Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa
File:                     e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa (raw, json)
Hash identifier:          zsXmBNpugc9CDUImvGJJm3SZvVa+CGVm7eDKnmBYdt0=
Subject key identifier:   AA:35:7C:01:5C:88:2F:D6:EB:92:DF:55:CB:2F:FC:83:B0:8F:0F:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCCED1E9C7A0B6A2501B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        174.161.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:ce:d1:e9:c7:a0:b6:a2:50:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ae825bce-2ddf-4027-a6e6-e52c6ef6a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:01:8f:b3:56:b5:a4:a4:dd:8d:82:64:11:
                    b1:3a:5a:40:2d:f8:61:fb:ee:1d:2a:dc:93:21:8c:
                    54:50:8a:65:49:40:b7:63:27:97:f2:0b:dc:50:f2:
                    06:2e:70:71:61:12:38:03:c4:b7:35:5f:25:46:e2:
                    76:c2:77:16:aa:7d:10:38:53:bf:b8:39:2e:40:c2:
                    f1:c1:c2:1b:37:bf:9f:7a:4a:0d:65:10:d1:33:10:
                    e4:8c:0c:20:10:85:3b:1c:69:52:50:15:a2:71:24:
                    80:d8:b8:df:30:45:97:4b:e5:24:7d:cc:ba:11:55:
                    1f:ef:c3:76:11:bf:2a:d1:24:b0:3f:21:64:ed:b1:
                    72:bc:56:de:be:73:a5:17:eb:e2:87:9d:ce:bc:1b:
                    5d:75:f8:6b:b1:96:6e:06:a8:ad:0d:c2:a2:e5:ce:
                    a9:0e:52:6c:b7:93:41:0e:49:88:8b:ec:26:8f:62:
                    66:04:10:92:b7:50:62:1b:3f:74:61:7f:6f:1e:94:
                    11:c9:37:d4:62:60:ae:5f:f6:a2:80:6e:c8:f4:ff:
                    2a:67:53:0b:63:b6:66:8b:b5:de:5f:de:a4:94:8c:
                    50:da:3e:1c:cd:67:88:11:96:14:e7:63:4c:a5:5b:
                    e2:bd:f1:0f:42:d9:91:e2:e9:28:a3:be:bf:d8:af:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:7C:01:5C:88:2F:D6:EB:92:DF:55:CB:2F:FC:83:B0:8F:0F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2fddf4b-c5c7-3d2f-80c2-964713d761a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.161.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7d:3d:41:8d:13:53:78:cf:4f:a7:97:6b:bc:95:bc:df:d8:
         bf:a7:a6:07:fb:b5:65:cd:3a:ec:ef:f9:e3:1d:a0:d6:bd:7d:
         7e:cb:21:31:77:1b:db:0a:e9:7d:1f:00:14:3e:3c:36:73:2f:
         a4:cd:53:0f:83:a4:a8:5b:1a:3a:1c:33:a6:19:92:73:79:dc:
         8e:57:ee:ea:5f:04:d0:3e:58:c0:0f:e9:ec:5a:2b:60:25:3b:
         7a:d6:2a:77:46:6f:29:7b:99:9b:4d:8f:77:f9:9f:aa:d6:b2:
         c5:ce:fe:ab:16:09:a0:5f:fe:0b:4f:28:d0:78:e6:e4:e6:62:
         de:2f:d0:a9:9b:93:67:2f:52:9d:8a:a6:98:bc:88:5e:c9:6a:
         28:98:59:3b:1f:38:eb:8d:ba:17:a6:b7:60:61:41:fd:51:e5:
         05:7a:57:fd:1e:9f:4b:7d:91:e8:38:91:62:c7:20:22:5d:6b:
         36:97:4b:4c:c4:16:04:40:ba:3b:32:93:85:2a:20:27:87:dd:
         7c:56:8c:18:7c:6b:9e:3f:f9:df:fd:89:27:47:8c:b4:23:c0:
         18:81:bc:aa:d1:5c:15:94:74:b3:4f:1d:2b:80:b0:18:9d:dc:
         4a:9a:17:c2:3d:cc:64:94:9d:2f:34:28:59:6d:7d:31:73:26:
         5a:a3:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:01:15 2025 by rpki-client