Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bb8966-bb3b-3938-89f4-47a5fb133a2c.roa
File:                     21bb8966-bb3b-3938-89f4-47a5fb133a2c.roa (raw, json)
Hash identifier:          1Q8AW8BL6vfwhB/9Gy9IpJjgv8ZTX9x9GWNx3qXfb1U=
Subject key identifier:   CD:3E:8D:4D:12:71:C2:37:1A:27:C2:55:AD:CB:FE:6E:CE:7E:EC:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430E13C26EA5CC160A79300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bb8966-bb3b-3938-89f4-47a5fb133a2c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        174.170.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:e1:3c:26:ea:5c:c1:60:a7:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=54742b51-9aaf-48a6-a549-9106a6c0071c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:13:31:2e:9b:98:85:66:de:60:7b:8b:7a:
                    f7:98:1d:15:01:28:e4:35:af:9b:a2:7e:d1:66:8e:
                    11:67:19:b8:5f:7a:80:a7:6a:a6:a3:7f:b2:9f:8c:
                    71:75:38:85:60:07:6d:b3:3d:5d:97:8b:6b:7e:65:
                    40:83:e0:94:d6:65:81:b7:d4:0f:e6:98:26:f8:29:
                    f4:af:96:6f:2c:56:2f:1f:e2:da:c9:0b:9d:c5:0c:
                    3f:2a:54:93:79:93:56:78:27:a5:ed:73:b8:71:86:
                    93:9d:64:53:8b:03:55:aa:56:b0:6f:a4:10:e0:a6:
                    aa:44:95:42:af:4f:58:f4:20:1a:a4:79:a6:e9:ab:
                    50:e9:35:17:9b:29:07:14:60:46:e3:c6:83:bd:c0:
                    29:7b:ad:2c:55:28:19:bb:a1:53:c8:57:5b:16:ee:
                    5f:78:3b:81:fe:38:7a:71:e9:2d:fe:61:d3:ae:c1:
                    ec:f4:2d:01:a6:ea:4a:47:1e:10:88:6b:5b:a6:42:
                    d2:90:fa:67:c5:77:d9:37:5e:8a:ad:43:cd:a1:5c:
                    ec:d7:f8:7f:32:5e:78:73:0f:86:c8:2f:ae:8f:95:
                    a7:b5:01:7a:b8:41:ac:a1:18:3a:91:7c:d4:ca:b4:
                    81:59:d4:c1:e2:95:a5:e7:97:c5:fa:60:9f:3e:b9:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:8D:4D:12:71:C2:37:1A:27:C2:55:AD:CB:FE:6E:CE:7E:EC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bb8966-bb3b-3938-89f4-47a5fb133a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:2b:13:ca:4f:75:7e:55:63:21:28:00:19:ec:1e:fd:6d:
         5f:0e:5b:17:69:7a:62:93:78:e9:80:cf:39:61:3c:0e:d7:23:
         bd:0d:37:68:0d:cc:2d:ed:81:ed:50:18:48:35:be:eb:e5:f4:
         6c:6f:77:be:74:79:ac:7a:98:0b:a8:a3:18:0b:56:99:22:f8:
         a6:99:46:70:ac:bb:63:47:9b:f4:a2:2c:65:bb:78:68:8d:3c:
         11:53:f1:54:61:ef:bd:18:fc:fa:c9:0a:70:f8:04:e1:ba:85:
         f8:0c:e3:e3:a3:6e:7a:58:9f:7d:09:de:d5:9b:4f:f8:77:c8:
         46:94:46:3c:6a:7b:d1:36:43:80:01:69:5e:d4:87:65:48:72:
         cc:cb:29:7e:30:a9:e1:50:80:41:70:61:ff:13:8f:d3:bb:07:
         8c:e1:40:ce:cc:01:4b:12:2a:d5:5d:46:26:87:7d:a9:bb:b8:
         d1:05:56:7b:0e:18:2b:08:3c:56:60:8a:c7:3b:a8:55:2e:f0:
         58:04:ab:00:15:31:51:dd:c7:94:f6:51:6d:3a:3f:26:8e:22:
         a8:55:8a:e1:df:e5:cb:2f:99:6b:3d:10:b0:0b:34:dc:d9:b3:
         a8:d2:0f:6f:ce:0d:3e:17:c9:9f:f0:12:8d:e8:29:29:95:75:
         47:d1:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:06:26 2025 by rpki-client