Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11f0a299-7647-353b-bc2e-29f75632bb5a.roa
File:                     11f0a299-7647-353b-bc2e-29f75632bb5a.roa (raw, json)
Hash identifier:          x8XcFGj76FX5eCE1L2eN1NRg8SklYxJb1AuYTk6Hw7Y=
Subject key identifier:   08:EB:CF:46:04:7C:D3:5B:A9:9B:09:B2:53:21:E3:F8:82:87:0D:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BE741FD6B3E8D05496C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11f0a299-7647-353b-bc2e-29f75632bb5a.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33490
IP address blocks:        71.238.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:e7:41:fd:6b:3e:8d:05:49:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=e82cf4b5-7ec0-4172-bc19-78b8d5e42b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:6d:3a:ed:1e:e8:7e:cb:72:a6:45:91:af:
                    22:c7:58:40:d3:1f:5d:ee:8d:f8:19:dd:f8:82:bb:
                    d8:6c:5f:37:24:e7:8a:8f:6e:f0:b7:f8:aa:87:ed:
                    73:ca:1e:7a:71:d5:80:fd:2a:20:2d:6a:de:72:8a:
                    be:3c:63:2d:80:a4:ec:ce:39:c7:43:96:7f:3f:58:
                    fe:ba:48:6f:32:c2:2b:83:a3:28:5e:1f:f1:fc:b2:
                    2a:e8:0f:9e:8d:46:84:f4:91:c9:52:92:97:bc:75:
                    c5:1b:92:08:77:34:0c:a7:c6:74:94:f3:91:26:62:
                    de:aa:87:b6:5f:bf:2d:b8:65:72:7b:a6:58:c5:81:
                    9c:04:4e:38:22:1f:ef:1f:95:e3:7e:f4:dc:48:29:
                    d3:4d:a9:d5:6f:ff:d4:6f:87:9f:74:87:2f:d5:e6:
                    99:70:f6:64:c3:db:53:2c:54:a2:5c:fe:a3:e8:fa:
                    66:95:fe:f0:8d:f0:94:13:fd:ba:87:59:be:7a:37:
                    9e:4c:04:48:f2:cd:ae:ac:e4:00:4d:29:3a:99:87:
                    e4:a4:a6:83:f6:9c:59:bb:42:99:a0:69:36:26:ea:
                    01:ce:37:05:a0:ea:2b:1a:f8:39:25:c8:ba:cf:09:
                    1a:8d:fd:ba:f9:14:54:41:f7:d7:da:1e:37:ae:d2:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:CF:46:04:7C:D3:5B:A9:9B:09:B2:53:21:E3:F8:82:87:0D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11f0a299-7647-353b-bc2e-29f75632bb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:98:88:c4:85:db:25:17:0b:1b:94:57:9c:e6:b9:be:42:70:
         17:eb:ef:61:db:8c:c2:d6:93:36:59:49:f0:d2:95:5d:a5:bd:
         ec:65:51:81:fb:10:1b:36:dd:15:23:5c:0c:a0:0f:a3:e0:53:
         ae:b5:27:a8:0d:c5:9a:11:79:15:7e:3c:10:d6:d2:7b:ac:12:
         01:b9:58:9a:da:7b:69:8a:c6:89:aa:5a:b9:ca:da:a0:c2:25:
         fe:16:42:29:b4:fe:1a:7b:d7:df:7d:81:ca:d1:10:ae:0b:d8:
         41:72:14:a0:7f:89:9a:2e:40:e0:3e:c5:67:58:80:d0:dc:f5:
         91:0a:82:85:49:6b:9f:7e:db:4a:32:12:52:4a:fc:fb:d3:d2:
         61:98:50:ab:f9:b9:04:f3:1a:3f:8f:a9:aa:b4:5e:e9:53:2e:
         37:da:d2:f9:7e:e7:0d:e3:a3:16:e7:5f:33:49:88:c8:01:ad:
         d2:8d:24:dd:fc:00:97:cc:86:50:23:db:eb:ef:7d:b3:8d:3b:
         6d:b4:71:57:7b:f8:ba:37:2a:f8:ae:c8:ee:a8:56:39:24:51:
         1a:16:1d:43:e5:35:d3:26:0d:40:c5:58:84:e9:e5:18:55:05:
         2f:ca:97:8b:01:d1:df:19:3b:8e:50:a7:62:60:c0:38:a2:2b:
         d5:0c:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:56 2025 by rpki-client