Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f2c9ae1-d2d2-352f-9e1a-6f05cccb98ff.roa
File:                     2f2c9ae1-d2d2-352f-9e1a-6f05cccb98ff.roa (raw, json)
Hash identifier:          k4CE0SpO+7C97Zu+vTmHtIowlfMtY9BxZYn3ngH3EEo=
Subject key identifier:   F0:59:65:68:EC:78:BC:39:77:3F:1E:38:A4:BC:DC:39:58:44:C5:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A00DAD31535B93024B24B9160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f2c9ae1-d2d2-352f-9e1a-6f05cccb98ff.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     33656
IP address blocks:        96.91.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:d3:15:35:b9:30:24:b2:4b:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=44ad5029-bf5c-4495-93d2-38003795b2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:89:41:bf:97:71:30:2c:09:2d:69:5d:2e:
                    2c:a8:0c:ab:d4:4c:9b:b8:75:f2:6b:f3:66:11:4c:
                    ed:e3:db:99:0f:3a:a3:53:1d:20:f0:a7:19:47:a7:
                    d0:70:e1:42:90:16:98:0e:2d:ee:8e:14:36:64:43:
                    f5:3e:d4:dd:18:d1:80:1c:53:c0:4f:9b:e5:72:ef:
                    ed:df:29:4a:34:63:7d:09:72:80:b2:9f:46:34:db:
                    d0:08:09:49:44:a8:7c:17:79:4a:3d:0e:7d:18:26:
                    82:4c:1d:e2:54:e4:2e:77:c6:49:d1:3a:ad:8f:3f:
                    c3:dc:07:bd:1f:d5:68:94:07:ce:2b:a8:6a:5d:59:
                    e6:6a:cd:32:74:79:3b:b1:36:90:d0:6d:10:1f:8b:
                    0e:15:a3:7e:95:dc:c7:6f:be:a4:11:08:22:13:2d:
                    a8:37:61:a4:b4:80:d8:af:c5:f5:eb:3e:af:d3:b9:
                    f6:d5:7e:c3:15:d7:0e:0f:16:28:5b:55:6e:52:11:
                    bc:84:70:91:1c:3e:03:95:26:be:03:9b:91:fb:9f:
                    ab:27:18:87:c5:c8:f7:2f:67:90:9c:fc:fe:db:aa:
                    90:c1:eb:1a:98:fa:c0:01:58:1a:9a:50:f6:77:f8:
                    53:71:fb:e6:84:6e:fe:3c:73:d1:e0:3f:b0:23:6f:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:65:68:EC:78:BC:39:77:3F:1E:38:A4:BC:DC:39:58:44:C5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f2c9ae1-d2d2-352f-9e1a-6f05cccb98ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.91.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:66:45:09:04:5c:a8:4a:aa:f0:de:6a:97:dd:0f:49:f3:f0:
         ce:de:88:3e:67:f2:04:6e:5d:69:3e:d1:76:77:d7:78:82:13:
         fe:64:3b:25:2e:8b:b3:12:8f:31:77:da:6f:43:3a:51:04:4a:
         0f:a3:5e:7e:d7:4a:34:2d:15:cd:99:cc:ee:2f:46:a6:97:68:
         cf:25:d5:32:56:f2:15:c7:4d:92:b1:49:cd:c9:db:af:01:87:
         1f:dd:2c:e4:c6:b6:d7:ed:b3:89:11:cf:81:cd:7f:52:fa:99:
         38:c4:2f:1b:78:8d:18:aa:3b:67:25:e8:e5:da:0b:e3:0c:52:
         41:b1:2a:e9:70:f6:dc:88:b4:3f:28:0e:3e:ff:c0:c1:21:f8:
         be:79:36:ee:30:ec:2a:5e:18:b0:43:eb:34:6e:1d:a5:42:2f:
         b3:cc:2d:d3:18:1f:d6:00:ee:63:ea:3d:78:cb:20:62:b1:d6:
         bb:c9:0d:dd:1e:08:0b:93:dd:27:96:4b:9d:5a:81:cf:9f:9a:
         a3:b1:2c:ee:ba:a0:3b:94:4e:b6:49:ce:bb:99:dc:f6:e6:b7:
         24:a7:b6:6a:9e:dd:47:55:cb:f3:3f:d7:ae:04:1d:97:00:bf:
         c0:97:03:16:25:aa:62:ae:2b:b8:81:bb:21:78:c9:32:71:fb:
         52:af:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:57:59 2025 by rpki-client