Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/067bcafc-9268-32eb-945f-4801b2d10a5b.roa
File:                     067bcafc-9268-32eb-945f-4801b2d10a5b.roa (raw, json)
Hash identifier:          SwM3VC1Bvw4awXdLttNmCqma+GjGfjarge+wMJvTe5I=
Subject key identifier:   98:3E:F5:78:BE:32:61:7F:A0:F3:B8:A1:88:FB:65:CD:A8:72:7C:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0B7B4329F5F79F04EB960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/067bcafc-9268-32eb-945f-4801b2d10a5b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        174.62.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b7:b4:32:9f:5f:79:f0:4e:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=61176146-0f08-4d9a-9211-815efbd67700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:7f:98:a1:fa:9d:e5:aa:9b:d3:55:7c:22:
                    c7:66:78:af:e8:7a:88:60:16:7e:6d:75:ae:69:81:
                    20:89:3f:9e:e2:fd:13:26:59:ac:e4:8a:6d:09:9c:
                    0a:96:7c:79:6a:d4:85:2e:8f:fb:00:3e:08:ba:02:
                    86:1d:01:63:ff:30:5c:60:cf:ba:90:9a:62:da:dc:
                    e1:bd:2c:a2:a3:84:61:85:66:ec:b6:f4:e3:7a:95:
                    da:92:6d:ff:52:ac:aa:3f:94:76:9f:4a:d9:a2:ea:
                    9f:99:bb:64:01:b2:62:30:85:59:b9:e0:84:14:b2:
                    5d:c4:0e:b5:e4:65:84:01:2d:73:3d:72:da:12:3e:
                    1d:ad:fa:fe:e1:fe:8e:50:70:ae:98:14:18:54:88:
                    5e:e2:eb:12:07:04:d0:12:e0:49:4c:af:8e:29:5d:
                    f7:34:a8:f5:92:bf:37:46:ef:3b:34:7e:91:05:33:
                    bb:84:f7:2a:63:ab:08:61:f7:07:ab:32:c0:37:e3:
                    d2:0a:9b:d2:b7:b0:f4:86:d2:04:2d:ea:38:f7:a4:
                    8b:71:eb:4b:27:a6:24:2a:83:63:24:f2:5b:bc:90:
                    d1:d3:3d:58:23:99:c3:4b:67:ad:7f:dd:fd:11:f1:
                    70:6d:80:47:a5:b8:a4:60:19:10:9e:aa:43:25:26:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:F5:78:BE:32:61:7F:A0:F3:B8:A1:88:FB:65:CD:A8:72:7C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/067bcafc-9268-32eb-945f-4801b2d10a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:1b:a1:0e:2a:a0:7a:bf:81:50:3f:48:25:3f:1d:b5:84:
         a0:dc:04:83:6f:cf:d0:d2:24:eb:f9:e7:b9:c8:fa:58:9e:57:
         f4:c1:97:00:39:8e:d3:24:fa:86:05:bc:87:59:36:16:7d:13:
         b9:f7:d6:4e:79:52:f8:91:78:a1:4f:45:c4:ca:b9:b5:ae:d4:
         29:aa:2a:b6:a1:9a:4a:64:2a:fa:97:9e:70:58:d2:84:18:f5:
         0b:8a:75:1d:43:80:a3:03:54:a0:87:b7:ab:80:55:e9:fd:c5:
         71:7e:7a:35:86:6b:5e:aa:b5:11:8d:12:e2:10:1d:11:7b:46:
         fd:53:dd:db:bb:37:8a:0c:60:37:f2:6b:72:9b:71:c7:e3:9b:
         de:7c:da:e7:17:d0:66:6c:09:a4:5f:c6:c8:00:44:d3:8a:dc:
         4a:32:8e:8b:19:32:f9:6b:9a:a3:15:07:eb:d7:65:29:45:04:
         6d:16:3b:b6:c7:25:cd:b5:5b:b5:6c:6f:75:72:a6:e1:c3:69:
         d9:53:31:84:0a:41:b1:9e:d8:94:ae:39:c9:dd:3b:99:9b:7f:
         53:54:bc:ab:8f:9b:c0:90:d9:fa:c3:07:86:7e:4f:c6:74:61:
         e7:0a:2f:30:81:ec:9e:ed:84:71:b5:b6:bb:d5:48:ae:02:8c:
         21:ab:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:54 2025 by rpki-client