Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8755f68d-387a-3882-8bb1-a81fde3198b0.roa
File:                     8755f68d-387a-3882-8bb1-a81fde3198b0.roa (raw, json)
Hash identifier:          CriGzAzGf1UJgsUkWgL1qBxieFcfXRQHKrw77m2ljSg=
Subject key identifier:   C4:0B:38:4D:C1:AB:B5:09:9A:EA:7D:1F:8F:FB:C9:2D:F4:9F:B4:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE646BE7906035FF248380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8755f68d-387a-3882-8bb1-a81fde3198b0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.51.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:64:6b:e7:90:60:35:ff:24:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d48cd056-c65a-4c9c-9e7e-c36ce041fd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:43:31:8e:d5:04:ae:d8:42:62:8e:21:64:
                    ea:49:c9:0d:f7:54:72:df:d8:f7:15:af:0a:91:0b:
                    87:6a:ab:07:06:69:b8:34:16:7c:2c:1e:df:4e:df:
                    9c:31:61:f7:95:ec:c6:ae:6c:cc:f2:55:ae:ea:98:
                    07:e7:83:b9:a7:32:3f:c7:42:bb:dc:26:98:2d:92:
                    9d:a2:65:ad:8a:c1:27:75:59:6e:be:89:57:43:6f:
                    9e:9e:eb:31:23:e4:81:58:8e:de:fd:77:6c:ca:32:
                    a9:99:bd:6e:98:ed:b3:6b:64:eb:c4:e7:fd:39:67:
                    3d:96:7c:6a:6b:0e:41:ba:6e:fc:3d:6b:4a:08:bc:
                    c3:73:09:ba:49:7d:2c:a1:10:13:ba:ff:42:b6:16:
                    3b:98:fa:89:57:b6:cb:e0:6c:26:ba:82:00:82:8f:
                    8f:94:b1:a2:c6:49:18:68:90:68:6f:6a:ff:09:62:
                    c9:df:eb:a2:6d:d6:65:3f:b4:ba:ec:98:3f:b6:d4:
                    40:62:f5:97:11:fb:5f:34:05:cb:4a:8e:2a:37:87:
                    08:55:04:fb:56:d1:b2:df:2f:0d:7f:78:83:26:b3:
                    57:d2:92:cc:68:88:bd:99:45:31:66:fe:89:86:53:
                    1c:e8:7e:da:8b:88:cc:93:c8:eb:31:85:76:be:30:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0B:38:4D:C1:AB:B5:09:9A:EA:7D:1F:8F:FB:C9:2D:F4:9F:B4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8755f68d-387a-3882-8bb1-a81fde3198b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:fb:09:13:53:24:d1:3d:8e:01:a0:ac:b4:02:23:6f:ba:bc:
         95:a9:f1:1c:4e:54:01:bf:cd:62:d0:b5:cf:bb:6a:1d:60:24:
         ae:dd:78:88:c2:88:4d:85:57:e4:80:c4:95:fe:c5:49:90:23:
         15:f1:bb:fd:86:ae:0f:27:5f:39:38:d0:ec:cb:1f:14:28:c6:
         4c:35:a2:6c:37:6e:16:5a:7d:b4:58:e2:db:40:3c:6f:eb:ae:
         cf:a3:32:a5:73:6d:af:d8:b2:98:d1:31:d4:c5:58:d6:33:5f:
         7c:fe:3a:33:c1:1d:33:2a:52:95:ff:47:05:60:ed:7a:5b:db:
         aa:07:9d:71:fc:41:95:83:47:46:87:71:3d:22:f3:5d:74:97:
         89:5b:aa:9a:e7:d5:b5:1e:cb:54:86:bb:1f:73:48:a9:7b:99:
         2d:bd:13:27:dc:f3:f2:95:24:f5:ee:fa:fe:02:39:c7:8b:5e:
         83:f5:9c:88:46:57:f0:d9:ea:76:61:0f:6e:d9:79:c8:2f:c8:
         96:92:9f:ae:63:98:63:8c:fe:71:e3:90:ee:64:26:e7:62:95:
         b9:57:0f:a5:ec:15:49:4a:6a:91:f8:9e:87:6a:1a:79:b9:36:
         38:28:0c:83:a5:5b:b0:38:8c:7c:0b:e2:8b:fa:36:1a:c3:28:
         db:f8:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:36 2025 by rpki-client