Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12057b94-89d8-34a7-b722-48c9c31640e3.roa
File:                     12057b94-89d8-34a7-b722-48c9c31640e3.roa (raw, json)
Hash identifier:          Yuc1u42xjp2xiZczjz5+4yItJKgy1Gap8yjJADFWQoI=
Subject key identifier:   75:F4:2E:78:F0:67:EE:7E:3E:6C:B2:66:F6:18:34:9A:99:98:CC:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8284968E9426AB8814300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12057b94-89d8-34a7-b722-48c9c31640e3.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        71.193.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:28:49:68:e9:42:6a:b8:81:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=81aa9341-8f0c-486c-a492-708616732d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:2e:03:14:f6:13:0e:b0:1f:cd:80:2a:47:
                    bc:be:10:59:83:cc:65:c6:fa:17:8c:2d:f3:4b:5e:
                    c3:b2:f6:84:b8:d1:50:24:91:ff:7b:f0:81:b2:31:
                    bc:79:4b:4d:3a:14:77:54:90:39:39:50:ef:84:7e:
                    fc:c7:1c:eb:f5:f1:7e:be:85:88:7b:ed:e8:34:80:
                    7c:63:af:1e:a0:5e:a9:80:71:61:a6:57:0e:2b:3a:
                    33:80:dd:65:30:92:ea:c3:38:95:77:58:17:fc:78:
                    57:42:ef:99:f1:8c:66:1d:27:e6:21:af:d1:d2:11:
                    6c:93:ea:9d:a8:c5:3a:36:a1:19:e8:8b:ab:4f:a1:
                    39:05:2c:86:64:88:b0:e3:51:12:ef:0a:4d:2f:cf:
                    50:55:6f:ea:1a:71:ae:09:99:58:0d:4d:d7:61:72:
                    be:73:9b:da:a2:31:c7:38:6b:8e:27:1f:bc:34:a9:
                    df:55:c5:0f:ba:f5:31:78:0f:c3:86:50:16:06:df:
                    fb:9f:67:b9:dd:b7:6b:96:af:c8:42:13:3b:d5:53:
                    71:f8:8a:da:70:95:74:b1:74:96:40:aa:b6:c1:11:
                    b2:53:12:53:d9:63:1b:33:9c:ec:ee:f0:31:21:d5:
                    1d:d4:3e:40:92:99:cf:ba:4d:ed:3b:85:ef:6c:86:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:2E:78:F0:67:EE:7E:3E:6C:B2:66:F6:18:34:9A:99:98:CC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12057b94-89d8-34a7-b722-48c9c31640e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.193.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:b3:74:2d:ad:6f:6a:64:52:02:47:88:25:b2:1e:de:5b:
         f3:27:71:62:a9:01:56:5b:d3:1c:b8:19:33:94:98:7e:2b:9d:
         d7:fe:e0:73:34:87:9f:ed:04:59:34:4f:9a:7e:b0:ba:46:bd:
         53:ff:63:33:cc:44:58:9e:5e:11:24:07:0c:05:63:7f:f5:ee:
         75:2a:94:f1:25:3d:71:31:15:14:6c:a7:c9:a0:22:91:f5:67:
         08:13:4f:74:d7:91:13:f5:d5:4b:b9:7d:d2:ab:de:0e:0a:fa:
         0b:69:24:fb:57:b4:51:80:6b:1c:21:e6:27:31:d6:9b:9f:b2:
         2a:3f:f8:e0:05:5b:20:4c:ad:25:15:76:e2:dd:ce:da:5c:0c:
         0e:26:9b:63:46:3c:17:e2:1a:9f:02:ed:42:5a:d9:b1:c7:20:
         fb:75:0f:2e:05:de:f8:5a:8a:51:ce:24:7c:42:d3:ca:40:74:
         da:6d:75:6b:b4:75:81:0d:02:4a:f8:52:1f:c1:94:19:f9:90:
         ec:e9:05:ab:4d:df:49:aa:4c:fc:71:d1:98:35:8f:65:17:48:
         65:b9:f9:f1:90:32:34:f3:83:ed:89:8d:c5:d4:ca:72:3b:85:
         a4:ad:52:d3:59:d2:ee:d0:63:1a:58:26:f7:f2:c4:fd:45:58:
         fc:36:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:38 2025 by rpki-client