Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3414615b-bfc1-3347-b470-27383749e368.roa
File:                     3414615b-bfc1-3347-b470-27383749e368.roa (raw, json)
Hash identifier:          Nosd56ehLyQu6zN7pEu7BhZV6CZnb0uiLJPQiXKL8Cg=
Subject key identifier:   00:74:2A:6D:40:46:C6:DD:83:CC:C1:9F:16:C2:ED:FB:09:A6:4B:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE1D8C46AB3C2AA25AD240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3414615b-bfc1-3347-b470-27383749e368.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        75.68.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:1d:8c:46:ab:3c:2a:a2:5a:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a6b4e8cf-007d-4a80-b99d-c3a854b9f039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:d3:af:9f:f0:66:c7:25:10:dd:e1:d4:db:
                    38:71:f1:b6:37:7a:d3:6c:01:f0:79:e1:ef:d3:b8:
                    42:03:03:75:56:f3:a9:87:74:12:9c:75:f5:4c:dd:
                    47:af:22:f0:7f:1b:9d:85:65:80:b0:eb:b0:0b:38:
                    a8:01:e3:c7:c5:41:24:a5:f6:b6:2d:99:9b:7e:29:
                    64:80:19:eb:05:15:3d:67:c5:92:c2:dc:2b:04:9c:
                    bf:b4:6a:a3:93:ff:e5:40:26:19:12:b8:36:0f:9e:
                    d0:0e:03:19:8c:cf:89:3b:51:df:d3:d5:f1:e3:62:
                    8b:bc:4b:6e:62:c5:81:e4:d9:06:e5:0f:2e:92:09:
                    96:1f:e8:1e:cf:03:55:63:8f:72:44:26:42:c8:9e:
                    7b:be:f3:63:8b:34:a8:d7:c5:04:80:18:ad:06:a7:
                    7d:28:50:c1:35:14:3f:b9:44:8a:f1:ca:1b:d3:6b:
                    e4:7a:d5:ea:9b:4b:42:27:e2:5d:ed:ff:10:55:5e:
                    5a:f9:63:e3:76:69:ac:15:98:f1:f0:c1:0d:61:e5:
                    96:e1:dd:11:2b:13:cb:b7:8c:02:e3:60:3c:54:7a:
                    3c:62:70:94:1b:c2:05:6f:c0:16:ea:1e:4b:fd:71:
                    40:79:da:f9:55:78:87:5b:bf:35:5a:75:62:bb:f8:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:74:2A:6D:40:46:C6:DD:83:CC:C1:9F:16:C2:ED:FB:09:A6:4B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3414615b-bfc1-3347-b470-27383749e368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.68.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:71:f0:6e:99:10:78:ef:17:84:6e:5f:0b:da:c2:6a:88:
         84:83:1e:81:80:eb:ec:b3:44:da:f1:9a:d0:36:3d:4b:a6:85:
         10:be:7b:fe:71:ad:83:ff:31:4f:3d:c8:55:a6:08:3f:07:9e:
         3e:51:6b:b6:d4:75:57:63:db:6b:5e:2d:aa:cc:6c:3c:9f:8d:
         90:4e:8e:c4:fd:68:8d:1d:6b:35:fb:27:21:ae:d1:f5:26:52:
         e9:eb:5f:ac:5c:98:e5:a0:ef:ef:e6:49:70:82:87:45:5e:3d:
         fe:14:36:70:ef:d7:6d:57:b9:f2:26:01:20:bd:59:a5:44:42:
         57:1f:b2:fe:cb:a6:20:a8:d4:5e:89:7e:e5:37:08:43:79:5e:
         00:eb:1e:22:e3:3a:64:f2:e1:c3:c4:90:17:71:42:22:70:05:
         a7:44:1d:b5:36:2b:57:31:7c:b4:7e:6f:86:3d:4e:02:f0:2c:
         2b:73:3b:ce:a9:35:a2:26:fb:4e:b3:fa:bd:11:74:73:e8:64:
         d4:88:0c:ba:e9:56:65:5c:3b:c0:dd:db:9d:58:c6:d1:1e:7d:
         c9:07:d1:fe:f2:ea:d0:d9:c1:12:e7:52:d8:ea:6e:41:70:25:
         99:34:3b:f4:74:95:de:10:6c:e5:4c:44:47:39:e9:47:5c:43:
         e7:d6:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:18 2025 by rpki-client