Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1354f8-fbc8-307d-b4d0-c992c8d522bf.roa
File:                     5d1354f8-fbc8-307d-b4d0-c992c8d522bf.roa (raw, json)
Hash identifier:          qYwtCnQF9r8bomid8sMTj8+YUjfsxsWOP+JnPCjyyeM=
Subject key identifier:   9A:C1:26:B2:9A:B7:73:56:A3:4D:F5:9B:87:EA:2D:E2:35:47:66:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECAA69788BABFE715E3F90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1354f8-fbc8-307d-b4d0-c992c8d522bf.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.48.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:aa:69:78:8b:ab:fe:71:5e:3f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f5da7347-70dc-4128-bb8b-06efd1c63ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:4b:8e:75:12:39:0b:17:a2:9e:b3:35:9f:
                    50:85:5f:ef:ae:9f:e7:52:12:4b:57:13:b2:be:8f:
                    6f:52:51:f1:94:84:8d:d5:5f:ba:f9:aa:47:0e:5c:
                    e4:b6:8e:f8:43:e4:12:58:a0:c8:ac:22:4e:db:75:
                    fc:57:1d:fc:28:24:b1:d0:66:f9:5e:8b:4d:fd:31:
                    11:11:df:19:1d:be:16:5b:83:ff:e4:bf:7f:2f:43:
                    c3:fc:b4:60:ee:47:d5:44:1b:d1:49:80:81:82:74:
                    d7:ef:a3:34:4a:92:3e:c3:65:36:64:46:cd:e1:71:
                    8e:fe:71:5c:33:f5:49:4f:e6:93:fe:e4:cc:40:27:
                    48:e1:4c:e5:c3:c4:10:b3:4f:50:04:fa:5e:3a:8b:
                    4f:1b:e6:37:7a:a7:04:66:7c:bb:fc:df:ff:de:be:
                    10:21:ef:e3:33:8d:5f:ab:8b:f4:27:31:50:9f:5c:
                    e0:48:04:a3:81:f3:13:37:8c:82:3f:d3:9c:45:ae:
                    b4:10:7a:cb:a9:21:c1:2f:b8:a5:5c:b6:62:f3:a9:
                    e6:c3:e4:39:4a:dc:ea:49:58:05:53:cb:d3:0c:78:
                    df:fd:76:b1:a4:3b:d3:84:10:6f:4d:c2:75:23:60:
                    34:dc:fb:74:62:ca:15:20:4f:3c:b8:80:86:2f:c3:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:26:B2:9A:B7:73:56:A3:4D:F5:9B:87:EA:2D:E2:35:47:66:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1354f8-fbc8-307d-b4d0-c992c8d522bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.48.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:69:af:8a:b3:19:ae:df:46:dc:66:15:19:c7:19:ff:9c:9d:
         97:5e:94:97:9d:b3:e1:1e:d2:52:5c:a8:0d:ad:0e:30:a1:70:
         f9:f7:62:82:55:15:8b:09:d0:1b:89:1f:32:59:0c:3c:86:77:
         74:52:3d:ad:65:71:2e:2c:a6:1e:ef:ee:15:1f:d4:21:f1:3b:
         13:8c:74:43:2f:58:47:93:8b:cc:6e:fa:0d:d9:7c:70:ff:b4:
         ad:26:eb:4c:a5:84:5d:7c:b9:2d:74:a7:65:a4:90:2f:43:f2:
         9b:71:45:57:25:4d:a0:63:d2:14:1d:65:d4:bf:ec:52:39:97:
         da:50:1f:fe:d9:3a:44:ba:2e:43:cf:a9:ab:a7:19:fd:b1:75:
         bb:67:35:5a:c5:24:79:9a:a0:69:56:3b:0b:e9:3e:77:c4:4f:
         52:48:54:e8:8f:96:0b:c5:59:dd:1f:05:e1:c1:cf:4c:83:e6:
         f7:eb:14:69:35:42:01:2c:ce:54:24:3e:7d:77:b8:5d:dd:38:
         95:7c:d6:01:12:8a:e0:79:8e:f7:79:49:1f:0e:4a:49:4b:0e:
         87:3d:c6:c0:48:d8:b9:05:d7:a2:83:82:5e:a7:7a:5a:5b:53:
         2a:01:bc:c8:6f:80:db:9e:ad:56:8a:4b:80:c5:e6:e4:93:76:
         5c:f0:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:49 2025 by rpki-client