Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f37bde2-f4ec-3aa9-a854-2e80ab92b4c6.roa
File:                     0f37bde2-f4ec-3aa9-a854-2e80ab92b4c6.roa (raw, json)
Hash identifier:          Dfq5nrRub9gHh3GQCxTrQ7u0DEjp71+X4/9FbYt8gTk=
Subject key identifier:   ED:63:DD:EE:8A:8C:4F:57:87:F4:3C:CF:26:C2:B2:28:7C:12:EC:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8D19BC6975E9F5A41D4A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f37bde2-f4ec-3aa9-a854-2e80ab92b4c6.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        24.127.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:d1:9b:c6:97:5e:9f:5a:41:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8646a7b8-a51e-40da-bc22-9ad8c3af409d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:42:30:bc:65:ff:61:0e:2b:b3:48:f8:8d:
                    37:f3:3e:6a:97:c0:4e:49:f5:a2:38:06:09:3f:2c:
                    91:ea:ab:27:33:1a:4d:48:10:d4:16:a9:11:be:ae:
                    40:96:dd:64:01:16:52:0f:68:4b:4c:de:ba:11:3a:
                    21:5d:60:80:a4:cf:ad:b9:f2:98:35:a6:29:47:86:
                    bc:6f:5f:eb:ad:41:ee:e8:0d:8a:92:87:24:43:5d:
                    02:89:b0:07:66:42:e3:36:ca:86:f4:e0:4c:80:56:
                    2d:19:56:c3:c4:8a:44:9d:f2:88:de:27:78:73:03:
                    24:1a:b9:e6:4b:e1:41:2e:e2:c2:af:d7:7f:8d:0d:
                    04:f2:35:a3:0c:22:66:65:91:b9:ef:e0:82:ce:30:
                    bd:79:9d:c4:ed:88:a5:3b:76:48:33:31:80:c4:52:
                    e6:a6:42:0e:9c:df:da:31:91:43:68:82:86:c0:79:
                    ca:8b:9d:94:33:f4:1b:37:d6:6b:bd:09:0e:26:34:
                    68:82:2e:31:87:d8:ab:02:7b:58:ea:d8:25:17:1a:
                    5a:2b:a4:f3:d0:f1:c5:a2:91:e1:02:dc:40:30:e1:
                    10:7c:ad:cf:62:8c:53:de:2f:81:81:bf:f1:e2:7b:
                    af:da:6b:9d:2a:70:24:d5:9c:00:71:e2:2a:1d:63:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:DD:EE:8A:8C:4F:57:87:F4:3C:CF:26:C2:B2:28:7C:12:EC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f37bde2-f4ec-3aa9-a854-2e80ab92b4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:28:99:b2:5c:ca:75:e6:97:b8:21:8f:93:d7:4a:3f:e4:ad:
         fb:2d:db:56:8c:e0:6f:c5:63:2e:82:4f:3c:75:b3:36:58:f3:
         83:e7:51:2f:03:80:96:a4:fc:e2:9a:bf:e4:c6:bb:e8:13:ee:
         2f:05:46:93:ca:4d:0a:12:0c:d5:c9:dc:23:b0:9d:50:2a:23:
         be:e0:16:fb:c6:5d:eb:7a:42:28:84:bd:a7:e4:a3:36:a4:19:
         bf:e6:a5:ed:df:d9:0f:b7:fd:3b:ef:4f:c7:40:60:93:1e:2c:
         3a:63:75:73:0d:f4:7a:72:50:95:02:ba:aa:85:d4:fe:b3:9c:
         96:a2:92:f9:5a:71:fb:1a:94:95:8f:19:be:41:2e:3b:aa:6d:
         52:b1:e1:c2:d8:ee:10:e0:a7:eb:a1:aa:30:c9:21:50:a6:d5:
         e9:ee:c4:95:22:23:ac:45:b4:64:2b:2e:9b:9b:bf:2b:fe:72:
         b1:9d:4c:48:e8:b8:f7:b3:3a:4c:ee:4a:62:be:d7:58:97:fb:
         9a:89:74:a1:73:64:d1:e6:f8:55:c2:85:be:1d:9f:02:ad:73:
         69:38:81:ae:83:a6:72:16:f6:91:97:59:58:27:fb:0c:62:be:
         44:99:c4:1e:70:56:dc:16:36:2d:c2:07:7a:3d:49:f4:58:88:
         26:b4:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:54 2025 by rpki-client