Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa
File:                     a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa (raw, json)
Hash identifier:          +DULn0voVzemTxBNmNUhdt71B7Ixocrl8s8MA0H2m60=
Subject key identifier:   0E:B5:1E:F6:90:00:5B:29:25:9F:42:02:6C:5E:F8:5F:7C:8F:6C:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD67EF15F121BE5721E700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        68.47.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:67:ef:15:f1:21:be:57:21:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=364493dc-7ad1-4437-ba2e-47555670e5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:6d:2d:4c:7b:f1:fa:11:4c:0f:3e:1f:dd:
                    54:e8:39:72:9b:b6:f1:68:9c:ce:38:50:f1:23:93:
                    71:ed:5a:0a:91:2c:67:75:97:e8:9d:65:11:05:61:
                    2a:2f:ef:f8:f3:15:e8:4b:0c:fd:4e:9d:c2:40:a3:
                    8d:f1:6d:1c:c9:19:7d:3e:b6:3f:b4:33:22:b6:64:
                    30:cb:1c:d5:4d:68:73:e2:9e:12:64:4c:3f:a1:c4:
                    ab:fb:e2:6a:64:99:90:0e:4f:0e:5d:59:d5:b3:19:
                    44:18:17:38:7a:48:3c:45:04:cf:07:c0:93:a7:e7:
                    26:f1:e8:3a:19:2a:13:12:55:50:c0:c9:56:2a:e2:
                    92:f6:0a:c4:ee:8f:2f:4e:62:d2:9d:6a:03:0e:9c:
                    b8:2e:68:4e:08:68:b4:73:b2:ac:51:44:e2:71:fa:
                    63:ea:67:42:42:51:70:e1:3f:64:4e:4c:11:37:b0:
                    49:8f:65:6e:61:65:2d:1f:2f:af:fb:f9:54:f1:08:
                    3a:2f:f2:4d:a0:72:7a:26:69:56:47:a4:37:fa:ae:
                    69:07:75:4a:1a:24:03:25:cd:5a:40:c2:ae:12:84:
                    ee:2a:70:b7:23:bd:48:8f:0f:40:3b:b8:f2:1b:f8:
                    15:cb:06:20:c9:07:6a:fd:4c:05:4c:1b:a5:14:15:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:1E:F6:90:00:5B:29:25:9F:42:02:6C:5E:F8:5F:7C:8F:6C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:14:40:4e:1b:09:6b:8c:60:46:b6:82:6c:ec:a0:22:1b:
         6c:f2:81:19:59:65:f0:46:d4:11:28:d5:71:b6:5a:cd:95:9e:
         bc:41:17:4b:72:01:fc:95:44:91:81:b4:93:73:85:23:ce:4e:
         e6:0d:be:1a:6d:08:3f:af:94:37:de:0b:a2:41:ed:25:5b:fd:
         16:ee:dc:0a:d1:0b:5f:2e:8b:ab:14:b8:4a:e4:0e:e8:bc:1e:
         b0:69:82:58:a6:09:09:d6:91:fa:cc:17:f2:95:88:60:bc:ba:
         ef:34:bc:a3:cf:6b:0c:57:e7:6e:4f:17:14:76:ca:b4:0a:7a:
         37:87:af:c8:de:0a:60:93:d3:13:5c:67:b6:80:99:6c:e3:e4:
         8b:6c:9e:95:50:62:86:23:50:64:64:8f:5b:fd:ae:ac:61:05:
         f8:f2:f9:93:ac:d4:c9:26:d8:df:24:ac:7a:ba:60:74:3c:3d:
         f4:70:32:5c:af:07:43:7d:db:9f:d2:89:e2:74:b6:56:26:fe:
         9e:6c:41:44:2d:cc:cc:51:72:ba:61:ad:c9:e8:35:68:6c:20:
         36:7b:08:58:7a:3f:1c:86:15:37:38:10:de:5e:2c:d1:58:aa:
         35:c3:f8:91:1e:e2:40:ae:f3:99:d5:69:31:60:9b:21:1f:40:
         01:37:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:17:36 2025 by rpki-client