Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b2fa57-904f-3fc6-bfa2-d0d151cd357f.roa
File:                     45b2fa57-904f-3fc6-bfa2-d0d151cd357f.roa (raw, json)
Hash identifier:          YZkXEK5Ik3/bSq+lLG5pa4uPvl8/aH3hgYQE0XKFm78=
Subject key identifier:   AC:35:62:CA:A8:51:13:03:71:F0:10:A8:B0:F2:27:28:D9:3D:46:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED539565A31C3D096BCDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b2fa57-904f-3fc6-bfa2-d0d151cd357f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        67.189.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:53:95:65:a3:1c:3d:09:6b:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=89a1bfb4-23bc-4345-84b2-80a42ea942dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:15:f6:7e:07:a9:06:cc:55:5f:3f:55:cd:
                    ee:85:4e:82:06:51:58:fd:10:12:9e:f3:58:3b:d5:
                    d7:2d:52:7a:fc:4e:1a:66:91:a3:f0:10:e0:ce:db:
                    78:6d:55:81:af:75:56:5d:de:10:4f:a1:04:65:c4:
                    48:77:e6:89:77:63:a9:ab:de:68:5e:1d:b7:93:98:
                    2a:68:fb:65:f3:7f:2e:b9:4d:39:86:9a:76:cf:d7:
                    c3:04:10:63:f7:4a:cf:a3:3a:cb:b2:a4:f1:f2:04:
                    8a:4a:20:69:5d:e2:f3:58:a1:71:14:44:10:00:5a:
                    93:d6:16:ce:1a:9c:a0:28:05:79:30:db:b0:f0:33:
                    e3:2c:c3:eb:03:a8:7e:dc:fb:2c:df:c0:50:f9:14:
                    1c:2a:b7:db:6d:e3:dd:26:8b:f4:5e:0b:2f:86:9e:
                    6d:a6:3b:bc:ef:bf:30:12:c1:81:d7:a1:6f:ff:81:
                    db:13:1c:7e:d9:1d:02:fe:9e:7b:57:e8:d5:11:e1:
                    d5:26:a7:95:af:9a:5f:9d:88:05:35:39:c8:06:6d:
                    f8:38:f7:fd:44:71:53:f4:c2:a7:3f:be:58:a0:41:
                    85:83:9c:64:05:a5:dc:e0:fe:ca:00:9d:d1:b4:fe:
                    f4:78:ef:59:34:87:f5:5d:f3:4f:07:8d:2b:d7:ed:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:62:CA:A8:51:13:03:71:F0:10:A8:B0:F2:27:28:D9:3D:46:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b2fa57-904f-3fc6-bfa2-d0d151cd357f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.189.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:dd:0a:6d:a7:d8:e6:78:3d:bb:31:a9:84:b5:af:30:95:
         77:f3:0f:c0:ae:ee:59:b2:f7:56:59:72:b3:88:85:b8:2e:8a:
         45:d9:de:b1:db:31:3b:00:e2:7e:14:55:b0:67:6c:e1:5d:2d:
         1f:12:b3:50:7f:85:9a:67:8c:3e:22:de:74:19:d6:c9:ea:bc:
         cb:a4:d9:f3:25:15:a1:73:be:2a:76:4e:63:a5:25:47:d0:fa:
         d8:e7:48:70:41:3b:43:b4:6c:b1:1d:f8:77:15:7f:75:c5:15:
         07:f0:54:f7:fe:0c:62:a5:2b:8f:05:1a:64:33:e9:69:50:2c:
         df:a2:f1:5e:b7:d6:81:8c:56:e5:48:a6:e9:3f:41:6e:57:d8:
         d2:ba:19:8b:09:f0:16:09:d8:7f:ef:d9:f2:bf:72:b0:5e:9e:
         46:32:d9:ef:12:7f:43:37:d9:1e:6f:6a:7c:4d:cd:ca:9b:de:
         c6:43:7d:fd:c1:c9:7f:78:cc:b3:7f:9b:2a:c0:67:69:e1:1d:
         5c:6c:ee:2d:7f:74:41:a7:d6:6c:18:10:d3:c6:21:20:f5:02:
         32:34:d1:ba:a0:3f:2f:aa:d1:6c:43:ac:08:c8:97:f9:c5:35:
         ef:91:89:9f:84:6c:14:9e:a1:2b:56:18:2f:f0:e6:1e:0f:af:
         f5:34:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:12 2025 by rpki-client