Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2992228c-4c3b-3469-87cf-70fc8df24817.roa
File:                     2992228c-4c3b-3469-87cf-70fc8df24817.roa (raw, json)
Hash identifier:          DyZCcWBoyrd+44/79a3wzsVrI/1E/i1ZvB3jXfJ78Go=
Subject key identifier:   F6:00:A6:C4:9A:C9:8F:57:AF:48:FC:D1:10:48:57:29:93:AA:0C:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0884FA09F351798813DA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2992228c-4c3b-3469-87cf-70fc8df24817.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        67.188.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:84:fa:09:f3:51:79:88:13:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2ba9e68c-3466-4a36-b8ba-1dae2e7c476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:5a:48:6e:59:df:c1:d3:a7:2d:b8:d6:22:
                    62:dc:4d:01:08:e6:66:27:d1:9b:74:fa:a7:b8:e6:
                    af:f5:4c:c9:24:a1:38:75:c9:21:98:97:ff:fd:d9:
                    14:d8:94:c1:26:bd:62:6c:46:cd:cf:af:9a:7e:08:
                    23:5d:30:cd:d0:db:a6:ed:2c:d8:51:53:8c:1a:3c:
                    dc:30:fb:14:dd:c3:75:d6:85:91:93:e4:d5:ff:92:
                    52:1b:68:2c:bf:cf:06:c1:65:8e:ec:32:ac:a0:39:
                    c1:63:a6:7a:81:c6:e2:98:39:48:f2:67:3c:65:93:
                    86:d9:54:a8:e0:aa:7c:98:10:89:3d:de:c6:84:ae:
                    fd:fb:ab:46:26:fc:b0:67:89:f3:75:87:c8:42:6d:
                    db:0b:a4:c9:8c:5d:81:af:c7:97:34:c3:8d:48:59:
                    7f:17:b9:15:23:dc:15:31:b1:f2:be:97:df:81:fb:
                    dc:e9:2a:21:dc:9f:2e:84:d7:4d:d3:11:b7:76:a5:
                    9d:b2:8f:94:f7:5c:bd:de:7d:f6:19:e1:62:7f:62:
                    cf:06:25:cf:5c:0f:d7:14:a4:4a:63:7b:de:45:d1:
                    80:d9:47:18:8f:5b:bc:1f:a1:0e:f5:b6:c1:5d:5e:
                    e0:eb:f5:47:05:8b:08:8d:6b:ee:b0:ab:e5:9b:49:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:00:A6:C4:9A:C9:8F:57:AF:48:FC:D1:10:48:57:29:93:AA:0C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2992228c-4c3b-3469-87cf-70fc8df24817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:08:40:0a:4c:a7:c5:b4:88:16:1a:e9:83:a3:dd:8b:1d:3b:
         02:d3:46:89:4e:7b:e7:8e:db:7a:a6:de:2a:c8:22:e2:f6:4d:
         5f:7b:c6:5d:1c:c1:02:c4:01:b9:69:22:e8:e4:c0:92:df:cb:
         e0:cd:f8:d4:ef:d3:fa:9a:30:1e:24:f4:f2:e8:32:fa:83:47:
         95:0f:c9:19:59:9a:d4:69:59:13:eb:00:10:91:0e:8a:63:54:
         81:8d:5e:be:63:e8:8b:26:07:32:d0:d6:0d:1d:4c:58:ec:73:
         82:2f:f4:05:be:cc:37:e9:a1:1f:ec:9c:89:c4:c0:5c:18:2b:
         f8:67:54:af:5d:d1:e3:1e:60:62:43:51:0b:6a:ce:33:42:18:
         07:82:a7:e2:79:30:ff:5d:b9:5e:23:12:d4:bb:63:ff:7c:b6:
         ac:4c:4b:a7:64:dc:c7:fb:4d:a6:cb:84:6b:0a:28:e2:f5:00:
         39:b0:fa:36:23:ed:4a:49:68:da:d9:34:5a:51:a7:62:a9:ff:
         82:e3:e8:48:3a:08:6c:dc:50:d0:df:69:1c:07:62:fb:24:ec:
         22:33:ff:2d:9c:84:11:e0:4e:92:30:71:bd:55:85:ce:b6:b5:
         29:95:4f:c8:1a:eb:d2:37:12:98:61:d0:5c:9a:95:87:79:f6:
         c8:54:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:45:32 2025 by rpki-client