Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11242384-f4a2-3e39-a612-c06ce59494fe.roa
File:                     11242384-f4a2-3e39-a612-c06ce59494fe.roa (raw, json)
Hash identifier:          50s9nXQJb9uKX8D+cvUzcEWks4MnlQ8vEx1ulcxKc/w=
Subject key identifier:   33:31:62:04:18:1A:FC:C3:07:D3:C1:24:56:56:C5:D7:20:74:E9:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF527F5C60420EF7A11C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11242384-f4a2-3e39-a612-c06ce59494fe.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.58.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:52:7f:5c:60:42:0e:f7:a1:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b72c2633-e808-43e6-9d0c-f9e739c6c94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:47:7e:23:87:a3:94:06:9e:33:58:30:99:
                    55:56:71:58:5d:06:b2:90:6f:94:82:1b:7c:42:a2:
                    a8:bc:d4:57:ee:f0:34:69:81:a3:92:1c:67:8d:7d:
                    af:38:c7:b1:32:df:6f:54:d5:1b:e4:47:48:97:15:
                    d2:fc:da:60:06:d9:6e:1c:c9:6e:62:b5:ac:ed:ab:
                    dc:e3:b5:24:bc:51:b5:23:b2:87:ae:2e:90:04:11:
                    80:26:27:41:da:a7:7a:c7:23:76:1e:15:8f:bd:2f:
                    e7:50:29:ad:17:d8:64:23:78:99:77:09:c2:33:dc:
                    fd:67:0c:ed:27:fb:b3:4b:d5:a9:9a:99:83:b0:9e:
                    7c:9c:62:c9:28:52:e3:bb:f4:b2:e1:02:0b:53:a7:
                    9c:0e:5c:3d:d3:15:7e:c6:06:90:42:91:7c:51:9a:
                    40:a7:b4:5e:2c:f4:e1:37:f5:fd:de:81:27:d0:48:
                    a3:9c:ed:6e:cc:20:89:95:a9:95:b5:90:4a:3f:8d:
                    42:a3:09:46:de:6c:39:1b:e9:99:4e:c6:fa:ff:bb:
                    a8:8f:84:02:bb:32:51:71:16:4a:7e:ab:7c:ea:29:
                    60:ad:15:bc:47:72:f3:0e:85:93:c5:4b:4c:00:30:
                    1f:89:73:36:5e:56:76:a7:48:0a:47:24:5b:08:a0:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:62:04:18:1A:FC:C3:07:D3:C1:24:56:56:C5:D7:20:74:E9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11242384-f4a2-3e39-a612-c06ce59494fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:e8:a0:52:9b:b1:2c:b6:d9:f4:46:c2:ca:34:6d:ec:4b:
         c5:95:e7:d5:da:46:08:c7:97:0b:d9:44:57:5b:4b:1e:ba:9f:
         91:69:ac:e1:b2:14:99:e4:dd:80:75:10:a8:d2:cb:cf:db:e5:
         5d:2a:d4:7b:42:21:91:d7:6a:bb:9c:9d:3e:86:45:dc:8a:25:
         43:5d:66:c2:67:e7:7c:59:a1:90:c9:71:7b:b9:33:4f:99:9f:
         97:cd:45:b3:1b:a4:ea:a8:ce:41:12:92:91:89:61:ec:ae:e6:
         eb:8e:42:4e:59:10:25:da:ae:42:5c:f6:a8:29:4a:99:57:ea:
         47:3e:9d:8c:dd:26:55:e5:b8:5a:80:d8:00:45:01:5b:cf:3d:
         c6:da:95:c5:8a:e2:d5:fe:86:74:b2:47:2f:b6:d4:af:82:de:
         08:d3:7f:f1:ad:ec:f1:e5:49:07:46:07:3d:4b:b5:aa:e6:76:
         5d:e2:6d:38:65:b2:9c:a3:8e:6c:f5:aa:f3:e1:b5:f4:b1:52:
         4f:2f:c0:f4:8f:ce:fa:4f:dd:02:d6:e0:08:97:99:7d:5f:c1:
         6e:e4:4b:e1:ea:98:3a:44:63:5f:64:8e:75:0b:87:e4:e6:43:
         5c:6d:d0:ba:e9:8f:42:3c:c4:2c:25:57:0a:4b:24:28:43:08:
         ec:03:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:18 2025 by rpki-client