Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa
File:                     0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa (raw, json)
Hash identifier:          tGUW5PcYKV8+xaBRZ1SalS2S4Cp9/ZI33tOoU3Xh1NA=
Subject key identifier:   A0:98:0F:74:9E:26:EB:86:EC:3D:EE:EF:CF:BC:7A:89:E6:1E:D7:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B2615411B796D2B966E61880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa
Signing time:             Tue 28 Jan 2025 17:36:53 +0000
ROA not before:           Tue 28 Jan 2025 17:36:53 +0000
ROA not after:            Mon 28 Apr 2025 16:36:53 +0000
asID:                     33491
IP address blocks:        69.252.253.192/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:61:54:11:b7:96:d2:b9:66:e6:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 17:36:53 2025 GMT
            Not After : Apr 28 16:36:53 2025 GMT
        Subject: CN=2efefab3-9e58-4044-a022-daf4dd70254a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c3:07:53:46:48:56:af:57:87:ee:49:38:95:
                    89:15:28:0d:c2:32:7f:03:d9:b3:79:ae:ef:3e:ac:
                    70:24:bc:b8:8d:dc:05:11:82:27:5d:28:01:45:1d:
                    df:b2:2e:22:b5:cc:82:65:33:ca:28:19:b1:ee:e7:
                    68:28:42:2f:0f:63:3d:ad:90:9c:9f:91:33:33:d7:
                    79:9b:94:1f:81:e6:4e:8c:65:f5:c1:8f:27:63:fa:
                    28:83:a9:a6:5a:1a:3a:02:54:63:60:9f:25:58:af:
                    a2:bc:af:45:bb:cf:5c:2f:59:63:d9:a0:5a:16:b3:
                    9b:f5:ad:55:3a:a0:04:67:6e:11:eb:0a:2b:a8:c3:
                    02:c8:70:6c:f0:53:d5:64:0a:71:fc:64:78:20:59:
                    63:90:94:ca:6e:8b:ca:f9:98:11:57:43:4c:37:14:
                    e4:69:36:76:41:2d:89:7d:a1:02:ba:6d:51:f0:d9:
                    66:1f:da:77:f5:6d:6c:bf:1a:62:bd:3c:46:40:d3:
                    dd:0a:5e:09:c4:68:07:47:ea:ba:cd:b3:df:52:43:
                    49:1a:35:29:50:48:ac:f1:6a:53:d2:0a:61:2b:ba:
                    9b:41:df:f8:23:e1:a8:f5:9e:1f:99:82:13:ef:00:
                    7f:8f:93:bf:6d:0e:32:fe:ee:c2:c6:5a:72:d2:c0:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:98:0F:74:9E:26:EB:86:EC:3D:EE:EF:CF:BC:7A:89:E6:1E:D7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4884f0-11e1-3c9e-9803-23e4d0e8a2c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.253.192/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:62:3a:d8:0e:cd:16:16:7f:6f:a7:c7:e7:fd:47:21:dd:6b:
         a1:1f:6d:4e:31:e3:ae:49:a8:39:eb:9b:82:a0:31:33:52:1e:
         40:3d:15:d5:6c:c2:d1:a1:a3:56:fc:b8:a7:fa:c9:e1:2c:83:
         38:a5:24:3e:ee:bd:44:71:39:b6:bb:18:3e:37:1c:95:c1:66:
         b8:d8:d8:b4:91:31:78:ed:18:20:11:4a:39:4c:f9:29:03:cd:
         83:e3:f4:e1:6e:d6:38:17:b7:7a:c0:de:55:09:9f:79:b7:4b:
         db:5f:b8:14:55:34:1a:2f:f8:02:c9:85:44:f8:bd:c0:09:6b:
         e0:6d:27:2d:c8:99:6e:7d:e0:d6:9b:53:d9:0e:fb:ea:15:60:
         fa:bf:a9:4c:c7:c2:48:99:6f:f1:01:e5:ab:05:36:74:c2:15:
         25:54:79:25:44:eb:ce:e3:92:f5:54:d6:0e:b6:86:d4:16:05:
         91:aa:c5:97:5d:89:39:63:bd:cd:b6:f8:ad:46:ce:06:6e:ef:
         7b:ed:2f:e8:e2:a6:e4:a9:8f:76:e5:6b:0b:62:05:87:68:3a:
         73:91:95:1a:ce:ba:fb:98:4f:14:3d:35:5d:31:46:8e:42:ed:
         19:d8:02:8d:a2:de:3e:53:c0:f9:d7:42:e6:64:4e:8f:5b:50:
         60:ac:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:41:33 2025 by rpki-client