Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3438b1-0ba7-3619-b88f-9db6946e27b1.roa
File:                     2b3438b1-0ba7-3619-b88f-9db6946e27b1.roa (raw, json)
Hash identifier:          Lxwdlclnl94ase/rcwt6Ntx+iXCZ4Ou2YKfPPOcOGdA=
Subject key identifier:   64:83:28:05:A3:EC:66:9F:B6:C9:C8:2D:D2:02:3F:FE:5C:55:BC:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FF9F6125A0D547C99AB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3438b1-0ba7-3619-b88f-9db6946e27b1.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.147.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:f9:f6:12:5a:0d:54:7c:99:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=05a20904-fbe0-4f74-8d04-12eb6f669194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:42:a7:bc:0e:37:77:d0:62:69:37:b9:de:
                    7c:60:92:71:de:4e:53:38:47:c1:1c:1c:f2:fd:c1:
                    11:aa:26:00:8d:11:33:37:5f:ee:3a:55:fe:2e:e4:
                    e9:9d:ac:c4:ad:e2:b8:72:b5:84:5c:61:93:5d:14:
                    ea:28:48:2e:00:41:a4:1b:d9:bd:e0:de:a1:4e:8f:
                    5a:f0:c4:1c:cd:4b:65:b0:ec:0c:70:cf:8e:29:50:
                    9d:fd:b4:c0:e1:11:b5:f2:96:bf:f8:48:27:da:48:
                    74:da:14:40:3e:39:01:01:87:d9:7c:3d:ba:d2:40:
                    c1:51:18:4a:7f:23:63:25:79:33:23:77:d3:64:b6:
                    ce:17:b1:b0:e3:b4:75:50:21:52:04:25:b0:af:06:
                    56:e8:32:86:03:8a:4c:90:9b:e6:3f:60:af:1b:ab:
                    2a:c6:45:11:55:cb:9e:0a:f8:3b:c5:d0:7e:0f:fc:
                    07:82:96:31:e8:c2:3c:92:d0:3f:4f:b5:ab:d5:2b:
                    e9:52:5a:c2:40:76:19:ce:98:aa:bc:fa:26:af:fc:
                    4f:7a:2d:dd:e7:8d:01:6a:ca:cf:fb:af:dd:7b:66:
                    28:ed:c2:1b:56:d5:d6:e1:96:e9:ba:95:8d:1d:22:
                    2c:9f:c3:16:a4:ef:4e:42:c7:2b:4d:bb:e5:bd:36:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:28:05:A3:EC:66:9F:B6:C9:C8:2D:D2:02:3F:FE:5C:55:BC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3438b1-0ba7-3619-b88f-9db6946e27b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:b8:73:34:6e:65:b1:02:78:b9:55:20:d8:93:8b:7a:33:
         47:8e:a6:ce:bd:4a:a4:13:29:61:ef:be:10:aa:e3:75:64:a9:
         72:df:d9:b4:24:b4:08:b3:ec:97:34:34:a0:19:9f:72:0f:27:
         60:8c:e5:bc:1d:71:e0:38:27:68:ed:1d:0e:59:9c:3d:58:b9:
         3c:7e:67:80:16:2f:e8:86:7a:6a:65:53:0b:a6:a2:02:84:d2:
         81:af:f1:f8:c3:0e:c8:3c:a2:2a:fa:32:ae:2b:e0:49:f1:da:
         0e:3e:aa:a0:06:a3:a5:37:7c:ea:7e:f5:90:16:a6:3d:58:95:
         d6:7c:09:b3:57:57:f3:5c:80:0a:39:39:f8:c2:50:aa:3a:16:
         72:74:21:4f:d9:c4:42:5a:f3:95:e2:2d:55:3a:ae:42:7b:33:
         31:1d:17:d9:b8:dd:01:0f:c3:74:91:ac:65:ba:3b:ef:aa:e5:
         8b:67:5f:00:f5:f4:0b:be:bd:97:ab:31:7b:db:ef:22:b2:c4:
         70:2e:10:72:3e:c5:70:e4:d0:f8:a9:ab:05:6d:13:07:af:71:
         64:61:e2:0b:6e:77:75:fd:1b:bd:f7:47:09:ee:3a:08:a9:5e:
         d7:ff:4c:a6:52:ba:9b:2d:b6:40:fc:f0:11:2d:66:46:c8:59:
         f3:b9:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:49:38 2025 by rpki-client