Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e5929d2-a62b-37da-ac36-a9b7c27f8678.roa
File:                     2e5929d2-a62b-37da-ac36-a9b7c27f8678.roa (raw, json)
Hash identifier:          0fzkVy1lrsf7SZKkJzi17Yn4vxWBrCiANnPujxx6wr8=
Subject key identifier:   78:5E:F6:B7:C4:0E:68:44:04:B2:6E:53:69:4A:74:F8:0F:2D:45:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF5BB00F599A42578BB280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e5929d2-a62b-37da-ac36-a9b7c27f8678.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        71.239.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:5b:b0:0f:59:9a:42:57:8b:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=88a4b5b9-5129-42bc-8062-cac0a6bda780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:f9:47:8d:0e:bf:89:3e:4e:0d:5e:89:1c:
                    2b:38:6a:45:e9:01:20:48:47:c4:2c:14:46:37:e4:
                    46:cb:cb:fb:96:ee:d2:3c:89:8c:cb:4b:50:fd:28:
                    06:0d:ac:ce:9b:5f:08:cf:e7:e2:79:eb:c7:85:91:
                    7f:84:ac:c0:73:eb:2c:50:c8:39:50:48:cd:81:2b:
                    00:92:0a:71:ac:f9:92:e0:a5:92:20:db:b1:b7:45:
                    12:aa:e6:77:d4:7b:b7:43:8b:a7:8b:cc:e3:5c:a5:
                    1b:24:23:bd:2b:cd:49:9c:2d:32:19:45:43:0c:24:
                    42:e2:e7:df:60:ba:6e:a6:00:e7:44:4b:8c:18:68:
                    8f:e5:ad:a1:3c:af:2f:70:26:20:85:99:57:95:26:
                    39:2b:fc:7c:2c:71:a4:7e:03:57:ea:09:49:04:5e:
                    06:4b:32:da:b7:a0:c4:97:e8:f2:7c:b7:66:b1:e7:
                    ec:b3:90:c1:68:32:88:df:18:c4:9c:37:d8:4f:2e:
                    84:f9:66:6c:b2:64:48:4e:e0:b4:42:0a:5b:42:dc:
                    09:d2:45:cf:12:0e:54:03:47:fa:07:48:40:66:f9:
                    c9:2b:91:d0:2c:a0:59:20:f7:8a:d7:7a:69:d5:b1:
                    e5:0f:d7:3e:44:af:7c:3a:cb:68:9f:7d:97:e8:8c:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:F6:B7:C4:0E:68:44:04:B2:6E:53:69:4A:74:F8:0F:2D:45:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e5929d2-a62b-37da-ac36-a9b7c27f8678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.239.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:44:9d:60:7c:ca:64:51:a8:13:13:ac:90:b2:54:7e:21:
         70:94:ca:38:50:f1:af:1a:b9:0a:2b:18:fd:bf:c6:8f:b6:a4:
         32:4f:85:23:b6:ca:15:41:59:df:1a:d0:cf:e9:15:58:a0:50:
         a3:9c:eb:b0:ba:1b:93:a7:75:c8:9e:1c:2c:a6:55:54:c7:52:
         4d:42:c2:80:16:f8:28:9a:71:af:43:70:d9:ba:f5:db:74:ea:
         3e:8c:d2:6c:52:57:e6:97:ad:61:5e:a6:d9:ac:c8:78:ba:76:
         f0:eb:68:69:29:f5:52:29:fa:a8:71:1c:0f:94:bd:c7:6f:79:
         48:b1:50:82:3e:f7:79:8f:c5:84:3f:bb:1f:3f:6e:fe:85:7a:
         87:b0:43:71:ee:4d:c2:15:dc:4b:2e:37:3d:1c:40:ec:cf:2b:
         61:2d:21:2f:a5:72:01:21:cb:99:97:44:d6:fe:db:56:3c:fd:
         c7:aa:b2:b4:9d:67:3c:7f:11:bd:36:11:79:8c:5a:d6:39:ff:
         da:f0:cb:af:ce:33:f8:d8:fb:83:39:03:4b:e7:44:64:ef:d6:
         74:c4:f5:48:6f:e6:6f:2f:7a:68:c9:47:02:5c:80:48:25:22:
         ca:0f:05:67:68:42:6c:4e:4e:11:bc:b3:58:75:6e:79:1c:7d:
         52:ca:ac:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr1uwD1maQleLsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODhhNGI1YjktNTEyOS00MmJjLTgwNjItY2FjMGE2YmRhNzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2v5R40Ov4k+Tg1eiRwrOGpF6QEgSEfELBRG
N+RGy8v7lu7SPImMy0tQ/SgGDazOm18Iz+fieevHhZF/hKzAc+ssUMg5UEjNgSsA
kgpxrPmS4KWSINuxt0USquZ31Hu3Q4uni8zjXKUbJCO9K81JnC0yGUVDDCRC4uff
YLpupgDnREuMGGiP5a2hPK8vcCYghZlXlSY5K/x8LHGkfgNX6glJBF4GSzLat6DE
l+jyfLdmsefss5DBaDKI3xjEnDfYTy6E+WZssmRITuC0QgpbQtwJ0kXPEg5UA0f6
B0hAZvnJK5HQLKBZIPeK13pp1bHlD9c+RK98Oston32X6IyP3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHhe9rfEDmhEBLJuU2lKdPgPLUVBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU1OTI5ZDItYTYyYi0z
N2RhLWFjMzYtYTliN2MyN2Y4Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR++AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPDRJ1gfMpkUagTE6yQslR+IXCUyjhQ8a8auQorGP2/xo+2pDJPhSO2
yhVBWd8a0M/pFVigUKOc67C6G5OndcieHCymVVTHUk1CwoAW+Ciaca9DcNm69dt0
6j6M0mxSV+aXrWFeptmsyHi6dvDraGkp9VIp+qhxHA+UvcdveUixUII+93mPxYQ/
ux8/bv6FeoewQ3HuTcIV3EsuNz0cQOzPK2EtIS+lcgEhy5mXRNb+21Y8/ceqsrSd
Zzx/Eb02EXmMWtY5/9rwy6/OM/jY+4M5A0vnRGTv1nTE9Uhv5m8vemjJRwJcgEgl
IsoPBWdoQmxOThG8s1h1bnkcfVLKrF8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:05:20 2025 by rpki-client