Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087ee2c4-2602-3487-8294-6e18a3ea4ffb.roa
File:                     087ee2c4-2602-3487-8294-6e18a3ea4ffb.roa (raw, json)
Hash identifier:          x6oFD4zmjwP8JZkYEDuoVa25Ia4Y4e6hUNrKDTxy5po=
Subject key identifier:   9C:24:28:F6:F4:F2:7A:A7:A4:84:67:2E:CA:E0:EE:D3:03:B3:24:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75908EFE73B24E02CCC800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087ee2c4-2602-3487-8294-6e18a3ea4ffb.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        174.163.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:90:8e:fe:73:b2:4e:02:cc:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=881b7e58-d9aa-46a8-a30f-6d5d4c274560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:87:64:e5:3e:93:2c:c5:f8:3b:7e:86:8b:
                    21:12:f0:4b:c0:6b:dc:c4:40:52:b8:79:58:00:b0:
                    c4:6f:85:bf:77:68:74:36:c6:a3:6f:69:83:70:f1:
                    3b:f3:41:56:4f:e3:a7:71:52:75:17:0b:8c:cd:a5:
                    7e:bd:fd:07:b3:30:82:04:65:56:96:b5:df:0a:b6:
                    43:c4:41:bc:80:3b:c3:da:5c:9f:35:f4:7e:a8:42:
                    b2:5c:df:2c:df:02:75:7e:96:8c:f6:07:af:43:69:
                    30:0a:12:cc:da:3a:bc:69:b7:cb:9c:16:8c:9b:80:
                    d1:e1:f9:ab:d8:43:c5:3a:21:7e:f2:bf:ea:c2:56:
                    13:03:88:ff:63:ce:d6:af:bc:6e:a9:87:37:86:6d:
                    7c:3b:4f:27:3c:73:11:ad:1d:6a:1f:c0:98:e6:bf:
                    d8:5d:b5:a6:98:66:23:48:dd:5b:08:ce:66:8f:b4:
                    15:a8:4f:71:69:6d:b3:33:a9:84:0c:2c:ee:a7:de:
                    9f:84:11:ad:a5:17:1c:f8:20:60:ea:14:1a:44:da:
                    d2:43:2b:c5:81:97:98:c6:c2:92:54:16:d6:37:f6:
                    69:30:44:19:52:29:ad:c6:57:4f:36:2b:d6:e2:19:
                    e9:12:10:d5:79:64:b8:42:39:29:0d:8b:71:01:ac:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:28:F6:F4:F2:7A:A7:A4:84:67:2E:CA:E0:EE:D3:03:B3:24:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087ee2c4-2602-3487-8294-6e18a3ea4ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:07:f2:7c:e3:fe:b2:28:4e:f7:c2:9d:63:86:21:c2:78:
         52:55:2a:77:ed:4d:09:33:b0:1d:55:0c:76:94:32:91:cc:71:
         80:53:53:ef:3b:7d:c5:76:8b:fb:e0:70:5a:16:5c:9c:25:41:
         f7:1f:c9:b8:ac:31:9a:d3:58:34:2b:a3:6c:cc:ff:db:a0:1d:
         cf:f5:bf:dd:6c:b2:23:5f:49:c3:42:a8:c5:c7:d2:21:0f:d7:
         d2:00:34:12:94:cb:a8:50:e2:4d:eb:5a:96:ae:1c:61:a9:d2:
         a3:36:b0:c1:cf:85:f7:70:17:3f:49:5d:41:d2:94:35:2e:81:
         31:f2:f6:ee:cc:88:ad:44:98:c3:1e:cf:86:41:06:91:b5:c1:
         12:5c:48:7b:0e:f4:b2:54:90:b9:eb:09:ee:c6:9f:c7:97:22:
         10:99:a8:ce:ef:5c:15:3c:c1:73:5e:e0:70:cb:af:9e:ad:90:
         b6:95:6b:be:23:81:e9:95:96:3f:68:ec:ac:2a:62:36:91:45:
         e7:8c:fa:5c:85:9d:68:4c:bd:28:25:57:fe:8c:20:8a:9e:ba:
         1f:84:23:45:12:6f:f1:df:2d:54:f1:48:a9:f2:39:f3:02:a9:
         bb:63:51:a7:5a:cb:54:c9:9b:64:22:58:60:8c:42:97:aa:41:
         35:da:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:40 2025 by rpki-client