Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0d9acac-280a-37ef-bbd9-43e6fe01d804.roa
File:                     c0d9acac-280a-37ef-bbd9-43e6fe01d804.roa (raw, json)
Hash identifier:          6ifrkbpXv771Ct1KJT9kSyFCiMjtUsNnIEhaNaibqs4=
Subject key identifier:   83:1F:62:3B:01:33:E2:73:60:02:DA:59:24:88:3E:F5:64:DC:5E:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC43BFFF979E5AEB5735580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0d9acac-280a-37ef-bbd9-43e6fe01d804.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        68.39.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:3b:ff:f9:79:e5:ae:b5:73:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=19261180-4acc-4654-9014-9f1e46550ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f7:2c:27:a9:22:1c:b6:a5:f5:53:b5:59:70:
                    ee:c7:1f:01:53:a8:c8:95:c3:55:d8:e5:fe:ac:8e:
                    ae:85:3e:61:ac:31:e1:6a:ef:ca:ee:b7:9c:6b:fe:
                    be:3d:3e:de:f5:58:e4:43:bc:61:41:0d:58:86:07:
                    e7:7c:70:39:49:c8:7a:0a:1c:92:17:3a:2b:d6:f0:
                    13:de:6f:46:db:39:29:b8:96:32:34:80:0f:0d:1b:
                    23:82:83:b9:c6:2e:2b:14:d3:99:01:41:b4:3f:53:
                    a3:11:fc:38:2a:80:57:21:62:45:e6:27:84:98:03:
                    88:80:aa:e5:a5:5f:df:7e:93:63:af:48:af:23:73:
                    e1:91:3a:99:9a:6f:e0:4a:25:d6:76:f0:d6:04:dc:
                    27:ef:69:f1:77:59:cc:64:10:4d:51:f7:6e:40:24:
                    80:74:03:e5:2c:53:bc:27:07:ed:54:c1:b2:63:9a:
                    6c:e8:7b:c8:7f:4e:31:72:df:70:64:e2:9c:76:e5:
                    59:77:5c:e2:09:62:6c:93:25:27:00:1f:fe:36:25:
                    6f:b8:ef:9c:80:f3:9f:f3:f7:85:f7:40:c1:ac:91:
                    c3:dd:be:a4:e4:80:7e:84:b7:29:ea:88:10:68:1b:
                    45:3a:b6:00:89:d3:81:7e:71:8c:bd:af:33:84:9b:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:62:3B:01:33:E2:73:60:02:DA:59:24:88:3E:F5:64:DC:5E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0d9acac-280a-37ef-bbd9-43e6fe01d804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.39.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:bc:47:f1:df:d4:a9:f4:d3:d6:32:5a:62:40:ae:09:36:
         24:96:f8:e7:e6:d9:a4:ee:89:b3:10:60:a2:86:6e:67:b9:1b:
         ea:90:ab:fb:72:30:00:4c:a4:62:92:f7:31:93:44:23:a8:b9:
         41:f3:91:af:70:e7:7a:13:58:f3:bb:41:dd:25:95:1a:33:4b:
         ec:cf:d7:8b:64:25:50:22:35:8c:b0:e9:2d:b8:34:91:d5:e5:
         84:53:43:80:37:92:e7:3c:a3:7a:8e:62:2f:4a:08:e6:97:c2:
         cc:13:17:bf:0c:af:69:06:dd:d3:32:07:66:88:5b:c1:67:cd:
         44:5e:33:df:a1:89:3c:67:39:6a:49:51:01:f9:20:eb:55:5b:
         7a:da:f4:16:c9:db:b3:5a:bd:06:09:df:5a:ac:f3:cb:cc:58:
         cf:61:cb:94:b7:cb:11:f8:64:eb:01:3f:16:b8:61:e5:7a:4c:
         e4:de:e6:09:a1:c4:2e:9d:d7:a0:1e:87:50:92:8a:28:65:4c:
         fd:7d:dc:97:43:27:17:02:08:60:5f:e2:0f:63:bc:9c:8c:ac:
         50:08:16:72:db:22:ca:63:61:ad:53:8d:a4:54:cd:34:e4:bf:
         5c:c1:74:87:63:e7:18:e8:c0:82:6c:82:7e:16:63:0d:02:73:
         5f:ae:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:15:55 2025 by rpki-client