Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ef8a10-d979-34af-beb5-290f3eb34861.roa
File:                     b0ef8a10-d979-34af-beb5-290f3eb34861.roa (raw, json)
Hash identifier:          LPUMFPsaAFwjbQwEQAgzRtQdCfcZmhToXvx9kiUCgmM=
Subject key identifier:   9D:25:FD:AC:35:E1:C5:49:88:F2:E8:90:85:37:52:6B:97:E6:70:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB925997EE8B55CD4DF031A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ef8a10-d979-34af-beb5-290f3eb34861.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33490
IP address blocks:        68.85.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:25:99:7e:e8:b5:5c:d4:df:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=4cbc29b4-ca10-44ff-914a-03405a06a1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:dd:67:dd:24:a9:16:df:22:98:47:66:ee:
                    ff:f5:c3:ed:5f:6c:ed:0d:17:55:11:0a:8f:a4:11:
                    81:eb:a7:40:58:2b:f3:1a:0d:45:05:a1:d7:c6:02:
                    bd:47:04:9d:b0:2c:d0:c0:22:29:8d:a6:31:da:3c:
                    fa:6e:8f:0c:68:f7:4c:63:64:f2:4d:8e:10:f7:24:
                    8f:04:80:2c:70:d4:fe:36:58:6d:5d:fb:e5:d5:a8:
                    0b:7f:0a:48:85:d8:2d:16:e5:6f:65:14:78:53:c3:
                    fa:1c:10:75:12:ae:1e:82:17:e5:c5:ae:4f:fd:9c:
                    11:fc:7a:69:54:c3:20:1a:56:4e:68:b9:e2:f9:37:
                    80:ef:ea:b1:aa:bd:ed:66:cb:78:a7:8c:68:14:47:
                    f1:de:c0:50:67:db:fe:24:2e:7d:f9:2c:d8:a9:70:
                    ac:1b:21:13:a3:a8:9a:f0:4c:2b:21:f5:f9:cc:6d:
                    0e:a0:06:52:42:20:88:f7:40:ab:9f:04:f8:d5:bb:
                    36:04:e3:e0:e0:63:d0:38:13:0e:46:1f:ad:37:9d:
                    aa:9d:dc:df:16:51:a4:8b:7f:a8:62:26:de:93:57:
                    b2:eb:d6:fb:f9:12:89:b0:70:65:52:5a:0b:53:2c:
                    ad:3d:28:60:8f:ca:df:42:1c:aa:e2:dc:1a:68:9c:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:FD:AC:35:E1:C5:49:88:F2:E8:90:85:37:52:6B:97:E6:70:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ef8a10-d979-34af-beb5-290f3eb34861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:18:0a:f8:b2:2b:c0:8b:ea:b6:6f:48:7c:77:08:81:2a:41:
         d5:dd:8b:3b:e5:a6:49:12:93:8a:d4:5e:b9:cc:ab:55:1a:5e:
         5f:37:19:dd:49:f6:73:86:de:e6:df:27:62:06:e5:f4:e1:61:
         49:02:4b:d1:77:a4:95:be:f3:61:a2:1e:67:19:5a:2a:19:3c:
         a5:a5:21:44:b9:4b:c7:36:b4:bd:87:06:6e:2d:1c:05:61:ef:
         08:8e:60:fc:c0:e6:35:d5:a4:13:3b:31:d2:fd:f7:a6:42:c1:
         97:e2:49:3e:53:79:16:41:4d:89:3a:26:26:56:28:f3:a4:54:
         98:45:f4:7f:e7:de:79:55:b5:1b:fe:ea:95:7e:5f:fc:0b:72:
         72:c7:62:fd:8e:16:44:62:40:ca:0c:25:e1:e3:c0:2d:e6:81:
         9d:ca:16:f8:c6:73:fd:61:08:74:c1:05:20:41:86:39:1a:10:
         5e:51:37:9d:68:fc:4f:4d:d6:c2:8e:79:0d:38:50:4a:e7:1b:
         85:02:24:5b:80:73:61:c2:11:6f:30:18:a7:d5:b5:ef:09:c9:
         88:ca:b2:48:88:0f:e5:d3:f6:c8:5d:ae:c8:d9:06:42:58:4c:
         82:2e:e3:ff:d2:40:ec:00:9d:c0:1d:3f:42:36:88:4a:fb:0a:
         7a:fe:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:52 2025 by rpki-client