Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa
File:                     7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json)
Hash identifier:          Pyj+QbY3XMaIRXsjVkxiDu2/qFZZL9StqPxGAHrpCks=
Subject key identifier:   24:CC:F2:DB:39:25:33:6A:F0:6D:21:29:F1:F5:54:AE:9D:E3:2D:5D
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584A1035478DCF6B3182B8645300
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     53291
IP address blocks:        68.168.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:47:8d:cf:6b:31:82:b8:64:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=721f98dd-d95b-4cfe-bb36-929e00e9ab95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:bc:15:c3:07:ac:c5:e0:73:47:97:35:b8:
                    67:75:25:3e:69:82:a7:93:9b:4f:21:f3:01:dc:f5:
                    83:03:0a:8d:71:43:46:cb:20:52:ca:e3:ab:a0:67:
                    a6:b8:8d:3d:ff:f0:50:28:fe:10:a5:5e:16:78:06:
                    a0:64:e5:d9:0f:a6:b3:f3:2e:67:63:ae:87:f8:cc:
                    14:d8:97:72:be:00:1a:69:3e:33:76:0c:15:6a:ce:
                    11:2f:93:19:e2:f2:cf:bc:54:c7:0d:d8:6e:67:51:
                    67:39:1a:eb:83:9a:12:93:21:24:42:13:f9:17:bd:
                    ba:6d:27:c3:ad:bc:9c:84:e2:ea:ca:95:ab:61:e9:
                    c8:e1:c3:16:c2:a4:a7:5b:56:2d:ae:d4:13:c6:41:
                    7a:50:2f:dc:56:a9:f1:32:91:01:7e:80:fe:ff:34:
                    10:c0:92:ab:d4:18:f5:1d:c0:dd:fd:a3:94:df:f2:
                    cd:4a:07:41:a5:6a:9d:86:9b:56:a8:b2:18:59:ad:
                    89:98:75:52:68:95:3d:25:ca:cb:45:cb:ce:a8:71:
                    45:1c:6f:0d:1c:6b:1d:c2:fc:43:0b:bc:ad:d2:e6:
                    5c:32:34:16:49:f1:60:87:4c:5f:c3:5b:87:c8:10:
                    3b:07:67:66:f2:cc:86:f0:f6:72:4a:e6:03:de:f2:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:F2:DB:39:25:33:6A:F0:6D:21:29:F1:F5:54:AE:9D:E3:2D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:30:79:4a:22:ac:53:45:4f:cd:fe:28:e4:44:56:f0:65:
         a1:2a:c2:ee:50:9e:58:9c:fe:7d:e6:72:6f:78:98:7a:9e:a3:
         df:8f:73:8d:2a:d9:7b:74:07:19:19:bf:be:6e:7a:71:d1:c9:
         42:f3:f3:77:0c:7b:7a:b4:01:05:27:6a:13:ff:2c:f9:11:7a:
         27:6d:a0:88:7e:b9:39:6c:76:2b:e2:b9:87:09:63:13:7e:11:
         b0:df:96:11:3b:4d:91:6c:e0:1c:25:9c:56:ad:22:a3:82:11:
         b4:e4:b3:57:5a:29:7c:a4:c1:c2:a6:a3:7b:ff:7e:78:9c:99:
         64:10:7f:9f:5b:c2:5d:41:94:55:61:25:21:27:fc:a1:30:a0:
         9a:2f:0d:0b:b3:64:69:76:48:93:b4:db:84:98:9a:20:2e:6a:
         25:b7:e8:a6:b3:e9:c2:f2:8c:7d:5e:16:a5:d8:69:e2:db:d6:
         99:fe:f7:a4:9d:44:79:75:57:aa:7a:e7:21:a2:2b:75:70:03:
         8a:a9:74:db:d3:fb:bd:d7:19:2f:39:99:ec:99:89:fe:a5:17:
         32:98:92:cb:d8:cd:93:e0:58:f1:15:f1:a7:11:0f:65:b0:c1:
         32:8c:7f:ce:c4:94:c4:e1:7a:fa:59:9f:58:87:ef:1b:9c:43:
         e4:f0:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:39 2025 by rpki-client