Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4602fb4b-cd80-3321-afc8-13a1f22e4a16.roa
File:                     4602fb4b-cd80-3321-afc8-13a1f22e4a16.roa (raw, json)
Hash identifier:          1t3TNGsSdlZMcMsQOwWSwzHYBQbQDN6l+l8zKn8M4jo=
Subject key identifier:   A2:CD:B1:D8:82:ED:4A:56:36:D2:A1:E7:98:0F:23:F7:2A:A8:5E:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE52F75C63A66BDB445100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4602fb4b-cd80-3321-afc8-13a1f22e4a16.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.40.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:52:f7:5c:63:a6:6b:db:44:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8e0d5922-8dfd-450f-9923-637e88776499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:66:c6:45:d0:a7:2f:a9:9b:50:1b:5a:6a:
                    ab:d1:c5:b0:92:5d:b2:cd:fb:b5:a0:7e:bb:cb:c5:
                    d8:42:e1:4e:c8:7a:f7:11:43:34:d5:8d:f9:e8:df:
                    16:f3:b7:7a:bf:7f:9a:d4:92:53:26:24:79:1e:86:
                    b6:dd:7c:df:81:dc:96:2b:85:fd:6f:62:3b:31:a2:
                    80:cb:64:32:d9:8b:c4:73:b5:ad:3a:67:b2:ed:57:
                    fe:f0:ca:98:6a:49:e3:74:24:6a:2c:d1:03:86:76:
                    1b:2d:49:df:d6:1e:45:17:82:46:5f:91:f6:04:11:
                    8e:d7:f1:17:2a:2d:e4:85:0c:ac:97:29:9b:b8:4a:
                    fa:7f:72:67:1d:a3:60:90:9e:2c:11:99:41:3c:c7:
                    ad:62:82:07:c9:c1:23:28:0c:e2:8b:b3:e3:2a:a0:
                    2a:ce:67:38:79:82:5b:97:66:6e:a2:51:e2:51:bd:
                    f8:77:6f:9b:90:f3:79:8f:c4:98:4c:c2:33:31:65:
                    57:00:a2:eb:6f:0a:6a:9f:35:34:a4:c3:d3:7f:c1:
                    e1:7d:bc:c9:d2:4d:04:9d:83:2f:06:59:ca:57:0f:
                    ba:e1:f7:7d:36:d6:dd:87:2d:3c:b2:d2:34:c9:58:
                    d9:ff:80:9e:eb:9e:29:69:26:1c:9c:71:44:86:c4:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:B1:D8:82:ED:4A:56:36:D2:A1:E7:98:0F:23:F7:2A:A8:5E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4602fb4b-cd80-3321-afc8-13a1f22e4a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:61:7c:12:13:3f:15:5a:c0:97:26:da:3c:7a:2b:bf:12:2c:
         a3:14:3c:f4:15:90:1a:6e:5e:ce:aa:06:13:cc:03:db:ba:53:
         f8:a7:e2:18:9c:4c:50:94:a4:8a:8c:e4:b7:50:e8:b9:f4:a1:
         16:9e:3f:1d:37:7c:3e:f8:6a:f0:85:2f:40:8b:8c:43:1a:4d:
         56:42:75:11:4c:ef:5f:9b:2d:d3:88:14:c7:69:b3:85:e1:69:
         89:9e:9e:26:b5:37:6a:d4:8e:a3:d2:9d:3e:eb:13:51:fd:fd:
         76:1e:0e:bd:11:dd:5a:ec:06:14:cd:b8:92:78:58:fc:a0:97:
         ea:c6:35:f0:71:75:46:17:aa:c8:8d:2f:a3:9c:26:a3:85:a6:
         d7:dd:ed:6c:4b:92:cd:da:4f:b7:b9:50:95:94:21:cf:46:c2:
         50:8a:73:8f:80:6c:ab:1a:76:60:ee:5e:62:fb:fb:60:74:de:
         99:37:68:5f:ee:fc:cf:ad:61:2d:9d:92:df:02:5a:50:b5:4d:
         c9:9e:94:42:ab:ee:37:1b:ec:5e:06:a3:98:57:cc:f7:4a:e8:
         ac:fb:36:f2:e0:01:55:cb:06:b4:54:1c:29:6b:1b:c3:42:80:
         81:00:69:89:44:92:af:68:51:cc:fa:7d:92:9e:3f:45:e4:3f:
         f2:98:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:16 2025 by rpki-client