Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e8e1195-9b76-339d-ae87-ee3ecbbbf3ea.roa
File:                     6e8e1195-9b76-339d-ae87-ee3ecbbbf3ea.roa (raw, json)
Hash identifier:          /+JcQ2lf65Cg+lO5fd3wQLkhu/vCOMbiVO+fr1iv9EI=
Subject key identifier:   99:91:61:CC:98:8B:3C:10:8D:0C:98:36:FD:56:BF:92:E6:88:EE:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA52E957ACD911144BCE880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e8e1195-9b76-339d-ae87-ee3ecbbbf3ea.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        68.46.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:2e:95:7a:cd:91:11:44:bc:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=5433ab78-8c87-4578-93c3-ed736469d37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:fa:8f:eb:4d:44:12:5c:6d:18:5f:ef:2d:
                    8e:64:ca:ac:b9:b5:16:74:ac:fc:bd:fb:ed:d4:38:
                    ad:ad:a9:93:85:03:b3:43:91:0b:12:ae:a6:f1:15:
                    0c:e5:1b:c1:cc:73:33:89:7a:d0:1a:17:f7:31:25:
                    47:81:44:35:60:db:14:44:bb:af:7b:f7:a2:09:d1:
                    50:1d:1b:e1:58:fd:76:e7:3b:e0:63:91:7f:9a:9d:
                    c1:b7:25:08:96:09:42:45:a6:26:77:b7:ae:ad:13:
                    f2:66:d2:ce:b9:12:ce:b6:d3:49:df:88:3a:3b:25:
                    b3:d7:da:85:bb:be:cc:1d:44:5c:6c:1b:73:57:8b:
                    16:f0:64:02:a5:79:9a:04:e3:14:b9:e0:03:51:9a:
                    86:1e:37:eb:54:59:ea:a2:b5:73:24:2f:61:80:ba:
                    8a:23:e7:98:16:50:70:be:bc:e0:53:9e:91:fb:d4:
                    df:d5:c0:c3:07:8b:3d:d9:05:7c:61:39:a8:f9:7c:
                    e5:32:60:cb:a3:f6:3a:e2:c2:ac:7b:81:0c:c4:22:
                    3b:ee:ce:64:88:f8:ca:6f:56:c6:fc:dd:5a:26:c1:
                    ab:37:91:35:d7:ab:43:b4:61:75:bd:6f:19:ee:98:
                    06:0c:52:d1:ed:2f:c6:cf:8b:90:37:93:dd:18:06:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:61:CC:98:8B:3C:10:8D:0C:98:36:FD:56:BF:92:E6:88:EE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e8e1195-9b76-339d-ae87-ee3ecbbbf3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:49:db:9e:cc:f5:7b:37:b0:8c:32:8a:94:0d:33:e3:41:d5:
         a8:7d:a5:e1:64:ff:2b:60:5d:d2:85:d4:69:c7:1e:84:89:2d:
         fc:a1:b3:33:30:78:35:58:db:4c:f3:a6:0c:ce:a5:05:68:25:
         5f:87:5b:b4:61:26:96:37:d3:07:16:e6:dc:8c:2c:88:d2:25:
         17:13:69:36:6e:60:59:4a:bd:3c:26:7f:f6:0c:86:1e:48:1d:
         95:bc:5d:e7:05:74:2b:94:4c:10:b3:ca:42:61:ef:41:d9:32:
         b3:7f:47:1e:6e:b0:02:82:d2:9e:56:46:10:ad:20:b7:6b:d7:
         05:b3:1b:5e:ec:d1:70:61:0e:e5:83:14:25:9d:a0:65:ef:07:
         5e:26:94:8a:8b:dc:35:83:af:a6:76:db:03:a0:aa:32:be:10:
         1f:ee:20:b8:1e:05:e3:df:90:52:8b:96:f0:5e:cb:ed:4b:fd:
         b5:86:e8:6e:ac:b3:1a:65:04:7a:28:de:35:33:4e:74:c4:0b:
         fb:a9:3e:62:52:70:7a:c8:04:aa:35:7b:de:c2:af:57:31:41:
         46:3b:f9:a8:c1:4a:cf:7c:15:2f:c5:20:01:a3:0f:cd:3b:22:
         2c:55:3d:90:8d:4b:ff:19:95:c9:87:91:11:12:60:62:ef:eb:
         57:d6:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:14:29 2025 by rpki-client