEpyc8RA9xabLbeiqFMmb2jxuiqWDg2GNmIt9Ivf4=
Subject key identifier:   F7:F7:5B:8C:DE:9E:AF:49:44:4F:15:F7:E6:24:B4:30:E2:F0:8A:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBB00BDAAC8AE5307B1980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e5dd397-565d-3a24-ab48-74e0eccaba87.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33650
IP address blocks:        68.87.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:b0:0b:da:ac:8a:e5:30:7b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9a5f9633-269e-4324-a716-a1baa6e97bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:29:47:d7:4e:d5:8f:88:9d:74:e9:4f:33:
                    52:70:8d:f3:7e:7f:e0:a8:e0:22:1f:93:bf:ec:7a:
                    dc:c1:3d:45:33:d5:93:51:f8:63:7b:93:17:1f:d5:
                    ea:00:f1:2d:6f:af:c0:76:97:7d:d3:53:fb:f2:ff:
                    a1:6f:3e:c3:25:d0:8c:7e:66:69:dd:2b:ea:21:3c:
                    39:e0:16:a9:4b:1a:c7:57:3d:1c:d2:85:c8:1d:d5:
                    dd:cc:43:a6:bf:62:b7:bd:2c:41:9f:71:7b:fa:c9:
                    72:95:d6:ee:27:af:8f:76:bf:d9:57:79:a5:ce:b8:
                    bd:99:1e:16:ca:a2:7c:2d:74:47:7c:9f:46:70:14:
                    c3:86:65:f3:3f:06:ae:1d:ef:0e:e0:49:2a:e8:95:
                    32:c7:53:a7:5e:81:ac:f7:4c:5f:e9:85:23:9b:e0:
                    1c:e4:eb:4a:be:97:10:5c:e1:a0:ef:61:d6:78:05:
                    6b:36:1c:78:25:5f:c5:0d:e9:3a:73:90:ae:7e:45:
                    c7:83:7f:fb:20:a5:a5:18:5c:b7:5f:bf:b8:91:89:
                    df:26:42:50:94:de:e9:06:bb:ed:27:4c:0b:47:17:
                    cb:ec:df:0f:5f:9f:93:51:c7:2e:36:d8:9e:89:40:
                    8b:4d:66:bf:3f:a6:97:5e:f4:a1:3d:8f:0c:bf:5c:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F7:5B:8C:DE:9E:AF:49:44:4F:15:F7:E6:24:B4:30:E2:F0:8A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e5dd397-565d-3a24-ab48-74e0eccaba87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:31:38:ba:2d:84:17:0e:6d:ba:20:10:7f:2f:2a:02:0b:
         1d:a2:37:c8:67:67:b6:8e:95:7f:e7:9b:45:92:29:ea:ba:d3:
         7f:51:15:26:95:61:1e:65:51:9e:f1:3c:3b:5b:4d:c3:3a:5c:
         ad:b0:07:3f:e4:17:15:bc:62:d1:a9:83:ba:63:3a:b6:f4:7a:
         46:b2:c8:84:40:94:88:0e:e7:55:52:c7:e4:7b:90:fe:61:5e:
         35:03:45:20:38:ce:09:6a:7c:d0:65:79:61:7f:83:3d:7f:28:
         9e:40:08:2a:99:1e:1b:b6:de:84:ba:00:6f:0f:dd:73:b5:60:
         ce:42:ca:dc:ed:8b:ef:c8:7b:d4:17:34:1d:6d:ee:82:c8:c3:
         33:ad:c6:df:6c:cd:9c:2b:90:17:38:4e:88:0a:97:2b:8c:d4:
         db:a0:a6:57:0c:e0:49:8d:14:ea:7e:f7:e8:79:a8:5e:20:6e:
         80:a6:2b:d9:6e:8f:f0:e3:01:c6:2f:22:f4:e0:4d:0d:bf:e9:
         32:22:ed:6f:e9:17:1c:ad:48:15:9d:55:64:e3:04:48:7a:ae:
         02:b3:3b:77:ea:b4:c6:7d:6b:46:ef:20:b7:a0:0d:40:77:99:
         a6:b7:77:e6:e3:c1:87:ea:99:f1:7e:f3:05:59:28:19:d4:df:
         84:12:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:29:41 2025 by rpki-client