Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec18689-c004-3a28-b7e1-47b045be7f61.roa
File:                     dec18689-c004-3a28-b7e1-47b045be7f61.roa (raw, json)
Hash identifier:          eI8QGBpmgs68laiNvSsRmnqDZbAlORs6jQa4qEGsWDA=
Subject key identifier:   31:82:10:CD:CF:63:3C:39:04:40:81:8E:BA:85:F8:4C:63:BC:0E:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD677374D6E419B265F440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec18689-c004-3a28-b7e1-47b045be7f61.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        68.47.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:67:73:74:d6:e4:19:b2:65:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a023feb9-3469-4ed3-80c7-230a7a6bec36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:30:ac:ae:f1:16:21:90:17:0d:0b:04:a1:
                    7d:e9:ec:a6:d1:0e:69:c8:ce:cb:a9:f3:19:ef:48:
                    e4:e9:bd:35:20:4e:a2:7c:32:53:66:12:5b:63:d3:
                    f1:7b:24:d8:27:a9:c1:3d:15:31:a2:90:f5:70:a1:
                    86:6d:22:77:1e:05:ac:d0:c7:1f:fe:3f:9f:0e:d2:
                    44:38:44:f3:b2:49:4e:79:fa:c0:a1:71:75:9f:91:
                    88:9e:c3:a7:56:b0:5a:71:9c:86:73:c5:3c:27:de:
                    ab:fb:cb:5d:f5:63:c6:0f:98:51:e9:ce:12:1d:47:
                    c1:0b:f0:7b:90:83:5a:7c:0f:cd:0c:ef:64:88:85:
                    07:dd:5b:c5:02:df:d3:af:11:d8:02:51:fe:24:ee:
                    6f:88:63:73:52:07:1d:98:dc:65:19:54:cc:c5:a2:
                    05:dc:53:f8:4a:fb:11:3d:9f:7a:ad:66:e6:8c:e1:
                    bb:ed:6d:6d:69:ea:5f:15:cb:b1:6d:9d:97:b4:f8:
                    52:7d:b2:f1:73:33:09:35:33:99:ec:d6:84:39:88:
                    8a:f3:b0:61:29:dd:16:90:77:e2:74:dc:6d:3f:eb:
                    f2:d7:e9:af:07:f7:06:0f:0d:22:f1:42:85:a1:c8:
                    f8:3b:d5:ac:73:69:42:99:b6:8e:34:8e:6f:3c:76:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:82:10:CD:CF:63:3C:39:04:40:81:8E:BA:85:F8:4C:63:BC:0E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec18689-c004-3a28-b7e1-47b045be7f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:b9:75:f8:27:ac:85:2b:e9:52:87:5c:b3:3a:23:82:7d:
         47:29:cf:3b:e6:7a:ba:98:6d:01:a3:a4:76:29:24:42:f7:eb:
         1c:f0:34:cf:48:27:7a:24:d0:4c:25:6b:6e:78:d6:94:24:94:
         0b:da:77:5a:61:ee:c4:a3:04:8b:80:94:97:ea:fb:c0:68:a5:
         29:00:31:22:d3:15:2e:34:43:9a:54:9a:bb:b4:87:a2:fd:26:
         5f:09:2a:d3:2a:eb:43:1e:b9:d8:b0:3f:d4:9b:a0:f5:b2:55:
         38:48:c5:67:d5:93:39:c3:b2:90:b9:2d:9b:7b:80:7d:0f:33:
         88:85:9c:c7:eb:6b:2a:60:c0:89:d3:f2:35:55:73:34:6e:48:
         5e:91:3c:d4:cd:9c:fb:01:9a:a6:8c:5e:0a:16:be:79:10:e6:
         9b:3a:e8:7a:73:32:8c:18:59:1a:53:12:34:c3:b5:71:8f:87:
         d0:ec:da:fa:d2:e5:7e:67:40:85:46:e8:20:80:45:2c:63:c0:
         cf:28:88:79:63:05:ae:41:8c:cc:ca:f9:67:9a:42:82:24:bc:
         8f:11:2a:1e:51:9d:34:7c:ec:06:18:4d:23:db:76:e0:ee:fe:
         11:1b:31:c2:4e:c9:b8:a9:07:23:cc:6c:43:48:18:51:4a:21:
         50:74:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:17:38 2025 by rpki-client