Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34c0585d-0be4-3e82-bcba-b49fcf6ecf03.roa
File:                     34c0585d-0be4-3e82-bcba-b49fcf6ecf03.roa (raw, json)
Hash identifier:          0xTOjw8f4wXrwnrFn4A55JGT867yakMYV4VGZjSbv1o=
Subject key identifier:   6A:07:46:3A:DE:D3:90:C4:24:C3:5C:27:2C:D6:2A:CB:05:B0:34:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB4A540AEF4F39EAE5BE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34c0585d-0be4-3e82-bcba-b49fcf6ecf03.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        69.241.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:4a:54:0a:ef:4f:39:ea:e5:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d464460a-bc62-42af-87bb-7ed22c3c677f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:69:98:67:6b:7a:a6:e1:c9:fc:97:96:eb:
                    0f:53:01:95:35:81:14:97:37:52:c0:c4:72:2c:65:
                    f9:91:8c:95:f4:37:11:f2:e8:9b:37:b4:dd:b8:ce:
                    fa:13:f0:52:78:10:88:27:fc:87:7a:10:6a:a4:65:
                    85:8b:91:2b:54:92:8d:f8:3f:a0:c4:60:65:7f:93:
                    ec:c9:3e:af:1c:62:e4:38:f7:32:84:d0:5a:42:01:
                    92:84:14:50:f7:cc:69:d1:16:87:ad:e6:ad:72:9d:
                    92:0c:98:16:23:d9:3c:b7:3e:62:3f:1f:38:4a:37:
                    78:95:7e:cc:47:d1:0d:ff:ea:25:7d:24:23:1c:46:
                    93:1f:bc:68:5f:c7:36:b6:71:77:95:30:63:ec:ec:
                    2d:e2:c6:b7:4b:8a:93:d5:f1:67:1c:fb:90:c3:82:
                    17:73:d1:98:3f:1f:49:3f:71:e8:f1:9d:e0:29:92:
                    d3:a2:e3:33:4c:ca:33:61:87:8c:45:fb:dd:9e:a1:
                    2a:cb:9d:d0:ff:05:07:22:7b:83:d9:a5:15:f8:60:
                    e6:da:af:6f:5b:cb:f9:1b:7b:29:c9:6a:a9:1d:e2:
                    d0:ee:da:17:e4:41:de:ce:b5:59:6f:ae:8e:31:07:
                    c6:a5:75:54:02:8a:0f:39:00:9d:e2:7f:47:f1:0e:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:07:46:3A:DE:D3:90:C4:24:C3:5C:27:2C:D6:2A:CB:05:B0:34:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34c0585d-0be4-3e82-bcba-b49fcf6ecf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f9:1a:72:9b:d1:07:b3:ad:c3:0a:85:ec:ad:74:49:4b:3b:
         ef:2c:9b:4d:ba:72:74:d1:42:93:ed:9f:08:d0:8c:d7:e5:4d:
         7c:cb:bf:47:c6:f2:ca:99:21:d9:3a:ad:47:d0:ec:ba:87:ee:
         89:8f:b0:52:73:4b:8c:00:9c:86:f2:d8:09:79:85:f6:3e:dd:
         6b:d9:cb:3a:ae:ee:b3:6d:80:45:1b:ae:cb:2c:7c:85:03:41:
         4b:2b:1b:5e:ff:b2:57:b7:86:12:8b:6a:ce:53:9f:f3:6a:4f:
         5a:f5:4a:ad:71:05:e1:72:df:db:09:a7:2f:05:30:fe:35:08:
         72:91:ec:fb:77:f3:4e:ac:d7:bd:0f:11:5e:85:2d:aa:a6:5a:
         33:0b:2f:04:0c:53:f2:0c:b6:b4:1f:f1:9e:e0:d7:51:15:59:
         8f:c6:89:b3:81:72:99:d8:f8:ad:52:d1:64:ad:79:1f:8d:6f:
         a9:ce:61:1a:58:4e:8f:d9:e4:e9:38:f6:1c:b5:a4:b3:3d:83:
         0f:8c:4f:0f:96:57:73:f6:34:05:0f:24:47:50:04:f9:1a:7b:
         30:85:ea:af:3d:b1:fa:db:2f:2d:44:90:9e:e1:3b:ec:b1:e6:
         45:5e:28:67:11:d5:c2:e4:8a:71:e3:a7:44:63:98:5f:ea:77:
         13:d9:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:07:07 2025 by rpki-client