Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2248ef-1e0a-3e6f-92a8-d7b5597fb307.roa
File:                     fb2248ef-1e0a-3e6f-92a8-d7b5597fb307.roa (raw, json)
Hash identifier:          VNxTKqMX7yvbaX611HTep6lkU6uj8JnhMDM4dmCIHrk=
Subject key identifier:   95:C3:B7:05:AD:81:06:A5:E3:BF:51:A9:52:B8:45:E7:EC:B4:1A:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3D4A9F21ACFDBE401D200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2248ef-1e0a-3e6f-92a8-d7b5597fb307.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        68.84.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:d4:a9:f2:1a:cf:db:e4:01:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=72fd515a-4570-44fb-b199-ddfcfb68ef4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:76:82:f6:7f:a3:64:93:7b:5c:c5:4b:08:
                    6e:48:9f:45:15:2f:d6:37:95:fd:a0:a4:d3:75:94:
                    a7:9c:f4:c4:a5:ef:e0:9e:5b:ed:27:04:8d:2f:a5:
                    b4:39:c3:b5:d7:bd:c9:f7:47:4b:3e:76:1e:46:07:
                    f0:4c:9d:65:5b:73:32:fc:6f:7b:dd:37:03:fb:57:
                    54:06:8d:28:d3:66:94:fa:30:1a:ff:77:14:bb:9d:
                    1f:b9:c2:29:3e:9b:d3:25:bd:a2:52:78:53:e2:52:
                    65:56:94:f6:cc:61:62:e2:99:87:d8:14:8c:17:1e:
                    9c:b4:4e:69:8c:ee:bb:e9:73:41:14:9a:27:fd:30:
                    86:b6:bb:27:f3:4e:77:77:68:af:b7:62:44:06:13:
                    ee:db:15:8a:ce:b7:75:d5:af:49:5a:5b:ae:c8:84:
                    c0:57:86:1d:40:3c:ea:74:c9:f2:ce:87:47:3f:91:
                    bc:63:30:f4:e7:98:f7:d2:63:6e:34:26:45:20:bb:
                    bf:c6:7c:6e:f4:83:bd:e6:06:e5:80:6f:19:b1:2c:
                    dc:e8:e3:84:58:22:75:cb:47:bb:e0:6f:92:d7:bc:
                    2f:38:fb:32:3a:19:10:5c:3f:f6:44:58:c8:b0:8e:
                    21:61:92:46:f7:9a:43:ed:ae:4a:3f:c5:e4:f1:14:
                    02:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C3:B7:05:AD:81:06:A5:E3:BF:51:A9:52:B8:45:E7:EC:B4:1A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb2248ef-1e0a-3e6f-92a8-d7b5597fb307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.84.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:fd:81:58:94:93:f3:d9:c4:54:27:1e:c7:d1:0c:d4:5a:
         3c:26:4d:97:f0:a8:26:08:1e:49:57:36:c8:54:19:cd:b3:68:
         64:4e:a0:1d:ba:a9:46:01:57:96:a3:7e:c3:c7:ad:8f:2e:67:
         98:4d:7c:ae:f1:bf:e4:e4:83:58:f2:34:99:2b:29:e4:b1:02:
         13:88:75:52:cd:69:c6:18:45:06:ea:a2:03:54:a6:68:0f:89:
         13:06:8a:8c:16:70:6a:0a:f0:20:41:d9:be:bd:f1:20:57:4f:
         9d:8b:d6:d5:6e:c9:15:f8:39:96:10:5c:b7:e9:15:99:82:16:
         2c:2a:ce:99:ce:30:aa:41:6e:d0:53:74:92:6d:96:38:cb:03:
         23:db:ad:c7:67:13:6f:a4:59:f9:b7:4a:61:e4:21:60:89:e5:
         f8:00:36:a2:b5:2a:e7:86:eb:3a:52:15:11:3b:e5:c1:24:dd:
         e4:07:61:0b:8c:af:f0:8b:6d:64:22:83:54:80:93:2c:69:20:
         23:6e:4a:3a:92:a8:e5:13:e0:53:e6:56:07:65:39:22:93:b8:
         f5:c9:e3:46:62:a8:2b:ac:61:39:06:6e:2b:66:02:88:d1:72:
         ae:f3:96:d2:97:b3:38:bc:5d:03:27:e9:af:93:1a:03:02:17:
         71:90:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:11:51 2025 by rpki-client