Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb985f1-5123-3070-b188-3dc6c4ace29c.roa
File:                     efb985f1-5123-3070-b188-3dc6c4ace29c.roa (raw, json)
Hash identifier:          IOGL9ckc1kKqduACDk0wS9bpLMHqu2PK6Zwnj2DLPLs=
Subject key identifier:   7B:3D:54:CD:0D:6D:EE:1C:BE:91:01:B0:41:FF:57:70:E2:CE:82:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB4285D25616D2B91B2FF4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb985f1-5123-3070-b188-3dc6c4ace29c.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.52.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:42:85:d2:56:16:d2:b9:1b:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=4f36f517-af26-4e4f-a105-83813e08bda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8a:44:db:43:3f:43:f7:36:fb:e3:5d:21:a6:
                    19:76:40:c8:0c:19:cc:f8:ec:a8:2a:be:d5:73:ee:
                    97:7a:dc:1d:e6:7b:63:0c:59:a3:85:56:7d:4d:79:
                    f1:45:5d:55:98:0b:ab:e5:3d:01:30:62:ae:f8:6a:
                    12:a7:02:fb:99:3f:73:bb:f1:cd:ba:0a:f1:96:40:
                    38:50:86:49:fd:00:5c:15:03:15:aa:cc:55:f2:28:
                    09:7b:b1:6a:b4:e1:f0:f4:3e:50:e3:11:77:5a:e8:
                    5d:6d:d6:ac:e0:fd:72:36:5d:31:27:3e:c9:f1:1a:
                    a8:ab:91:76:24:3c:4f:d4:15:96:5f:6d:c9:ce:39:
                    6a:ff:29:51:da:ef:af:ce:43:e7:e8:90:7f:4b:af:
                    68:c8:23:8b:25:59:ff:d7:0e:90:6d:dc:29:89:82:
                    71:69:30:17:c9:fb:db:49:4e:10:46:9e:6b:7a:e4:
                    d4:97:23:43:a4:ec:97:a9:7f:3c:04:29:65:95:54:
                    91:c7:2d:a4:4d:1b:f3:bf:0d:b4:71:93:a2:b5:39:
                    fa:74:d3:4c:88:db:c4:1a:34:71:33:06:d1:bb:31:
                    01:9a:99:05:e8:8a:ca:0a:1e:98:b0:91:dd:62:52:
                    c2:e9:8a:41:6c:3e:bb:cf:a6:47:8b:e0:6f:f5:b9:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:54:CD:0D:6D:EE:1C:BE:91:01:B0:41:FF:57:70:E2:CE:82:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb985f1-5123-3070-b188-3dc6c4ace29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:ed:a7:bb:b4:32:8c:97:e0:6f:9f:4f:57:b6:cc:87:ea:
         70:63:9e:03:a6:f9:bc:07:7a:54:f5:d7:74:87:9f:78:61:e6:
         cb:1d:a2:ce:27:92:b6:a7:ab:8b:f5:2c:e9:ec:41:eb:63:2e:
         70:dc:21:2f:59:3a:d3:d5:12:41:20:92:2f:97:da:52:6d:21:
         ff:4d:fb:b0:cf:a0:24:18:29:3b:be:88:0c:c4:03:3d:43:d8:
         d9:b2:e4:d3:8c:6d:98:33:bc:93:d4:18:0b:bd:3d:06:52:ff:
         f3:a1:35:a6:ad:5e:d1:ba:c7:ef:40:a2:49:e3:07:87:28:5c:
         f7:36:bd:55:fb:4e:7f:91:8e:0f:a3:e7:0f:4b:dc:ec:d8:f2:
         70:37:bf:de:a0:16:42:a0:48:ed:4e:5c:b6:70:36:92:b9:52:
         45:c6:aa:f1:48:24:88:93:92:b8:ac:48:b9:e7:78:54:77:d0:
         80:0e:34:39:1c:d7:da:2c:0d:25:f1:8f:b8:84:73:28:ff:7d:
         ab:da:d0:a7:1c:7e:fe:80:8d:b6:a3:a4:e7:3e:11:9b:e9:db:
         ec:27:92:19:3a:71:56:d6:ab:1f:bf:d6:c0:f1:89:a1:87:1c:
         70:dc:2e:7b:b3:07:35:cb:80:fa:32:c6:5c:bc:9f:e4:46:19:
         01:00:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:25:33 2025 by rpki-client