Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7dbbbdb-8e87-3749-b985-384d94f38470.roa
File:                     c7dbbbdb-8e87-3749-b985-384d94f38470.roa (raw, json)
Hash identifier:          NDzR7/Sdnf3UvXEViyEbj9pk5+rDfjyrkfk6lxm/GqM=
Subject key identifier:   47:00:0F:14:99:E6:EB:FB:70:6D:A5:A2:54:D6:19:EF:F5:35:0B:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE625FA549E06B07714E70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7dbbbdb-8e87-3749-b985-384d94f38470.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.49.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:62:5f:a5:49:e0:6b:07:71:4e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=0da2e497-b862-47d2-b25f-7034a88f8bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:fa:3e:7f:4c:60:cb:64:b9:ba:17:8f:6c:
                    c8:dd:62:1d:0b:09:48:a1:f8:77:29:1e:c3:b5:d1:
                    97:ce:8e:17:e3:31:df:7b:78:01:e3:a3:36:f8:58:
                    d0:2f:82:be:35:ad:7f:94:26:b9:6b:c7:a9:b8:3a:
                    fa:24:48:62:a7:81:e5:ca:ec:31:5a:22:62:8e:3a:
                    d5:2b:16:c0:a8:9d:72:c7:bd:54:1f:c9:d7:de:b4:
                    da:3e:14:99:a2:cd:f5:d1:48:9c:5e:2b:5b:34:3f:
                    98:22:f7:b5:26:cd:66:d2:8d:ff:05:f6:72:ec:57:
                    86:ba:2d:29:a1:9e:2d:83:5d:ed:95:0f:c6:a4:e9:
                    3a:6d:d2:8c:31:3f:b8:07:71:2e:31:6e:3b:da:3e:
                    09:d8:11:b2:26:6e:4c:79:bb:4c:df:e6:c4:33:7e:
                    2d:3a:20:95:84:6a:dc:fb:91:4a:d9:27:3a:a5:74:
                    35:ee:a7:c5:5c:1f:7a:27:e4:3d:d3:5b:68:9c:a2:
                    95:cc:65:d9:10:ef:69:e9:b7:87:93:2b:42:b9:44:
                    c0:e4:b9:c9:61:5a:2b:11:11:b0:ce:7b:6d:62:e8:
                    78:2d:83:46:fa:8d:51:90:78:a7:97:36:1b:3e:27:
                    b6:27:43:16:67:b5:8f:ba:b7:10:f1:22:ec:50:01:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:0F:14:99:E6:EB:FB:70:6D:A5:A2:54:D6:19:EF:F5:35:0B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7dbbbdb-8e87-3749-b985-384d94f38470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:ba:dc:92:c5:28:ad:72:65:ce:2e:05:54:32:f0:fb:23:
         5d:2f:ae:2c:bb:a3:ad:04:fd:c7:7b:05:52:63:cd:1a:c2:82:
         9e:26:b5:12:8d:93:02:2d:f5:f7:3b:6a:82:25:2f:89:4e:39:
         af:0f:3f:76:fb:14:cb:90:c9:64:8d:93:19:c1:56:5e:fd:9b:
         25:18:2c:2d:90:0b:ca:7c:6c:4d:90:18:c2:6a:54:4e:52:52:
         6a:8a:d1:fb:02:5c:d2:9a:ce:2d:e3:e2:a5:26:9e:e1:97:37:
         5a:25:2b:f9:f0:45:9a:f5:76:49:75:f5:ff:ba:0b:56:83:ae:
         0d:13:3c:d9:81:34:f7:26:52:30:f6:e2:fa:ec:31:2f:3d:75:
         de:15:54:89:54:4d:5e:d7:d4:f4:d5:05:be:2d:30:75:2f:6b:
         44:f2:06:bd:75:c5:b4:6d:cc:ed:1b:90:85:95:10:4f:1b:7c:
         76:1e:58:6b:38:e6:6a:e5:b4:74:69:2a:f6:cd:12:9b:83:21:
         e1:1b:05:74:82:e4:fb:b0:c4:e0:72:4b:cb:9c:7e:11:3b:76:
         ca:9a:db:24:57:e8:cc:79:84:07:0b:ce:79:89:e3:6e:e4:3d:
         bc:d3:1e:57:da:a9:df:b2:47:57:ff:fd:8e:ff:e2:40:44:9e:
         73:04:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:32 2025 by rpki-client