Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
File:                     4b413c04-5a71-3230-83e5-f43cd8a9d626.roa (raw, json)
Hash identifier:          4LYqGrZtwaciunN0qUocEIfsthmCMNcCgwuK7/9U+8Q=
Subject key identifier:   FF:F1:05:4E:27:6F:99:A7:6E:19:34:55:BA:27:14:E0:7B:6D:E9:F2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF48F505FDDCFCB5D3AE5C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        68.182.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8f:50:5f:dd:cf:cb:5d:3a:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=9a14f35c-b243-41ce-8abc-c965e3607ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:44:91:5f:c8:b1:3d:85:62:6d:e8:dc:d1:
                    0b:6b:3f:21:1d:71:72:fb:0a:98:b0:48:fc:dd:91:
                    5b:03:87:aa:e5:59:bb:9f:4e:96:4b:5a:2c:ef:3a:
                    90:ad:77:be:88:80:74:fb:5a:74:bf:19:f0:55:17:
                    f5:52:a5:8c:2e:a7:7b:5d:b3:20:bd:b5:65:b2:df:
                    83:63:5c:a3:1b:a2:69:10:8a:05:31:0b:6a:a6:aa:
                    77:dc:b0:6e:73:eb:46:9f:08:73:4e:bb:d6:27:4f:
                    b4:1c:b5:7b:c8:9c:67:c7:a6:82:eb:dd:0e:49:36:
                    7f:24:71:cd:bf:bb:77:f7:80:bc:84:09:29:7f:b2:
                    9d:2f:8e:a9:96:2b:0d:16:77:79:f2:9b:62:13:8f:
                    80:19:5a:59:e2:86:9e:c7:fd:29:e6:ee:4d:77:ab:
                    e0:87:c6:aa:ad:f3:2a:d8:f2:68:5d:a8:d9:14:cf:
                    ae:45:26:ed:18:db:54:a0:c3:9f:06:7b:55:c6:b2:
                    be:27:60:60:5e:9a:a0:93:11:db:23:ba:88:00:b6:
                    2f:1a:b9:3a:a4:bc:6c:00:82:ff:6c:38:8e:39:d0:
                    1f:72:3e:e3:e7:1b:61:69:a2:53:f6:e3:96:64:c9:
                    22:a4:e4:b1:9d:ca:d4:e4:a8:68:1d:eb:b8:ed:8f:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F1:05:4E:27:6F:99:A7:6E:19:34:55:BA:27:14:E0:7B:6D:E9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:2f:30:06:67:ed:6c:b1:6a:9a:2c:0e:23:69:a3:70:60:
         43:da:cf:15:89:4c:45:96:84:0d:b4:b5:0d:4b:80:ce:14:ba:
         57:f8:48:4e:dc:7c:35:2e:54:39:47:be:4d:ac:92:6c:24:96:
         95:05:f2:d6:a5:d7:c5:4a:74:41:96:bd:b7:44:5b:72:e7:b5:
         50:55:84:24:a3:f6:a8:06:ce:15:8c:03:1c:69:5f:53:17:8b:
         26:86:17:d4:88:49:ed:81:b9:a5:68:1b:5d:3c:35:f5:f6:e3:
         ff:6f:72:a3:1e:cb:7a:28:c1:1e:03:01:fb:05:e8:c9:28:0c:
         5a:a1:8a:75:dc:d9:e8:78:a5:6a:48:3e:a7:8f:54:fb:57:53:
         fd:7b:1f:cc:dc:6f:66:ea:10:d3:f8:6c:ae:fc:f7:94:74:cc:
         57:4d:31:a8:a9:ab:76:00:c5:47:6d:12:44:c5:f0:4e:dc:dd:
         74:ac:68:64:a6:7e:eb:0d:78:bc:25:5e:91:41:11:00:ad:a8:
         8c:95:24:c2:79:27:fc:98:ff:76:78:81:43:f7:39:f4:87:6d:
         aa:6d:2f:d3:d7:d5:17:c2:48:ec:57:6b:32:2f:2a:1b:61:d0:
         b7:6a:0a:29:9f:cd:9f:37:4c:02:2a:fa:5e:95:8b:8f:2f:3f:
         c4:ba:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:00:53 2025 by rpki-client