Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12ed685d-5741-31ef-b9bb-d918a7762c00.roa
File:                     12ed685d-5741-31ef-b9bb-d918a7762c00.roa (raw, json)
Hash identifier:          7gjeXVeH3DpUNkeg/tzJCQKqA6Nag2IJi9flQ1L6yJs=
Subject key identifier:   20:F3:B8:65:46:28:6B:56:65:E9:CB:4E:0D:05:E4:7B:CF:37:0D:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C8BD635E63FDD03AD7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12ed685d-5741-31ef-b9bb-d918a7762c00.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.99.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:8b:d6:35:e6:3f:dd:03:ad:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=e3f1bbac-5ca3-45ac-8c85-a5fa045b2340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:2b:c7:5e:c7:3e:29:ab:8d:e8:52:73:2b:
                    1e:72:2a:9a:34:b9:59:40:c2:b6:07:79:ec:87:30:
                    d7:5a:32:b1:70:91:fb:59:95:16:18:68:85:40:7c:
                    a5:ee:8c:f0:20:86:4b:7e:af:88:ba:73:89:61:73:
                    20:a7:4b:8a:ce:5a:b7:2a:d1:7d:65:94:3a:cd:a2:
                    59:13:e8:e0:1d:c2:d0:87:07:a8:dd:40:e6:b8:27:
                    5a:a9:fa:42:5c:00:1b:00:8e:fb:48:aa:24:28:68:
                    0d:7d:ea:d4:57:1c:f4:2b:bb:8b:fe:19:a0:54:6e:
                    99:d7:5b:55:c7:19:69:91:82:51:98:14:4c:f6:64:
                    bf:65:e2:bc:73:4d:e1:34:33:f5:6b:fe:9f:14:ae:
                    98:0d:8a:fe:4f:aa:ec:bf:bd:1d:e5:35:6d:68:00:
                    25:d0:93:11:5b:3a:68:19:50:94:10:85:3f:96:9b:
                    2f:b7:62:d0:cb:b3:34:f0:cb:45:21:c0:42:98:4b:
                    74:87:78:9f:7b:7f:04:7e:cd:b1:56:72:dc:94:a9:
                    aa:b6:ee:fb:c1:18:70:66:2e:d5:e2:15:4e:6b:c2:
                    12:7d:7a:2c:8e:b0:79:61:58:1d:fe:2f:3e:41:de:
                    e6:8d:29:57:24:ec:7a:ef:af:2e:71:08:6f:46:28:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F3:B8:65:46:28:6B:56:65:E9:CB:4E:0D:05:E4:7B:CF:37:0D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12ed685d-5741-31ef-b9bb-d918a7762c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:61:25:3f:9c:c5:94:be:c1:06:dc:d3:76:c1:d2:56:66:15:
         3e:bf:5a:6c:e9:4d:cf:52:1d:bc:81:87:eb:2c:6d:45:11:bb:
         7a:49:ab:31:a1:0c:05:b8:29:3f:d9:ee:16:2c:51:70:d2:19:
         26:62:aa:bc:e1:45:9d:8f:01:97:28:5c:7b:59:0e:4d:81:38:
         ce:0e:bb:87:a0:f1:f9:7b:d0:81:85:ac:d8:70:25:fc:62:d1:
         30:58:be:e7:66:19:47:e1:a8:02:79:b3:fd:47:cd:85:56:b7:
         b2:bd:c0:f1:77:eb:8f:02:5b:66:ea:bb:13:b3:b4:28:94:c7:
         8f:b7:b8:27:10:93:33:e1:c3:b9:33:7a:db:de:47:0d:7d:ae:
         59:6e:96:15:db:24:25:f7:71:63:3e:8f:92:17:48:8d:23:82:
         2e:7e:32:82:b4:52:48:4b:7f:ad:58:80:f6:00:c6:83:ef:ca:
         9c:38:4d:d9:d5:e1:2a:76:4f:58:5e:c4:01:5d:f5:a3:b1:06:
         10:10:dd:db:6d:c8:83:8b:5c:77:7e:f0:e2:1b:0d:0a:aa:fc:
         c5:7f:ce:60:b3:9e:6a:8d:fa:64:99:6e:99:7a:7c:70:74:ee:
         62:81:28:e3:3e:1a:ae:b5:84:0a:4c:ce:f1:da:ec:d8:24:fb:
         91:73:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:45 2025 by rpki-client