Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4cdd4d1-870d-3ec2-a425-2f6d5e091e50.roa
File:                     b4cdd4d1-870d-3ec2-a425-2f6d5e091e50.roa (raw, json)
Hash identifier:          le6U+tKFqijxxLT+awatmtLFdTtP3Gz9PiDSQHkq65k=
Subject key identifier:   27:93:B3:41:4C:DA:87:BB:37:B7:0B:B0:99:C7:F4:58:ED:0B:24:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2362152EDF833842B7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4cdd4d1-870d-3ec2-a425-2f6d5e091e50.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        68.45.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:36:21:52:ed:f8:33:84:2b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=89efe71f-6965-4ec6-a76a-67bbb4d96877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:8f:67:70:e5:4c:d4:f8:e0:dd:5b:6f:4a:
                    8e:f5:16:83:bc:98:5e:3b:06:c4:51:aa:68:21:11:
                    fb:a3:6e:33:98:b6:1f:b1:d6:3c:63:96:d1:20:c5:
                    fb:85:d0:10:28:9b:12:20:46:8b:07:79:56:16:9f:
                    ab:d7:a8:95:e8:59:86:07:10:ad:e6:40:83:b5:44:
                    25:85:b2:81:0f:20:e4:fb:9a:7c:9b:9f:6a:fe:50:
                    28:bc:3d:66:2e:52:89:0f:c9:1c:65:de:1d:39:29:
                    13:df:8a:c2:25:d4:e1:fc:a9:4b:68:58:f0:8c:41:
                    ad:e9:ef:aa:e1:0b:23:4d:f1:a3:74:d4:07:e8:93:
                    bb:7b:12:00:d7:d0:42:04:2e:ca:da:f9:99:a6:7d:
                    e6:91:c8:0e:12:53:bd:3d:20:e7:e1:be:17:55:60:
                    04:d6:4b:1a:8d:ec:b3:45:13:fb:d1:11:46:99:31:
                    7b:80:93:1e:05:fb:d7:eb:04:91:c0:be:22:3b:89:
                    6f:51:f6:d8:01:ce:8b:50:07:d2:c5:fa:7c:67:59:
                    c0:2b:37:a9:60:10:b9:1e:ef:d8:6b:a2:6a:ed:21:
                    95:bc:9f:04:8f:ac:71:a7:41:70:81:00:e9:e0:46:
                    8a:58:0e:03:0c:41:db:74:37:70:e8:99:50:f2:bf:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:B3:41:4C:DA:87:BB:37:B7:0B:B0:99:C7:F4:58:ED:0B:24:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4cdd4d1-870d-3ec2-a425-2f6d5e091e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.45.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:98:7f:4d:bb:a1:e5:ce:de:02:de:67:63:57:20:22:ab:
         ba:52:b9:95:20:67:98:69:80:56:37:fc:20:cf:cf:5f:7e:b6:
         db:fe:e6:19:ec:35:b1:04:03:f9:82:e1:4d:9f:32:81:da:fb:
         6a:09:87:14:71:fb:99:43:e4:9a:c4:76:8b:59:87:1e:6f:4a:
         f1:98:0c:03:87:23:a6:5c:c6:98:6c:82:cc:6b:40:d7:7f:f8:
         eb:d2:b7:ac:3e:66:ab:03:74:b5:e8:24:6e:24:d9:1f:f6:62:
         66:c1:0a:d3:cb:74:56:77:00:64:d2:ae:87:6b:03:96:0c:98:
         ba:37:a2:bc:a0:15:92:ac:7e:65:70:9b:c8:f4:d1:6a:38:ad:
         08:32:0f:5f:d4:74:a4:ae:39:c3:80:d4:0c:cc:01:b7:08:4c:
         b5:78:4e:2c:70:40:b9:71:bf:62:a6:44:87:f5:87:f6:47:e8:
         ad:18:49:0b:86:68:40:e0:95:35:fc:c2:58:f6:98:b8:e7:33:
         95:76:3a:ee:cf:79:02:6f:4b:2f:c2:0b:6a:cf:af:bf:13:c0:
         18:76:77:0d:88:42:4b:c4:d1:5f:79:c3:1d:11:04:2d:f8:b2:
         86:c3:2c:2a:15:b7:10:a5:44:92:c9:67:44:d9:72:f0:94:76:
         6b:47:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:13:48 2025 by rpki-client