Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5778a9b-3c55-3d2d-8fea-05eafe46c88f.roa
File:                     f5778a9b-3c55-3d2d-8fea-05eafe46c88f.roa (raw, json)
Hash identifier:          NkJlvBXpXwan1RlcHN4jG/nJv7lPlDj/OwScYBOQj7Q=
Subject key identifier:   84:3A:BE:98:BD:3C:F6:46:35:55:7C:E1:5A:8E:6B:7F:A1:8A:8B:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECAD5EC7EE6154EADCBFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5778a9b-3c55-3d2d-8fea-05eafe46c88f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.49.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:ad:5e:c7:ee:61:54:ea:dc:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=dd334601-5660-4d93-948e-118295197152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cb:e7:4a:2d:64:a6:bb:c9:72:33:dc:15:53:
                    e3:59:a5:3c:3c:3d:74:23:16:33:44:95:c4:54:58:
                    af:5d:74:e5:6c:6b:b1:ed:ad:d0:62:eb:2e:36:02:
                    93:e7:57:e6:96:59:0e:db:0f:b5:21:7f:88:a2:ca:
                    62:77:ec:2c:9e:88:a9:94:3a:4c:90:0e:b0:35:2e:
                    12:2c:3e:33:27:78:95:92:cc:31:7a:12:02:3b:3c:
                    31:81:85:e3:05:f8:d4:08:84:ea:d1:fe:ea:04:76:
                    e2:a9:68:5a:cd:e3:37:74:1d:5d:97:e8:bb:b4:96:
                    e9:97:a3:84:13:62:19:0a:a8:e7:cc:48:9d:c8:17:
                    06:3f:a7:16:c6:7e:25:8e:f3:7c:9b:95:5b:08:54:
                    0e:96:8c:6e:38:29:66:86:92:60:d4:f5:03:a2:f3:
                    50:79:e9:32:01:da:de:32:20:96:14:70:1c:f0:bd:
                    ea:42:1c:cc:e2:39:4f:24:8b:45:6a:92:57:c3:ec:
                    95:10:b2:44:bd:14:10:90:90:04:30:21:e9:0c:58:
                    22:11:2e:8f:44:72:04:d2:4c:bc:7c:c7:a0:46:08:
                    d5:34:7f:4d:76:fc:93:60:03:e5:37:93:3a:16:8f:
                    cb:3e:0d:ef:a6:05:bf:77:5c:a3:64:fe:0a:da:9c:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3A:BE:98:BD:3C:F6:46:35:55:7C:E1:5A:8E:6B:7F:A1:8A:8B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5778a9b-3c55-3d2d-8fea-05eafe46c88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:71:9c:35:ba:f6:18:03:46:36:1d:e1:77:e5:f8:48:02:
         65:43:79:0b:de:ef:da:99:6e:92:3d:4c:39:46:5a:78:dc:c6:
         7d:f4:b8:68:05:8c:c2:fe:56:61:90:c0:0e:64:69:45:cc:2f:
         82:f2:2b:c6:2c:71:25:00:ca:e3:3e:ac:83:68:24:9a:12:53:
         b2:dc:27:0d:aa:69:9a:ad:39:e2:d8:54:1a:11:58:d3:82:99:
         2c:a4:02:87:54:b2:22:12:39:94:f7:9f:4a:38:f7:92:71:b4:
         ed:c8:2b:61:40:cd:ec:87:ad:fb:af:43:0e:7d:c3:14:a6:73:
         b4:4f:2c:09:1a:c8:0a:ca:27:11:fc:f8:24:25:cd:d7:76:f4:
         91:24:e4:2f:00:08:68:60:1f:2e:c9:93:94:43:84:2b:ae:17:
         d0:18:f5:dd:50:25:ba:2f:c3:86:04:37:86:47:48:81:10:0d:
         f9:14:d0:2f:66:21:d9:e9:72:fc:60:bc:66:9f:7a:87:c2:c0:
         4d:7a:1b:c8:b5:3e:a4:83:de:70:67:f5:38:5a:31:b4:e6:09:
         2c:e3:a4:29:1b:fa:46:66:4e:2e:46:11:ff:c2:31:c8:f6:02:
         e6:18:8e:de:f4:7b:c9:42:e1:22:e9:32:ec:f0:e6:c8:ff:f0:
         8c:0e:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:34 2025 by rpki-client