Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6a4916-7913-3983-83d3-ad037ce48854.roa
File:                     2c6a4916-7913-3983-83d3-ad037ce48854.roa (raw, json)
Hash identifier:          eowrmvG/XlEeDssRuhSPEYLtWgRXzQzEmJ8txB7KYNc=
Subject key identifier:   1A:2F:AC:5C:EA:45:38:5C:FC:BD:BE:6C:97:6D:17:AC:8B:1B:19:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE6C7E5735C5DE3CB44EDC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6a4916-7913-3983-83d3-ad037ce48854.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.61.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:6c:7e:57:35:c5:de:3c:b4:4e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=c606da22-d3c7-4980-a594-1d6de36c9dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:2d:c4:ec:90:0f:eb:db:d6:d5:96:96:7e:
                    cf:b8:b9:e1:b7:1a:b9:33:2c:bd:9c:9b:56:38:20:
                    22:be:cf:76:9e:5a:fc:9d:40:25:29:84:3a:70:09:
                    11:b7:82:38:82:4c:8e:d0:fa:99:0c:20:0a:d3:0d:
                    ac:52:ae:19:59:9d:62:ad:97:16:8b:fa:ec:1c:38:
                    27:04:2a:33:d7:1c:b3:e1:df:67:d8:13:71:1a:65:
                    8f:c0:3d:ac:d4:b3:87:9e:75:1a:91:ab:68:ca:29:
                    fd:58:bd:b8:8b:de:f5:81:7f:89:d7:25:c6:2d:60:
                    77:19:80:da:31:ed:db:59:9e:d2:71:01:1e:de:c1:
                    2d:68:7c:67:f4:32:db:3b:f7:d0:e0:36:47:e1:ea:
                    2d:47:b9:0b:30:df:7c:5c:a4:0c:a7:51:86:29:66:
                    e8:71:f8:72:10:74:93:fe:73:a3:84:61:0a:f0:bd:
                    99:f4:5c:3c:91:8b:9a:bc:cc:b5:5a:03:48:c3:b8:
                    ec:cb:ea:6e:26:40:d6:6b:c0:41:c2:b4:a0:34:38:
                    b6:14:41:c5:3c:5c:fb:4d:80:06:4f:f6:97:fd:84:
                    90:01:a1:82:32:a5:06:ca:6c:91:f3:4f:ad:2c:ec:
                    45:4a:a5:87:01:87:a1:a7:71:73:70:c8:e9:04:80:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:AC:5C:EA:45:38:5C:FC:BD:BE:6C:97:6D:17:AC:8B:1B:19:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6a4916-7913-3983-83d3-ad037ce48854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:d5:bf:71:ef:61:9d:84:80:00:66:de:84:68:8c:6f:a5:
         5d:83:18:b9:f6:ce:6c:cc:73:28:b0:42:8a:89:20:6f:cc:07:
         9c:32:f6:f3:01:71:b0:67:d7:d1:e5:a0:67:21:bf:62:73:6f:
         c0:b3:0e:36:0e:1b:d8:1a:55:86:88:ab:9a:59:6b:03:14:f1:
         43:9b:4d:99:73:5a:6e:56:f6:64:fb:3f:c9:2b:0b:90:d7:08:
         83:99:e6:30:22:18:5f:45:d2:af:42:21:7c:c1:93:bb:cc:56:
         88:1c:76:19:33:de:31:a9:aa:1d:5d:04:16:d5:e7:c3:13:4b:
         55:d6:ed:59:ee:f7:14:d3:71:cd:12:a9:32:84:3c:4f:cc:39:
         11:5f:6f:36:85:48:ea:d0:0c:6d:42:24:33:03:61:6d:d4:49:
         0f:4e:c9:4d:a7:3b:b4:ea:ad:e2:79:b8:d2:93:4e:48:a4:f5:
         7f:68:9c:61:61:9d:fc:ee:d8:3d:34:a7:76:eb:99:2f:7f:36:
         11:76:01:82:12:9e:f6:cf:f2:be:7f:65:1d:b2:b2:22:4f:12:
         d8:5e:f1:6f:a7:5e:46:b7:84:f1:5e:fe:77:52:a5:9e:49:d6:
         ca:4d:7c:df:c9:8a:44:6d:8a:b3:9b:76:51:0e:8f:d0:61:e0:
         3f:2a:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:01:47 2025 by rpki-client