Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/037a9639-fbfd-3ac8-8496-45f514451f02.roa
File:                     037a9639-fbfd-3ac8-8496-45f514451f02.roa (raw, json)
Hash identifier:          TZm8smR0kTznFTdwVAZpGQTksBH/raYozELQO/PP13Y=
Subject key identifier:   E2:BE:48:4E:F1:EE:E6:7C:CB:16:62:11:99:59:78:1C:EB:7A:A3:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848AF2BB298C32E79C7BEBFCE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/037a9639-fbfd-3ac8-8496-45f514451f02.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     33661
IP address blocks:        67.178.8.16/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:b2:98:c3:2e:79:c7:be:bf:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=d1878c55-1531-4d4d-b9d4-dcb8371869a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:5a:f3:c3:8b:65:f0:98:08:d0:60:91:78:
                    d1:29:84:14:57:97:a3:b4:34:c1:77:1e:1e:cc:1a:
                    3d:a7:04:55:f3:dc:44:40:f4:67:9e:6a:b0:e0:07:
                    80:79:7b:71:5c:43:54:ec:c3:b9:f3:8b:ff:54:ff:
                    4f:ae:7d:aa:37:3d:5e:cc:48:50:7f:d4:fe:de:54:
                    0a:44:af:55:11:db:d5:f6:86:cf:92:83:5b:f6:15:
                    1f:d8:0c:85:37:c0:1d:0a:9e:66:4a:71:0e:66:d8:
                    ca:ae:98:93:7c:8f:e7:3c:3d:fa:d0:c4:9f:f5:94:
                    16:1d:80:a9:17:a4:4c:87:48:a9:be:68:98:b7:6b:
                    ed:9f:06:4a:63:df:b9:a7:25:48:f3:b9:0c:0d:48:
                    20:82:4b:ce:c3:34:3e:9f:e0:54:e2:54:2e:5c:6d:
                    b7:f8:72:36:3a:b7:1a:1a:14:72:82:56:41:1d:bc:
                    a4:99:08:c0:7f:98:94:34:3d:12:29:01:2b:9b:c7:
                    7a:0a:0c:66:db:67:ca:ab:9c:2c:d3:24:9e:0f:5e:
                    9f:9f:c8:74:1d:92:30:b2:a2:e6:9b:e8:04:b8:b3:
                    2e:d6:9a:8d:bc:40:2c:2f:e8:da:1e:07:da:06:c7:
                    7a:f7:00:8d:0b:94:11:f4:b7:f3:65:31:2f:60:2c:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BE:48:4E:F1:EE:E6:7C:CB:16:62:11:99:59:78:1C:EB:7A:A3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/037a9639-fbfd-3ac8-8496-45f514451f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.178.8.16/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:9e:db:53:ef:c4:aa:9e:a6:6e:a1:e5:6f:aa:15:e0:3c:
         66:0b:91:fa:80:c2:4f:38:95:04:5b:02:6c:c7:3b:53:ca:aa:
         ee:73:fe:87:10:13:95:9e:ca:30:c5:2c:00:00:cc:e2:83:92:
         5e:5c:fe:05:18:03:da:b0:02:b7:bf:79:f9:6a:50:30:60:3d:
         5e:13:63:cb:c1:77:7b:87:3b:d1:7f:85:ae:e1:fa:99:c3:16:
         16:2a:ae:74:9e:9c:ef:14:15:95:f4:82:18:93:c3:2f:55:c7:
         c8:97:59:6e:08:b5:42:5e:a9:97:1c:d9:5c:fa:18:29:91:c0:
         23:44:db:af:67:a8:ab:b1:a6:76:38:0a:34:0f:1a:c5:22:7d:
         99:a2:ca:65:38:b9:a8:b8:a0:41:05:bf:35:f2:86:74:4e:52:
         aa:91:47:8a:fd:80:a5:90:d9:af:87:45:17:f0:00:17:af:cb:
         32:31:0c:df:00:19:15:df:38:cb:55:c4:30:1d:d0:44:c3:2d:
         73:0c:8a:35:9c:2f:09:cf:b4:fd:86:c1:c8:a6:7d:05:2e:12:
         46:a8:3f:a3:99:41:26:3c:88:d5:3c:a1:25:a0:e7:8a:1b:53:
         22:6b:82:11:a4:c0:6e:7d:e2:74:68:7b:41:77:36:0f:0e:eb:
         2b:91:0e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:49 2025 by rpki-client