Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cecd8c53-3650-392a-835c-7db3a2523d93.roa
File:                     cecd8c53-3650-392a-835c-7db3a2523d93.roa (raw, json)
Hash identifier:          6DwrRmSoaz7OxA+/GKe8W4iZinC+mfjbFTYixQ4VWOY=
Subject key identifier:   70:25:CA:AA:38:42:D1:AF:A1:CD:62:78:6C:4F:37:AC:5E:62:1B:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC42CF9BAB106CB64F19220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cecd8c53-3650-392a-835c-7db3a2523d93.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        67.163.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:2c:f9:ba:b1:06:cb:64:f1:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=4c1956b2-b24e-4011-8b6c-f6956bb36421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:aa:c6:46:99:a8:6f:7e:0a:08:9a:4b:bf:
                    8a:82:dc:6c:69:da:6d:57:b5:46:c5:18:c8:86:61:
                    3f:4b:ce:b8:6f:05:f2:2a:51:cf:07:c0:77:e6:c0:
                    ed:f5:08:17:a6:42:76:c7:b9:26:9e:b4:7a:f0:cd:
                    57:d3:53:48:8e:cc:fa:d2:e1:19:fa:bd:01:89:db:
                    1d:9b:28:a2:72:12:00:57:84:9e:39:88:6a:a4:bf:
                    5c:7c:1b:fa:53:30:09:af:fb:8f:ca:2a:46:05:bb:
                    f0:07:cc:27:d6:4b:16:f0:f9:a2:fe:4b:1c:fb:f3:
                    54:7f:b8:f2:37:cd:8a:70:c0:7a:99:2f:51:13:09:
                    69:0f:1e:81:f6:74:1f:f0:21:0d:95:fa:07:8c:fc:
                    a5:96:03:f3:2d:72:97:df:aa:6b:a2:c8:a0:21:96:
                    bd:ec:76:ba:90:ad:15:ea:2d:32:03:6d:bb:15:5f:
                    07:a4:0f:54:b3:72:d7:dc:14:4a:aa:50:7d:60:c2:
                    c9:84:31:c4:93:28:dc:fe:dc:64:c7:54:8f:b4:db:
                    d4:62:55:38:a3:36:3a:7a:e5:c3:52:08:ac:f1:62:
                    11:97:72:af:1e:b6:5a:4c:91:8e:9d:3a:02:80:0a:
                    3a:6a:95:f0:27:54:55:51:14:16:fc:f2:26:34:f2:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:25:CA:AA:38:42:D1:AF:A1:CD:62:78:6C:4F:37:AC:5E:62:1B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cecd8c53-3650-392a-835c-7db3a2523d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.163.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:34:41:e1:4c:9c:e0:24:33:2d:64:96:8a:3a:22:65:72:0f:
         f8:8a:42:35:83:c8:91:32:77:82:d5:98:b1:77:e3:18:4e:3c:
         c9:71:b2:ed:45:d4:82:b1:e1:4b:3f:42:9a:7b:67:fb:41:0d:
         84:c0:81:47:a0:41:22:90:88:9d:50:a2:ab:09:46:32:e9:7f:
         f2:12:fe:3a:59:d3:6c:0a:46:b7:73:bb:53:4c:e4:23:79:4d:
         a3:87:26:ea:4c:44:c6:56:e8:0b:aa:05:f4:2c:f3:79:37:c1:
         8f:ba:00:4f:9a:6f:69:fc:2f:1d:e0:e1:96:6f:da:c1:1c:42:
         0b:fa:f3:13:41:ea:0d:53:59:9f:40:ef:95:58:be:75:b1:06:
         5b:4b:f7:5b:b2:86:7d:e9:ad:6c:ad:af:37:87:1d:fe:71:7b:
         51:26:99:d3:08:dc:77:c0:76:18:99:38:ed:b3:c2:f6:d4:e7:
         7d:98:a6:92:d6:d6:66:ad:2f:fd:cd:12:56:b1:13:2c:9e:9b:
         a3:26:36:55:ce:eb:3b:29:e2:cf:97:ee:08:83:b1:11:50:18:
         08:1f:7b:b9:21:64:c3:7e:7b:5f:e9:6d:6a:43:17:18:02:dc:
         53:e8:d7:63:4b:0e:0f:67:6a:10:3c:10:db:d7:3f:09:dc:5a:
         7c:19:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:25:29 2025 by rpki-client