Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/118263c6-6640-3abd-980d-23931475d408.roa
File:                     118263c6-6640-3abd-980d-23931475d408.roa (raw, json)
Hash identifier:          JewJpnTx58p62PDRAtNgeH0jzimfxGG0aIB45l5HkCQ=
Subject key identifier:   AB:F4:27:8A:DC:C8:4F:B0:85:B4:12:65:03:F8:44:7F:31:02:D0:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FC7AAA2266854A03D6080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/118263c6-6640-3abd-980d-23931475d408.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        71.193.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:c7:aa:a2:26:68:54:a0:3d:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=2a5078ff-ce30-4ad6-b0de-8985461099ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:f3:25:0d:83:0d:1c:ee:a5:24:f8:d8:0a:
                    bd:61:db:61:4a:85:47:92:7b:04:43:62:09:58:fd:
                    fb:b9:8d:f4:e5:d1:b6:a5:2f:91:b7:55:e5:ab:22:
                    30:e0:29:ec:e1:47:fd:5d:63:be:b0:8d:1a:5a:64:
                    b3:4c:19:91:87:59:1a:6f:47:f8:ca:5c:87:db:75:
                    ab:ac:d7:f5:ee:c7:76:f8:74:18:e8:f5:0e:d5:61:
                    4e:56:ae:32:1d:4f:73:eb:12:c1:b6:b2:e9:12:0a:
                    4e:aa:5f:b7:8e:93:3f:78:d5:28:ca:47:4f:ed:52:
                    2a:85:2f:e0:01:28:37:8a:bb:05:5e:f5:c6:17:ea:
                    e0:bb:f6:78:17:31:ac:88:e8:59:dc:d4:c9:83:e1:
                    29:55:f4:c1:94:6b:ee:31:e5:fb:87:88:05:ed:7c:
                    9f:cf:9d:d9:17:49:2a:7c:c4:b8:10:51:ff:d9:bd:
                    45:9e:77:1f:90:38:87:fc:74:6a:11:df:9a:dd:d3:
                    78:af:23:3a:57:33:df:3f:04:96:86:26:f2:54:ed:
                    6b:11:09:09:21:70:c1:1a:7b:b2:49:de:fe:b7:e7:
                    b7:cd:3d:40:c1:45:4a:93:81:cd:a8:2d:a6:7f:4d:
                    64:4f:15:a1:14:88:6e:86:d3:9f:b4:39:3d:d2:33:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F4:27:8A:DC:C8:4F:B0:85:B4:12:65:03:F8:44:7F:31:02:D0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/118263c6-6640-3abd-980d-23931475d408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.193.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:14:9a:5d:4a:48:fb:82:06:89:7c:47:1a:92:26:bb:8e:
         c6:e0:40:61:c1:f9:5a:28:85:37:77:b2:be:e4:84:5d:2f:49:
         50:70:3c:c4:fe:c7:e3:70:50:b5:21:69:94:92:42:a9:d1:f4:
         a1:5a:3a:43:9b:aa:8b:d1:7d:5e:41:de:42:28:79:cd:83:38:
         98:54:72:bd:e1:64:13:41:e3:78:83:3f:b8:b7:bc:d1:1f:cb:
         6b:4f:62:67:2c:e7:86:5e:02:2b:86:b7:c1:c9:3d:f3:d0:0e:
         59:6e:94:cb:e8:06:a1:ed:42:47:b8:95:ae:6c:02:dd:48:ee:
         c6:a2:0c:74:e5:b9:9f:11:57:04:2b:83:c9:b2:52:c5:3d:e1:
         aa:86:4f:0a:73:0d:16:63:2b:61:2c:84:7a:2c:e8:04:cd:3a:
         8c:bc:ef:0d:b5:62:4c:32:36:02:9f:f5:b3:00:78:5e:ee:57:
         83:08:7f:49:54:42:b6:8d:29:9f:a2:fa:ae:4a:07:72:90:7e:
         14:df:6a:d7:0b:ae:6e:c5:61:82:43:95:63:ee:6d:b5:5b:6c:
         1e:2f:15:8a:9b:f9:33:fa:cf:24:26:68:59:a5:a7:d3:7a:40:
         a1:0c:8f:14:90:e8:fd:0f:2c:ec:4b:4c:d6:f8:45:b1:a9:d9:
         78:b7:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:34:25 2025 by rpki-client