Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057ce887-55dc-35b2-9b4b-966dc76a165c.roa
File:                     057ce887-55dc-35b2-9b4b-966dc76a165c.roa (raw, json)
Hash identifier:          Xo3yxbVJh2j+8lHzJCKtzHfU8MxChgZ7aOGlaDPFkQ0=
Subject key identifier:   CF:EE:DC:E9:0D:22:19:48:E5:F1:F0:65:60:48:FA:56:7C:45:94:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CF2C9EE5F0C54259EB700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057ce887-55dc-35b2-9b4b-966dc76a165c.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        71.228.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:f2:c9:ee:5f:0c:54:25:9e:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=7fd08559-9a45-4c4e-8aba-d4e7e10a75df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:4b:9f:36:e5:ee:19:97:0a:eb:63:0e:46:
                    19:98:05:d4:0c:1e:a5:a8:1b:41:35:2a:c0:74:95:
                    28:b5:91:24:90:ad:77:c7:e7:e5:d7:92:fe:4f:19:
                    7b:45:d1:4d:c5:ab:a7:7c:39:ad:2b:f3:18:84:3e:
                    98:a7:91:3a:5a:47:4f:2e:61:b8:8c:d2:b7:ad:db:
                    e5:4f:de:69:bb:31:9e:71:31:76:aa:f3:dc:52:11:
                    6f:f1:7d:c3:b5:6b:06:1e:ac:d2:43:cc:75:8c:94:
                    99:fb:cf:32:ba:33:ad:bb:64:87:98:1e:72:b1:1b:
                    71:59:27:1c:d9:1f:dd:a8:b1:6c:a6:aa:9d:72:8b:
                    83:e4:24:d4:df:20:1b:ff:ec:f4:8d:83:36:4c:b5:
                    f4:95:c7:8c:79:1f:d0:b8:e9:a4:0f:15:8b:64:4d:
                    be:7c:d1:17:c7:b9:91:8e:23:31:6a:4c:81:50:27:
                    46:98:a8:37:d6:75:7d:aa:5e:87:a5:0a:40:de:f8:
                    b2:d7:3f:55:08:23:3a:d5:f0:dc:3e:11:8f:b7:54:
                    3d:4f:89:ad:f8:f7:f7:93:1c:5b:8c:83:0a:38:fa:
                    ad:7f:d2:4e:8c:f2:37:cc:12:f4:e5:51:1b:5a:c4:
                    50:68:b0:a6:37:e6:4d:7d:43:0e:91:c7:fd:1d:53:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EE:DC:E9:0D:22:19:48:E5:F1:F0:65:60:48:FA:56:7C:45:94:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057ce887-55dc-35b2-9b4b-966dc76a165c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:47:1f:20:f1:1e:88:c9:74:80:d6:bd:04:8b:5c:9e:dd:c2:
         fa:4b:ee:5d:ef:07:38:fd:4e:ed:69:7e:bd:47:18:fa:0c:5f:
         17:fb:2d:5c:91:69:a3:ef:3f:ff:7f:2a:52:94:85:e4:c9:a3:
         e4:33:b3:b5:fb:29:ec:ca:86:5a:95:5c:1c:56:b7:ed:07:44:
         87:09:5b:6d:1b:4a:4e:15:47:67:5c:29:fe:f4:3b:cf:94:d8:
         8b:b6:3e:d2:61:36:6a:4b:8a:d6:50:22:b8:7d:3b:de:f2:4b:
         8a:14:09:0c:4a:de:fb:68:ea:71:a9:13:fb:32:a3:6f:09:9a:
         52:42:c2:f6:ba:09:5c:1c:75:84:98:35:d0:f5:13:a7:cc:7b:
         47:51:1d:a4:33:b4:8a:5e:80:47:67:eb:56:ef:a2:30:f2:4f:
         03:9f:1e:f8:b9:b7:7c:e9:6a:be:8b:dc:35:ea:8f:5e:2d:93:
         a8:9d:35:7f:eb:54:45:d0:23:bc:81:26:a2:a4:a1:c8:38:7c:
         ec:f5:37:a1:07:c5:1e:92:75:e7:4d:3a:2e:81:e5:96:ab:ef:
         34:48:df:08:a9:cd:80:29:3e:94:6f:92:1a:f6:8b:93:19:e2:
         7c:72:af:eb:2c:de:22:de:b7:b9:f4:f5:85:1d:32:1c:ad:2a:
         73:05:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:07 2025 by rpki-client