Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086ea120-4c08-3268-bd17-6d4e2acfca1b.roa
File:                     086ea120-4c08-3268-bd17-6d4e2acfca1b.roa (raw, json)
Hash identifier:          Y+ZxfFzJP4XNWAf+lO5OKYEfy8wu34bs8sdMMpC5O+c=
Subject key identifier:   4F:80:E9:54:DE:28:BB:A5:72:BD:12:EA:4B:CA:58:62:50:2B:D1:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA67A30E10F1891ED8B4480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086ea120-4c08-3268-bd17-6d4e2acfca1b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        68.46.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:7a:30:e1:0f:18:91:ed:8b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=af1f39b5-f4da-46f2-bd1e-83e33cbb0b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:7f:b6:71:2d:b2:da:2b:83:c5:1b:cc:36:
                    2a:49:b4:f7:8b:11:e1:8f:14:a9:c3:1b:78:9c:2a:
                    71:b6:c0:52:5e:08:91:39:fc:1f:fa:fb:64:82:9b:
                    5a:a8:7d:7d:64:f1:b1:56:92:94:7e:88:d7:c0:31:
                    13:8b:50:6b:cf:5e:49:ef:ab:7f:c3:70:11:04:53:
                    c8:06:a1:67:4c:2b:ed:78:f3:50:24:dd:4a:ef:2a:
                    f0:05:3b:ae:e1:f0:1e:c1:7c:a5:bc:9e:0d:91:21:
                    9e:00:9a:9d:8c:b5:86:8d:26:ba:c4:84:cf:12:b3:
                    8c:0d:69:b2:7a:49:85:3e:41:7d:ea:8c:f0:3e:fd:
                    12:56:61:3c:94:03:56:81:f3:32:03:c3:a6:d8:c6:
                    7a:46:c7:c0:2d:50:8a:a2:dd:8b:82:b5:ab:1f:22:
                    f8:d0:90:01:0b:68:8e:23:61:a3:1d:c2:a8:2c:cc:
                    f1:af:03:5d:c7:fd:03:69:ef:4f:26:05:27:a5:6f:
                    c5:a7:21:8b:e5:8e:2c:ba:dc:1e:42:6f:30:ce:67:
                    c0:de:e0:bc:c8:05:05:3b:97:41:de:14:7c:21:b5:
                    f7:53:bf:f1:40:c5:ad:29:3d:c2:ba:5f:77:6e:53:
                    bd:b1:81:b2:d8:c3:b7:0f:fe:74:1a:9c:29:32:18:
                    c7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:80:E9:54:DE:28:BB:A5:72:BD:12:EA:4B:CA:58:62:50:2B:D1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086ea120-4c08-3268-bd17-6d4e2acfca1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:42:71:85:30:27:24:ca:c3:29:5d:b7:23:7d:ab:5c:80:
         75:0e:4f:0b:4a:12:ea:91:ca:f9:5f:cc:77:ce:9e:3a:6a:f2:
         cb:10:32:03:b8:5b:43:20:59:9c:78:db:41:84:46:f3:17:5b:
         a5:92:95:72:d1:f9:7e:c9:77:a4:6d:78:0f:46:f1:26:46:cf:
         3a:c7:48:ba:3c:ac:0a:93:84:af:8d:e8:a4:4d:ad:b1:61:bd:
         f3:8d:8f:15:fe:4e:20:5b:ab:60:b1:8e:7b:9f:22:bb:a3:ca:
         82:3f:7c:3f:d9:d8:5f:d1:f0:9f:25:74:be:27:9a:48:d9:fe:
         10:2e:02:b8:f5:bb:c2:76:b2:de:e6:b6:62:73:85:e3:21:f3:
         9d:e3:19:7f:61:d9:dd:20:e2:98:07:f2:fb:d7:0f:5c:19:f8:
         8d:67:31:a5:f9:55:5d:ea:58:65:38:7e:51:0b:58:91:ef:18:
         99:bc:a9:ef:4f:b1:6b:bb:14:dd:bb:ae:04:0f:ce:43:8c:fc:
         f7:32:6f:10:77:7c:6f:b2:e9:70:d6:98:eb:ff:1b:23:a5:a0:
         d3:be:a1:25:76:d1:3b:79:e0:8b:9b:ab:de:eb:85:2e:30:53:
         a2:45:cb:b2:dd:19:7c:b4:47:f7:55:15:d2:df:3f:23:89:c9:
         45:fe:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:30 2025 by rpki-client