Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/207235d4-d1d5-3f4f-9e47-c890f933ecd7.roa
File:                     207235d4-d1d5-3f4f-9e47-c890f933ecd7.roa (raw, json)
Hash identifier:          hWk2foeSPyRqsCruju8CGDRSC8vVhpOHffbftb2ksZo=
Subject key identifier:   66:28:22:3B:0D:B0:80:0E:B0:F1:9A:EB:54:A2:73:66:3D:38:25:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECB06FC4E652C20CB3BB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/207235d4-d1d5-3f4f-9e47-c890f933ecd7.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.51.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:b0:6f:c4:e6:52:c2:0c:b3:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9f39d23d-a5ec-4416-a8fa-8d5b52345f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:9c:4f:a1:ad:17:62:22:07:f5:ec:33:a4:
                    14:3e:11:2c:4b:de:35:b8:d9:5d:db:a6:80:85:3d:
                    5a:bd:47:8d:0c:bd:37:4f:ed:bf:d4:eb:58:19:3a:
                    84:39:da:ee:c5:f0:7a:61:94:6d:21:ba:b6:0b:ed:
                    2c:f0:d9:b7:4c:22:d1:49:5e:2d:d7:b7:38:6f:2b:
                    0c:9b:34:c5:be:cc:f6:fe:66:63:d9:61:44:53:79:
                    05:42:ad:81:26:36:b2:11:1e:f9:07:ce:71:4a:c9:
                    ff:4b:02:bb:de:1b:37:75:f1:64:d6:76:7e:f3:48:
                    f6:9f:55:3c:3b:36:ba:dd:9f:0a:95:61:d1:c5:84:
                    52:ac:51:9d:31:cb:4e:85:dc:1e:ad:a3:38:9a:23:
                    94:da:d9:f4:33:96:7f:e8:5f:59:c7:f4:31:d4:67:
                    1c:8d:f7:4f:75:02:82:cb:13:5a:ae:44:e5:77:0c:
                    0e:11:1d:80:fb:0a:c9:36:3e:ac:1a:c7:68:06:90:
                    ce:44:b3:3b:70:f4:d1:8d:e3:e1:d8:dd:01:dc:64:
                    db:af:6b:af:7f:d7:76:c2:c8:81:57:8f:77:e9:67:
                    af:6a:41:08:ca:d1:ab:24:bf:08:11:0b:62:b5:dd:
                    0b:6f:38:2c:77:8f:8c:ab:09:1f:79:63:63:d8:34:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:22:3B:0D:B0:80:0E:B0:F1:9A:EB:54:A2:73:66:3D:38:25:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/207235d4-d1d5-3f4f-9e47-c890f933ecd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:11:47:7f:fc:e8:d2:90:3b:45:02:87:bd:84:40:e2:ed:b9:
         57:68:31:e0:81:58:12:ee:46:04:42:38:3f:4d:f7:02:c6:65:
         71:ea:76:a1:8e:26:7d:f9:cf:eb:34:18:ce:b9:f1:0d:3a:62:
         32:e7:10:e4:56:c4:98:0f:2a:d9:4f:ba:20:48:fe:fc:4f:04:
         50:46:92:4d:99:3b:d2:29:5c:2f:72:83:22:94:49:55:1b:9d:
         d0:a7:89:67:f2:5c:c5:24:7a:b1:24:f4:ab:20:c1:8b:cd:e2:
         44:6d:8b:8f:06:19:e0:19:35:c0:ad:fa:cf:e8:30:90:4e:b1:
         97:1b:1c:46:26:4d:3d:96:e4:4b:6e:16:eb:60:8e:17:04:e8:
         3b:67:00:2b:bb:c2:2e:11:8e:99:af:cc:38:9b:0c:47:e3:ee:
         8f:34:11:42:e1:1f:c8:44:cd:db:97:8c:b4:e7:37:9b:36:d0:
         a5:d8:fe:e8:f2:66:cf:a0:af:23:51:8f:0e:02:ac:67:e3:22:
         92:4c:d4:4a:bf:66:be:14:08:5b:31:3f:81:02:10:01:92:46:
         18:aa:6e:45:75:09:3b:e1:58:0f:af:af:64:91:07:9b:fb:e9:
         7d:1a:eb:29:65:89:a5:93:e0:f7:7f:1d:8e:6e:d6:3f:4e:06:
         39:50:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:03:52 2025 by rpki-client