Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8a36cb-7570-34e5-a88f-3ac54b671361.roa
File:                     2c8a36cb-7570-34e5-a88f-3ac54b671361.roa (raw, json)
Hash identifier:          /munadkh2rtKsqIpI9QYYPzkMe7YT19Hp7N8+rZYJIQ=
Subject key identifier:   3E:21:9C:3F:13:AC:8F:A1:C3:80:8B:7F:A3:96:2F:A4:C0:D2:08:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CA8F3EFF09C80374300C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8a36cb-7570-34e5-a88f-3ac54b671361.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        69.241.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:a8:f3:ef:f0:9c:80:37:43:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=69bcc73c-c0db-4f1c-a9e7-4820b0031eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:4d:8a:09:38:98:51:56:63:08:e6:8c:2b:
                    04:6f:e4:38:6b:d5:a0:62:5e:c8:e3:82:11:4f:01:
                    35:07:30:18:5f:73:eb:a2:1c:09:ea:e0:ec:e5:0c:
                    11:d9:dd:9e:41:ae:17:cb:c0:d1:93:f6:60:39:3b:
                    cb:db:2e:bf:71:20:b4:50:5a:c6:39:93:5c:e6:72:
                    90:f6:fa:3a:31:c3:f2:56:d3:74:e4:6b:f3:4e:c9:
                    56:4d:3c:9e:d9:2b:35:79:d2:5e:f6:ad:3e:64:e1:
                    ce:52:00:b0:b6:24:8b:ae:79:49:c5:f2:0c:f1:e1:
                    c5:6a:20:14:1c:24:f5:73:a0:c0:ec:37:70:85:99:
                    90:b7:72:ce:e2:a3:e6:6a:13:87:e5:e7:11:64:37:
                    eb:69:f6:52:c8:6f:fe:33:88:33:7b:43:c1:11:a3:
                    16:f4:0d:81:3f:e0:96:88:0f:3a:36:f5:ce:8b:17:
                    ef:4a:89:2b:fe:02:a6:b5:93:ee:1f:4d:5b:b2:a6:
                    12:77:bb:9a:34:66:3c:23:b5:68:d4:40:65:e1:90:
                    9c:09:ef:bd:eb:38:09:bb:a3:6b:77:e2:f9:a4:6b:
                    7b:5c:32:d2:c3:be:c9:f6:a4:18:50:10:e3:a5:da:
                    c9:ab:2a:5c:86:fa:62:46:63:9d:79:3d:02:fe:41:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:21:9C:3F:13:AC:8F:A1:C3:80:8B:7F:A3:96:2F:A4:C0:D2:08:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c8a36cb-7570-34e5-a88f-3ac54b671361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:78:7f:51:7a:b2:64:e9:2f:bf:d0:89:2a:6b:27:5b:0c:
         37:74:3d:aa:54:26:a5:e7:6d:aa:05:a0:66:70:a7:53:ab:2b:
         d7:cb:f3:2f:2c:d7:c8:2a:33:00:99:36:42:b0:ad:8f:2f:4d:
         c0:2b:d7:20:13:27:5a:f2:cc:94:d5:39:f4:71:24:d7:a3:7d:
         c3:6a:03:07:7c:42:a4:8b:21:1f:10:00:38:14:8e:2b:e7:11:
         5d:93:a4:3a:8e:27:49:82:1c:ad:ac:ea:1e:ba:d0:b3:be:77:
         ba:21:87:cb:03:fd:bd:27:cb:87:f9:6a:8d:6e:ef:66:9b:9a:
         9f:00:62:67:a2:1d:a5:b3:eb:d6:82:fd:5f:1a:3b:1c:39:34:
         f7:ce:cb:14:fc:63:c7:92:46:c8:42:2a:0c:fa:91:ed:3c:7a:
         11:2a:be:52:6f:9e:4d:5d:9c:08:49:cd:11:37:80:4f:47:3f:
         ac:34:3f:8e:fa:b6:6d:40:f3:fa:22:51:73:82:4c:ea:f2:e2:
         df:30:5d:61:ac:f0:0c:4d:28:9d:47:2b:ef:61:6f:45:69:2b:
         6d:0c:c8:ba:2a:a1:b2:a3:34:05:5e:8d:69:8f:9d:93:51:bb:
         56:b3:a3:29:9a:9f:a2:71:72:bb:1a:16:8a:e3:59:d6:44:10:
         9a:2b:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:03:07 2025 by rpki-client