Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5115278-46a7-36ad-a578-701fec42215e.roa
File:                     e5115278-46a7-36ad-a578-701fec42215e.roa (raw, json)
Hash identifier:          iLSP/J9RQcgQilw1xP88BduhakBKsnNwMk2mWqAn3A0=
Subject key identifier:   9B:99:8B:47:81:C4:34:2D:D8:58:20:40:A5:A0:94:03:17:D5:C0:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2EA420FF1BAD9BCDA7220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5115278-46a7-36ad-a578-701fec42215e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        67.160.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:ea:42:0f:f1:ba:d9:bc:da:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=cd9a7a90-7085-4af1-bdab-0a14439e760b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:af:25:aa:89:b0:4e:dd:ca:fa:4f:d5:60:
                    f2:dc:48:30:b7:42:3d:0d:23:36:5b:a0:4a:2e:1f:
                    65:bb:f0:01:e2:c6:f9:23:28:17:a2:ac:1e:d2:6a:
                    f3:f6:2d:06:6a:eb:eb:5a:9f:9b:55:6f:30:8f:19:
                    12:1d:f4:e2:c8:f7:bb:65:1a:98:01:33:dc:1c:74:
                    3e:6e:bb:fd:0b:87:68:cd:66:85:ed:63:54:37:36:
                    8f:9a:66:42:23:02:df:51:f5:03:56:62:07:89:e8:
                    c0:79:65:1e:d0:a3:66:ab:74:ee:37:f0:e1:ac:36:
                    b2:b2:e5:1b:40:b2:62:63:61:91:09:f0:a9:9d:9b:
                    e7:f7:87:66:e2:cb:97:4a:2a:2a:8f:d4:25:e9:51:
                    f8:f0:68:4a:e5:45:7f:0b:c6:17:6b:c9:d4:cf:e3:
                    b6:3c:2f:83:36:76:e6:70:80:60:c2:cf:12:d0:c6:
                    7e:52:44:ed:47:c1:de:cc:0b:e9:0f:59:f5:81:9c:
                    cc:2e:1d:23:15:65:ef:e7:7e:09:3f:ac:3f:b7:cf:
                    87:36:a9:e2:91:bd:7a:a1:7f:d8:6d:31:d6:0b:04:
                    06:9f:5c:01:ec:0b:73:77:67:6e:3e:b2:97:e5:5b:
                    ea:00:2c:e7:69:d3:6d:e4:4d:3f:d2:18:1d:32:fe:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:99:8B:47:81:C4:34:2D:D8:58:20:40:A5:A0:94:03:17:D5:C0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5115278-46a7-36ad-a578-701fec42215e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.160.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:14:0e:f6:c5:16:0d:74:62:15:44:a9:5e:50:f4:94:13:48:
         09:8c:cd:4b:22:1f:d0:cf:ec:f8:68:c1:c8:18:ab:1d:f0:78:
         81:9b:73:9d:79:a2:a4:7e:13:15:bc:e1:72:fb:f2:4d:ce:17:
         21:33:67:ef:c5:fc:be:2d:06:60:64:e9:7f:64:2d:ea:42:90:
         c5:27:cb:8e:19:3c:a4:4e:d5:c2:7c:b9:85:8b:8a:d8:d4:cd:
         00:03:59:2b:88:ac:a5:4f:87:b2:56:17:eb:80:55:97:80:4f:
         c2:c1:d9:63:24:c7:ee:0c:78:f2:fe:d8:26:41:79:98:7c:7f:
         16:1a:2f:89:8f:aa:9d:80:0e:da:4c:3f:f8:b6:30:f0:07:a4:
         59:60:0d:ae:07:66:2c:4a:e3:e8:48:24:e1:0c:e0:72:34:25:
         b3:75:6c:d5:ef:c0:9b:e3:0a:2d:df:bc:d8:aa:61:b8:ff:f2:
         a4:cf:ee:7f:12:ec:de:f6:40:43:eb:fe:6b:21:b9:c2:3c:15:
         7c:70:6b:64:ba:75:5a:ad:51:35:97:3e:b7:06:f5:5a:da:03:
         9d:a2:a4:be:c8:53:cb:62:61:89:28:4e:75:c3:34:d8:0b:a3:
         90:72:a4:db:eb:76:14:1c:df:fa:a9:8b:f4:77:47:d5:f5:27:
         dc:a7:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:28:17 2025 by rpki-client