Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2269c38d-6e05-32af-8801-a40e974fcfe6.roa
File:                     2269c38d-6e05-32af-8801-a40e974fcfe6.roa (raw, json)
Hash identifier:          6knrY1fIp4rvng8+V03GyIvBoozJ+sSgzSUk+LJ9LTM=
Subject key identifier:   2B:81:C5:70:E7:23:3D:10:09:82:C7:36:8C:39:EF:88:D0:76:FD:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC008B46971F91B35E9100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2269c38d-6e05-32af-8801-a40e974fcfe6.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        66.41.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:00:8b:46:97:1f:91:b3:5e:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=c82c57cc-d123-4b73-a521-88567ece5384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:d1:34:02:fb:6d:8b:be:62:2f:4f:c4:73:
                    fc:85:f4:4e:e3:60:ce:41:0f:69:5a:a7:a4:95:3b:
                    0f:f1:14:3a:32:b6:e2:3c:55:0c:e9:61:a7:f3:af:
                    97:0c:64:a7:26:3a:7b:d1:b9:1b:3f:67:d2:58:a6:
                    c9:a1:0b:2a:02:74:aa:8c:69:a3:40:90:93:7b:a1:
                    a5:49:e5:ba:a0:ae:7b:23:6c:13:8a:b8:b7:48:16:
                    2c:7b:04:05:cb:a3:fe:dc:8b:9a:c3:57:ca:ef:51:
                    9f:58:1e:7b:23:7a:2c:31:4b:39:11:7c:69:bb:89:
                    0f:34:38:9a:e1:c8:55:45:39:74:e8:5f:80:51:82:
                    79:57:54:19:cd:b5:d6:be:aa:d1:50:dd:e2:a8:3c:
                    60:1d:5d:09:46:d7:2a:77:0b:48:25:14:63:44:87:
                    e7:2c:13:6b:94:8e:89:17:7a:23:ec:d8:85:ba:f5:
                    2a:33:8a:42:c5:69:26:1b:67:8b:44:ea:59:b7:b8:
                    e9:e2:5e:c2:27:a8:40:37:8c:41:0e:0f:34:7b:54:
                    b3:f5:65:bc:dd:11:6c:ca:04:66:71:1b:a1:31:8b:
                    2b:6f:54:9e:84:b3:e5:fd:f2:be:2e:05:ec:e5:9d:
                    a9:97:61:26:ff:cc:75:11:a9:81:c6:e7:3c:1a:ae:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:81:C5:70:E7:23:3D:10:09:82:C7:36:8C:39:EF:88:D0:76:FD:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2269c38d-6e05-32af-8801-a40e974fcfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:8a:94:b1:38:7e:98:2c:6e:f3:72:22:57:3c:50:bb:47:
         ef:e3:26:bc:c2:e8:1b:13:48:a0:6d:58:b7:da:2b:47:cd:08:
         f5:1c:ea:e3:7e:51:e6:0c:9c:d1:a4:15:ce:a1:4a:6a:1d:e1:
         24:a7:5d:be:86:fb:37:45:8a:f2:06:b9:cd:77:a9:ae:4e:cc:
         e1:cc:f3:19:09:83:ab:b1:4f:47:a0:5c:f0:59:00:b3:1d:7e:
         5f:b4:cd:92:03:b3:6a:62:77:ec:20:2f:75:69:97:be:16:17:
         92:49:1d:3c:02:08:19:b2:6a:93:e5:dd:ac:5e:46:57:d6:0b:
         b6:90:4d:ed:a7:7e:64:ed:d5:0c:b5:89:39:b7:e0:a5:1a:65:
         58:15:31:db:dd:0c:60:a6:96:25:ec:36:30:81:84:5f:a4:63:
         b1:a7:c5:f0:6d:4c:cc:c7:4f:a4:85:f4:3d:23:89:0e:ff:59:
         8c:98:3a:eb:df:cc:65:78:25:9c:49:07:a3:81:92:6f:ed:3f:
         ab:42:5e:63:e9:fe:96:18:6e:da:83:fb:f0:03:8c:40:22:7e:
         c5:c3:a1:fb:24:7b:f8:83:28:ed:92:d7:7d:e6:28:04:18:4c:
         06:f7:93:e4:b3:24:45:e7:3c:71:b9:d1:55:d1:37:ae:7d:af:
         ad:f6:f9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:13:38 2025 by rpki-client