Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa
File:                     1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa (raw, json)
Hash identifier:          1vXYqpR//tbVGbzRu+h9TZ/CdpGcThyVoYUwXkJpzR0=
Subject key identifier:   91:A6:31:70:04:6A:8E:0F:2E:B8:3F:1E:29:9F:DD:24:53:83:9C:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECB71B64BF5AF83004FF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.58.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:b7:1b:64:bf:5a:f8:30:04:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=475f1326-c01c-4273-9e66-78aac1ec539c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:94:06:18:2a:df:4f:83:16:40:e4:f3:19:
                    50:f0:a2:7e:ca:98:b2:8f:5f:22:ac:6b:d1:07:cd:
                    5a:2e:86:87:b8:af:b4:cc:ce:83:95:c8:47:65:d1:
                    5f:ff:e1:ab:33:bd:be:12:ee:33:23:80:be:dd:17:
                    e9:9e:ee:06:51:b2:3e:d8:3b:9d:d2:49:92:0d:43:
                    7c:3f:24:db:89:1e:95:70:dd:c3:85:06:30:29:5f:
                    6e:4a:8f:6d:0f:ab:9c:ea:34:08:44:62:21:ab:7c:
                    87:94:b5:05:15:8b:07:b6:12:8c:08:0b:a5:6e:bd:
                    30:72:a4:40:0e:92:30:18:83:85:3e:73:d4:90:60:
                    a0:91:40:9a:82:1e:50:4d:cb:59:14:e4:50:d8:3b:
                    2f:c3:22:02:ba:9d:42:13:5c:38:21:d5:f3:8a:e4:
                    8b:91:7e:91:51:4f:78:fa:01:a8:3c:80:a9:ae:f1:
                    11:05:b1:82:86:f1:37:dc:af:f2:04:3c:52:2a:8f:
                    40:13:5e:29:59:ea:35:7b:23:0f:f2:6a:47:a7:14:
                    4b:0b:dc:b7:87:fd:b7:c9:3c:c6:55:ec:a9:72:66:
                    08:57:ea:c2:a0:da:1a:cf:ee:91:8c:06:4a:9c:e5:
                    44:08:7d:fd:5b:a5:d8:b6:c0:19:9e:12:05:1d:ad:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:31:70:04:6A:8E:0F:2E:B8:3F:1E:29:9F:DD:24:53:83:9C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:31:5c:62:be:27:a4:31:17:e8:6b:5d:e1:90:8c:7b:bb:50:
         d6:68:22:90:7f:69:db:65:6c:c6:59:07:49:ad:56:3b:8d:77:
         e0:8f:c1:2a:21:93:70:59:0d:8e:52:13:41:4d:dc:6e:01:8c:
         ed:31:04:60:b3:31:09:89:89:6a:58:0d:55:13:4a:ae:2a:1f:
         d6:e2:49:e7:12:03:8e:da:b9:26:1f:ca:7c:58:88:84:3c:d6:
         2c:40:ab:82:a0:cc:a7:be:a4:75:49:3a:55:64:9f:9c:f8:38:
         e0:db:c8:31:5b:f0:43:80:88:e7:12:9d:a5:56:36:eb:bb:51:
         c7:a1:cf:b4:cb:15:c7:46:59:ea:b9:85:a5:76:cf:c0:8d:1c:
         3b:d4:88:e7:c4:3e:f6:0f:a8:e9:3a:a2:fe:4b:b1:dc:6a:6a:
         47:41:a0:0c:c9:90:48:46:ac:9d:ba:57:9e:db:17:81:4e:fa:
         75:bb:4a:d1:2a:b4:79:a6:25:7a:5d:29:71:b6:bc:b1:51:6e:
         8a:73:15:c8:02:49:25:32:d3:81:75:2f:81:48:5c:61:f5:7e:
         c0:3e:13:64:4b:0c:71:ef:9d:90:11:13:19:3e:08:69:0c:18:
         32:f4:a9:4e:42:0e:1d:e2:4b:c1:45:c5:a6:73:d4:67:1c:41:
         1d:96:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:28 2025 by rpki-client