Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa
File:                     d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa (raw, json)
Hash identifier:          A9fXEsdzsFch/SPF5LAaz47hQ97+NM7wqQnYzBmuzXk=
Subject key identifier:   3E:5A:F4:C4:02:8D:16:38:FE:E4:0F:FA:05:4E:57:13:12:54:18:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA52E89851B819B9B14FA60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        68.46.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:2e:89:85:1b:81:9b:9b:14:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=58bca359-70e1-461e-b210-8bf6832da6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:1b:7d:12:0c:36:27:5c:90:a4:54:f8:45:
                    76:89:a7:23:80:32:61:3b:86:36:ac:3b:35:e0:b3:
                    73:78:7b:4e:0b:b1:9b:7d:bb:20:84:87:29:3a:1d:
                    94:cf:b1:d1:29:08:00:4e:78:42:55:ae:1b:8a:f7:
                    bd:1f:6c:39:ee:19:4d:01:2d:73:2b:cd:e8:6e:a6:
                    0d:46:be:ae:6e:7b:01:fe:a3:ab:dc:cf:ed:18:72:
                    1c:73:9a:a8:6e:4a:cc:9c:f9:28:8e:49:e6:d6:ee:
                    7c:d0:af:d3:c0:59:21:ed:d0:0f:07:4b:ce:e7:7d:
                    5a:d1:e8:d4:52:d2:a3:a0:65:e3:35:e9:fd:3a:18:
                    d9:f6:1e:fe:cb:4e:56:24:54:2c:d7:ad:e7:6b:c6:
                    47:f7:58:f9:67:5f:6b:32:1e:26:41:8e:18:7a:18:
                    68:f0:60:d1:b0:00:d0:ce:95:84:34:90:3d:43:a8:
                    ad:90:b4:df:82:0a:bb:06:60:6b:8d:57:ba:e1:f7:
                    36:a2:09:ff:50:04:9d:ac:68:14:99:9a:71:0b:3c:
                    ab:ca:c8:0f:b3:c9:fa:7d:8d:3a:10:b6:f6:49:40:
                    82:be:33:40:64:3f:43:ec:ed:f5:be:0c:04:5c:ae:
                    a6:8d:76:87:f4:bb:3d:89:5b:7a:48:59:4d:3a:c1:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5A:F4:C4:02:8D:16:38:FE:E4:0F:FA:05:4E:57:13:12:54:18:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:19:3a:c1:55:41:9d:f9:fb:73:e2:7c:0c:2d:03:c5:89:59:
         cd:47:9c:eb:fa:8e:69:e9:89:c5:34:fe:d0:45:aa:cc:11:46:
         b3:25:b0:dc:32:0e:64:5a:fd:81:04:dd:45:e8:15:f2:88:fd:
         a3:a0:81:a4:58:15:ef:66:46:11:b3:e4:a4:77:59:2b:b1:77:
         4f:a9:ef:71:15:ba:21:2a:c1:bf:e1:9e:7d:39:1d:53:63:d4:
         f6:03:76:06:82:6f:4a:86:54:3d:d3:17:71:60:9f:57:18:b1:
         7f:a6:79:0d:27:01:c7:30:a4:f4:a6:95:ba:a8:e1:39:d0:bc:
         f6:99:f7:72:dc:87:97:ef:4e:00:19:23:62:83:59:f7:0a:55:
         50:00:57:d2:e6:71:fd:56:26:72:1e:7e:96:75:10:33:e5:33:
         f2:a3:72:a2:99:66:f1:59:34:ea:cb:57:2b:c2:74:7a:60:00:
         89:6b:36:ee:56:b2:e6:fc:a5:b4:30:38:cf:af:40:d6:57:40:
         d2:ad:34:be:fb:8e:50:c4:db:00:ad:46:cd:40:78:19:97:0c:
         55:40:f9:c4:26:ad:71:8f:9e:da:7d:6a:cf:8e:a7:9d:75:48:
         f5:86:03:4f:bc:c8:bf:36:37:70:54:d1:4e:06:fc:0c:0c:85:
         6a:6e:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:25:29 2025 by rpki-client