Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52371477-62e9-3e40-b5a3-95de318449f8.roa
File:                     52371477-62e9-3e40-b5a3-95de318449f8.roa (raw, json)
Hash identifier:          4IZM+dzeivnq38eMtJyWE5IpepexzbF+QqZzbNS3NpM=
Subject key identifier:   E5:4C:FF:4F:98:86:58:31:69:3A:A6:0F:53:5D:FE:D7:41:BD:14:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD62F636BE521236D54880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52371477-62e9-3e40-b5a3-95de318449f8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        66.41.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:62:f6:36:be:52:12:36:d5:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e58bce8a-0012-465f-8d80-b92e47aeec59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:97:d5:b6:26:fd:4a:4d:de:1b:77:fa:3c:
                    8d:10:75:0c:c9:93:8a:74:cb:c8:73:c1:8c:7b:6d:
                    2d:a9:9e:3c:8b:fd:11:94:64:a6:a0:bf:19:02:41:
                    71:a0:ba:f5:55:f2:04:c4:3a:e2:e8:17:06:20:3a:
                    16:36:f5:b2:9a:9b:6c:53:8a:65:08:8e:9a:23:63:
                    ec:db:2f:1d:c5:4d:c8:58:66:20:09:61:a9:b6:cb:
                    1a:84:44:d7:8a:a2:b0:64:6b:e0:52:cb:f4:22:27:
                    52:8e:a6:7a:7a:9c:eb:27:14:2b:d2:80:71:46:1b:
                    f5:3a:8d:d1:db:96:80:15:74:bd:2d:8c:3a:3d:81:
                    88:eb:15:62:1d:e2:ab:39:64:93:c8:c6:d0:71:c8:
                    30:e4:83:7e:45:a0:7d:08:64:7e:aa:b5:51:a6:5e:
                    a5:c5:c1:f1:c0:d6:5a:96:0d:76:84:9a:0d:74:44:
                    69:f3:ce:ed:2a:09:0b:25:24:83:e3:c0:f9:11:b4:
                    e8:1d:64:39:67:cf:6f:cb:94:0a:f2:76:c0:ef:d7:
                    90:0d:2a:d6:35:94:07:24:bc:74:7e:6e:ba:67:90:
                    56:c4:aa:1a:e0:09:94:84:c6:41:d4:5f:f2:75:7b:
                    ad:44:55:e9:0f:e4:1b:9d:2d:8c:68:9b:ac:83:a9:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:FF:4F:98:86:58:31:69:3A:A6:0F:53:5D:FE:D7:41:BD:14:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52371477-62e9-3e40-b5a3-95de318449f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:6d:e6:79:a4:d5:34:39:b7:5a:e1:6e:77:d1:21:b7:c1:bd:
         38:3d:9a:31:09:5a:75:09:19:32:ef:c0:7c:e5:fa:05:09:a0:
         15:ad:22:cb:a9:71:7b:ba:42:cb:fa:e2:50:ad:2c:4f:91:92:
         30:13:97:6a:fb:c6:8c:b0:83:45:d1:0c:67:79:dc:7f:88:03:
         7e:1d:8c:3d:cb:fd:76:5d:78:04:98:c4:5a:d5:d6:90:59:dd:
         bd:ac:c2:c5:bf:46:56:12:88:cc:03:fc:70:b8:89:52:f8:52:
         6a:3b:5f:d7:34:1c:02:70:d7:47:0b:d6:be:3c:1d:07:72:58:
         c8:07:66:c3:57:92:41:ef:e0:b2:d5:12:6d:08:3e:16:bc:5e:
         24:8b:92:cf:12:7d:17:f0:4b:05:1a:b6:95:40:a5:f8:1f:8e:
         3a:ec:a3:f8:76:de:6c:9d:c8:57:0c:36:20:d0:62:41:8c:2f:
         4b:f0:56:41:b2:69:8d:69:f3:93:07:8c:e0:eb:26:30:53:0e:
         68:fb:b8:1d:71:95:08:e9:32:54:45:4b:43:66:71:8d:e3:4c:
         e6:83:25:77:41:10:53:a1:bd:7d:ef:fa:2d:ca:0c:d6:cc:8e:
         9e:b1:59:75:1e:57:17:22:d4:cb:9c:88:56:b1:2f:28:3b:12:
         c6:46:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:38:40 2025 by rpki-client