Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14db1c4a-27c2-3ee6-b98a-f2b229ee10dd.roa
File:                     14db1c4a-27c2-3ee6-b98a-f2b229ee10dd.roa (raw, json)
Hash identifier:          qzV9i/OAHr2mNuM41Oy8J2uMpdS13lPSp3rgqouRpuk=
Subject key identifier:   BE:F3:BD:0F:71:61:5F:06:E0:FF:42:6D:D2:AF:7A:36:85:02:8C:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431638D9E41BBE708D60E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14db1c4a-27c2-3ee6-b98a-f2b229ee10dd.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.34.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:63:8d:9e:41:bb:e7:08:d6:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4fa839cf-7c24-4a52-a468-0c9fd116b8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:60:42:fa:b0:07:cf:d5:09:42:7a:2b:c7:
                    b1:1e:bc:ff:d2:bf:b9:b8:08:a9:ae:86:1a:69:fd:
                    a5:2e:52:df:fd:cd:72:06:5a:6a:11:6b:5d:39:39:
                    de:41:ef:56:31:47:c1:7c:c7:69:23:56:27:af:32:
                    84:de:b9:d2:34:8c:ac:86:de:63:f1:ed:db:27:d7:
                    5e:4e:7b:e5:11:d4:51:41:92:a9:0e:18:a6:25:7a:
                    7a:b1:db:78:11:9e:54:da:92:2b:7b:5e:c7:37:6a:
                    20:c6:62:a5:0a:9c:75:ec:71:88:67:42:51:fd:ff:
                    9e:88:36:ca:97:01:8d:4c:93:b9:8f:5e:52:90:32:
                    74:fb:26:bf:95:da:1c:99:68:af:a7:2b:c6:cb:42:
                    48:d1:c5:5e:e2:5f:ba:68:d2:89:9d:bc:ea:14:75:
                    75:4e:9f:18:6f:6c:7e:47:9d:1c:36:b0:63:b8:7a:
                    05:5d:50:bc:62:d8:38:99:4d:2f:22:96:a0:bb:a0:
                    34:2d:3c:1e:df:5d:ad:96:b8:a8:05:2c:58:1a:12:
                    67:0d:9b:83:8a:78:85:4e:b2:ef:c6:26:c8:95:86:
                    db:28:43:9e:8f:3a:12:dd:48:d3:b4:4a:93:cd:b1:
                    9c:04:8a:da:ba:6d:f5:99:32:ed:64:19:5c:54:7c:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:BD:0F:71:61:5F:06:E0:FF:42:6D:D2:AF:7A:36:85:02:8C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14db1c4a-27c2-3ee6-b98a-f2b229ee10dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:d2:89:20:ea:4d:17:b2:6f:e1:7b:57:d8:51:ed:57:e1:
         15:5e:44:63:81:43:3e:73:69:6f:18:55:50:ea:e8:13:f0:ad:
         fe:fc:9e:41:23:61:24:6c:73:64:f5:c1:ea:18:c8:97:44:cd:
         3a:9e:17:75:0a:ac:6e:1a:78:4b:9b:47:ee:84:3a:0b:17:78:
         9d:d3:b8:d7:c5:ae:24:fc:2a:42:28:d0:a7:b6:34:59:45:6a:
         5a:f1:62:b5:d6:6d:2f:91:8b:c2:fe:04:de:77:f7:bd:9d:3f:
         31:9a:cd:92:c4:1b:bc:9a:cb:48:7f:d0:c1:64:58:79:22:2f:
         d3:bb:a1:9f:24:37:43:55:57:eb:bb:8e:fc:2a:25:e1:28:68:
         c0:fb:bc:14:c8:63:ed:68:b5:dc:a7:b5:3b:9e:16:00:ea:f1:
         fc:f9:af:c1:28:b6:b0:0d:bd:79:86:ac:37:7f:a1:51:dc:d7:
         76:b9:c3:32:a6:66:42:60:53:c7:cd:08:da:c9:8a:dd:6e:72:
         54:ff:d6:f5:1d:20:68:4e:b6:8f:7b:72:dc:75:6e:a0:b4:02:
         5f:02:2c:f3:68:12:71:be:8b:04:aa:da:b3:22:79:c3:58:eb:
         d1:2b:02:b8:df:46:40:ea:79:d3:9e:50:e8:1e:1c:82:1b:92:
         a3:75:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:57 2025 by rpki-client