Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a702387a-1eee-3e57-b5d1-588888447bcf.roa
File:                     a702387a-1eee-3e57-b5d1-588888447bcf.roa (raw, json)
Hash identifier:          XEvRlmNmMaLrkrmKvtU/eQC5Ub0WwUqr2FfZ9tqi8Oo=
Subject key identifier:   4C:F2:B1:C1:64:0C:0E:BB:85:EF:CC:87:CF:8F:13:10:B8:C2:EB:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EB904B0095D139B75FB880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a702387a-1eee-3e57-b5d1-588888447bcf.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        67.168.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:90:4b:00:95:d1:39:b7:5f:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=60af6a1d-62e1-457c-964d-b68ee8e33de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:32:93:11:4a:85:c9:65:54:2a:05:cc:42:
                    9b:6e:42:83:7f:fc:ef:0f:d4:6b:e3:b5:b7:b0:4b:
                    a4:69:53:3d:af:31:73:05:28:5d:c0:ca:a6:f4:89:
                    a4:94:b3:72:ac:4f:1a:e0:e0:77:55:a3:28:20:01:
                    66:b1:4c:85:99:30:66:da:e7:5c:9b:ed:d7:eb:19:
                    7b:08:81:de:f8:b3:3f:3b:81:a8:3e:8c:68:c3:9a:
                    53:bc:65:af:0e:d6:9a:d0:7a:4e:12:38:32:1c:35:
                    7f:e3:19:bf:4f:2b:50:06:58:2d:fc:1a:cf:64:dd:
                    d3:ee:63:99:ce:90:c2:bc:d3:49:86:71:c4:b4:1b:
                    11:2c:ec:ba:49:e6:a8:41:5d:14:3b:b9:77:6b:e2:
                    ab:66:67:f3:7a:eb:96:0f:8f:13:b7:57:22:b9:5e:
                    4a:88:7d:18:21:e5:56:6b:5d:27:4a:4e:b0:df:89:
                    69:34:9d:77:8f:26:98:46:c2:d2:58:cc:0d:03:2e:
                    3c:2f:ab:f8:d8:be:bb:df:a0:d0:64:bf:74:70:3f:
                    7d:a0:eb:46:1c:7d:26:90:38:6f:48:6e:53:a9:e6:
                    fd:83:9e:17:9c:fc:77:25:35:af:fc:2f:db:3b:01:
                    cd:84:6d:47:0b:ae:a8:e7:75:20:75:91:3d:75:1e:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:B1:C1:64:0C:0E:BB:85:EF:CC:87:CF:8F:13:10:B8:C2:EB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a702387a-1eee-3e57-b5d1-588888447bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.168.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:00:e1:1c:e2:28:e4:27:be:1d:9b:cf:fe:e5:70:cf:75:
         9c:e8:ae:10:01:a5:99:e9:79:a6:e8:0a:a4:a1:a9:f0:86:dc:
         2d:fc:d0:d8:40:40:ca:13:1c:27:1a:8a:0d:b4:88:2b:22:25:
         56:1b:38:63:76:e7:c7:0b:8f:64:8c:73:77:a5:48:d7:28:74:
         e6:44:b8:96:c8:a5:30:e7:f0:cc:00:b5:75:b4:5a:9b:00:ef:
         16:2b:12:43:04:40:af:b2:54:03:23:73:52:98:0e:47:6c:27:
         51:73:27:09:7a:52:8c:25:43:0f:a5:f8:21:43:d5:a7:15:1c:
         39:c5:8f:11:d7:f2:33:cf:b8:ec:9b:1d:0c:4b:71:50:1c:33:
         2e:80:f9:2e:07:21:f0:0c:0f:16:26:84:a2:05:97:5b:2a:1d:
         c3:28:cf:c9:0c:9e:58:48:4f:c6:e7:16:8b:a6:8d:fe:4d:17:
         88:a1:05:0d:56:8f:53:48:b6:12:76:d1:e0:e2:8f:ab:d0:db:
         c0:13:76:d4:08:49:aa:de:ce:54:d4:89:2c:e2:4c:e6:4e:a9:
         b8:32:7c:b5:c7:ef:b7:04:7a:0f:bf:13:85:e8:16:21:7d:2f:
         ee:f7:dc:45:0b:bb:03:37:18:28:a4:58:2f:6d:0c:95:4f:76:
         f3:b1:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:42 2025 by rpki-client