Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14842811-6d3e-38b9-a3c0-b1a172b962c7.roa
File:                     14842811-6d3e-38b9-a3c0-b1a172b962c7.roa (raw, json)
Hash identifier:          9Vxyb4fwPK8GQu87BdHVsvn+Nzp9U2/p1T1Lko7ceeA=
Subject key identifier:   F1:D2:61:45:23:54:93:4F:B8:C3:40:C3:81:B0:DB:05:72:06:5C:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7577D56A74D6AD78A460C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14842811-6d3e-38b9-a3c0-b1a172b962c7.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     33659
IP address blocks:        69.142.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:77:d5:6a:74:d6:ad:78:a4:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=2e483caa-dbc9-4619-9f7b-26c38b98f849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:b3:30:79:d3:ec:78:8e:4e:32:3a:07:d6:
                    09:12:4b:09:5b:6a:37:5e:25:31:51:ce:69:d9:62:
                    d8:9c:a9:a5:89:02:29:85:48:1f:63:1e:c7:2a:e4:
                    6b:22:9b:c9:a7:81:54:d0:3d:79:a5:3e:9a:fa:5e:
                    02:af:08:bf:a6:5d:3f:7f:04:c3:59:a6:7b:2a:d2:
                    7d:ff:49:f2:50:d6:a0:06:57:1f:81:bb:d5:38:4b:
                    a9:d8:26:2c:03:0e:19:b9:5e:bd:8b:54:a8:c4:20:
                    f0:ad:92:55:86:be:46:f2:29:c6:1e:53:93:af:04:
                    89:10:de:07:54:4d:f1:0b:87:2e:93:a6:37:c0:d1:
                    84:ba:b1:e7:78:df:1e:e3:57:ba:54:76:ef:6d:a2:
                    9d:ee:51:89:f9:dc:46:b9:4e:49:fc:94:b5:03:ed:
                    e6:05:2e:34:81:de:03:69:06:50:14:24:2e:67:ed:
                    1d:4f:ad:d1:7b:d1:6d:88:d2:23:18:31:b4:2a:27:
                    c1:87:a7:a5:30:2b:61:36:48:4f:d1:cf:33:08:fb:
                    1b:e6:d8:65:f9:78:e9:c6:5a:b8:aa:9a:63:d0:88:
                    d5:77:e4:57:b9:d9:8f:ec:e6:70:b1:06:20:3a:15:
                    82:2c:e3:ae:39:b9:03:7c:6f:19:cc:c7:d2:c5:8f:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D2:61:45:23:54:93:4F:B8:C3:40:C3:81:B0:DB:05:72:06:5C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14842811-6d3e-38b9-a3c0-b1a172b962c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:e0:8c:fb:c1:34:9b:00:ed:a8:b0:5f:3d:86:d7:41:3d:
         e8:b6:a1:0c:86:2e:7e:af:40:29:be:95:35:59:22:99:22:c0:
         4e:85:3e:aa:40:85:68:eb:66:3a:6c:d8:61:70:46:5c:15:97:
         27:cc:d1:99:22:6c:6e:5a:ec:66:fb:69:1a:f8:32:82:ec:c9:
         d7:7e:6e:b4:7f:b2:cf:f1:83:39:bf:d4:21:f8:89:38:f1:f6:
         88:f4:61:3d:7d:ac:7e:e1:36:59:5e:3f:c0:6c:02:41:6a:a4:
         b4:31:28:e5:65:56:b2:97:8a:2c:48:6e:c7:a4:00:50:fb:91:
         fd:6f:ea:75:86:27:96:6e:32:b4:2b:b0:65:01:78:f3:76:46:
         9f:c5:bf:21:9b:97:b3:9a:3d:a6:12:97:43:1b:fb:d4:ed:7d:
         b4:fa:b5:ed:d0:f6:05:78:33:22:f8:19:2d:0e:43:a7:52:80:
         de:33:b4:b3:b3:ff:03:e5:b7:c2:64:d8:a6:6f:2f:a7:c9:5e:
         14:d5:28:d6:ba:1d:b6:69:41:92:6b:02:d0:02:40:98:1a:99:
         ad:c4:ea:99:76:2a:b4:0b:6f:03:dc:fe:e5:88:fa:c5:f3:a6:
         b1:49:a2:15:86:ad:bf:ba:3d:5b:23:28:1a:5f:5d:de:9f:0e:
         00:65:fd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:11:23 2025 by rpki-client