Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/048e87d7-6e76-3c39-8c80-dfc81adee88d.roa
File:                     048e87d7-6e76-3c39-8c80-dfc81adee88d.roa (raw, json)
Hash identifier:          5clVaTx3UKa7z/4Yf248mDhC0eTdy77h/T9TG4uFxpg=
Subject key identifier:   BE:0F:37:5C:AB:8C:A4:50:BF:5B:59:31:31:BA:C8:10:50:43:E8:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC26D2D956443E25A43D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/048e87d7-6e76-3c39-8c80-dfc81adee88d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        174.53.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:26:d2:d9:56:44:3e:25:a4:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=19069a42-c02a-4e9c-a9ea-7248b82bbf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:35:d4:f9:c1:3f:49:5f:3c:f3:97:ad:4a:
                    9e:73:d1:4c:da:91:03:b7:bb:f9:93:c0:10:d1:39:
                    04:29:e5:bf:ec:ee:b4:1f:13:b8:39:f0:4a:14:e8:
                    8b:ef:43:2f:43:33:04:d2:a1:7a:8f:bb:1b:e4:31:
                    cc:53:91:48:cf:0d:44:48:b0:0d:24:ea:06:c7:24:
                    2d:77:09:bd:be:16:b1:08:74:e0:b5:b7:c5:8f:a8:
                    ed:6b:57:14:09:c8:31:77:de:2c:e6:0a:40:99:df:
                    8d:15:2c:05:42:cf:f5:92:27:20:84:4a:fe:1d:86:
                    c4:3d:8d:46:a1:cf:8b:fc:f8:55:f5:b8:6e:42:a6:
                    f0:bd:9d:07:83:86:4d:da:8d:3a:fc:c5:b8:69:fe:
                    64:f0:5a:da:ab:5e:ad:ee:9e:57:f3:9f:25:2f:b9:
                    a7:1b:00:53:a8:38:0b:ce:f6:da:ad:e6:02:1c:8e:
                    e0:0f:b6:b5:d9:14:13:2b:8f:de:20:10:bc:22:dc:
                    7d:ce:45:10:1c:fb:51:ab:9d:eb:35:e0:f6:6d:62:
                    82:dc:a8:e0:1e:79:be:c5:db:c3:19:e3:c4:16:34:
                    8c:16:9c:3a:19:df:47:e1:70:fb:c7:45:88:87:24:
                    70:a8:94:94:ae:7e:20:9a:38:5f:18:28:95:9d:e6:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:37:5C:AB:8C:A4:50:BF:5B:59:31:31:BA:C8:10:50:43:E8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/048e87d7-6e76-3c39-8c80-dfc81adee88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.53.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:a3:8e:fc:82:bb:b1:c5:ad:10:a6:31:d7:84:19:76:83:
         1c:e6:cd:fa:88:39:de:09:45:28:3e:60:ac:a3:d4:b6:1e:99:
         93:1d:31:f9:16:73:f7:38:02:56:32:3d:cc:09:b9:10:b7:8a:
         78:5f:50:0d:2f:62:17:72:20:54:db:dd:be:78:58:21:41:34:
         7c:29:d6:5a:ec:af:03:cc:5d:cc:15:e5:86:55:20:78:17:93:
         7a:5c:3c:14:0b:16:30:d4:d4:c4:2f:9b:af:1a:86:6d:b5:90:
         aa:23:04:0a:fe:d9:62:34:2c:a3:3e:80:ea:18:6b:bb:09:bb:
         37:f1:82:3a:a6:33:bd:cb:b2:3a:5d:d2:7c:47:e7:37:f4:9b:
         b7:19:e9:10:17:72:21:b2:49:a9:d6:66:ea:15:fb:93:a0:21:
         97:c2:1f:27:1e:55:d7:91:b1:52:af:b5:e0:12:c6:06:eb:6a:
         3f:84:79:93:86:9d:4b:0e:cb:30:7b:ea:1d:c5:f8:0e:7e:3f:
         df:77:7c:3d:6c:a7:ec:cc:f5:da:c7:07:e7:03:dc:2c:b3:b8:
         2f:a1:c5:2b:f1:9d:d2:64:6f:df:8e:f0:ab:5d:a0:7e:ab:d8:
         cf:5c:30:4a:81:eb:19:83:72:a9:40:25:69:b3:27:2d:27:90:
         10:20:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:55:47 2025 by rpki-client