Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8484c8b7-81ac-38b4-b847-00f03f636f12.roa
File:                     8484c8b7-81ac-38b4-b847-00f03f636f12.roa (raw, json)
Hash identifier:          Dkl84BSuHOPcf/Si6oeAsFDlqNlACmrUHzTkvIsqOng=
Subject key identifier:   4B:07:7F:28:45:C4:6F:58:1B:BD:7D:4D:97:0A:13:17:EC:57:35:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE688C6F2C048E39F71580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8484c8b7-81ac-38b4-b847-00f03f636f12.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.56.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:68:8c:6f:2c:04:8e:39:f7:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a9623d8e-af6a-45fc-a24e-0abe76680e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:79:d2:74:87:79:0b:0d:a3:76:2e:bf:62:
                    92:fa:39:fd:61:ce:11:2d:73:95:bf:d7:d8:7e:a3:
                    76:75:2e:27:5e:b0:ad:d5:65:aa:4b:58:3b:2e:cb:
                    17:12:09:e2:39:74:3e:c4:36:86:c1:86:fe:05:c9:
                    eb:53:3c:43:ae:da:7a:c1:17:10:42:33:e1:34:9e:
                    9b:21:6b:e0:d2:1f:e9:b8:8a:be:11:de:68:38:ef:
                    a3:d0:67:94:d3:00:04:bb:ce:4a:1b:ba:8f:f3:f2:
                    7e:69:4f:f2:21:fc:a2:40:34:e5:0d:c6:a3:14:44:
                    ce:1a:2c:61:f4:88:f5:3b:41:7c:7b:c3:1a:00:20:
                    cf:82:b4:88:60:ec:d5:91:ec:dc:fc:27:2b:c5:bd:
                    6d:9b:e5:09:16:6a:5d:fd:2e:f8:ac:87:7b:5d:b9:
                    9e:e3:e1:48:83:57:04:46:8c:ef:51:1f:7a:0f:45:
                    16:7a:27:93:dc:13:25:23:3b:35:49:6c:a7:bb:da:
                    36:87:25:1a:7d:5a:cd:1e:08:74:43:f1:5c:12:3e:
                    0c:aa:b8:7b:f8:a0:17:ea:60:e0:63:d4:0f:7f:31:
                    f1:53:ab:01:45:e9:5d:a3:e8:70:56:1f:66:84:9b:
                    25:aa:f3:80:90:ef:38:08:cb:fd:d7:01:d0:83:96:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:07:7F:28:45:C4:6F:58:1B:BD:7D:4D:97:0A:13:17:EC:57:35:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8484c8b7-81ac-38b4-b847-00f03f636f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6c:eb:92:00:a1:30:8a:7e:f7:fd:4b:18:c1:b3:85:93:42:
         86:7c:ec:e5:78:48:1b:ca:34:d1:a3:9b:66:05:b4:90:c3:15:
         d1:99:43:e1:66:92:0b:e5:7d:31:35:d4:0a:45:4d:52:1e:e2:
         7f:73:d2:73:b5:b9:35:68:59:67:61:1f:57:76:fa:5b:66:cb:
         69:13:08:7e:54:ab:e6:89:89:44:81:9b:fc:d5:4c:e9:1e:0b:
         4d:90:0e:00:4f:8c:02:99:43:ae:63:4d:bb:c9:1f:4f:72:df:
         a8:bd:8d:e0:6c:95:7f:6d:43:4e:ad:46:75:fa:30:2e:cd:70:
         b0:ea:27:45:7c:3a:1a:55:20:97:72:b0:e5:32:6d:e1:83:57:
         d0:ba:52:e9:94:6a:e3:a1:e3:d1:11:42:cd:0b:ea:a1:9d:9e:
         ff:e5:4c:44:fb:da:11:33:ff:c8:f2:1b:fb:15:79:4a:cb:e4:
         99:72:2a:7d:a1:d5:67:53:88:d6:ee:76:4c:08:da:3d:3c:59:
         0e:c5:bc:78:22:19:f1:5d:a0:a3:1e:f0:ed:71:a1:30:0e:b3:
         10:4d:3e:57:b1:7b:cc:b4:c4:14:1e:bb:1c:c2:ad:e8:58:64:
         22:da:3b:83:72:59:97:38:10:44:14:62:0f:6c:c5:a2:a0:6c:
         dd:9f:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:44 2025 by rpki-client