Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d2bd56-2819-3bad-80b4-7180f83351c8.roa
File:                     34d2bd56-2819-3bad-80b4-7180f83351c8.roa (raw, json)
Hash identifier:          Y62KHCA0rU2U0y/Rsk4nBltteqkJ0r15jsKcdhVrQfE=
Subject key identifier:   DD:3A:CD:AE:1C:AF:66:EE:22:B9:29:CE:33:93:C4:6D:79:0E:D9:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431E3CE7E247B55D486E240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d2bd56-2819-3bad-80b4-7180f83351c8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        24.127.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:e3:ce:7e:24:7b:55:d4:86:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=3e8da94e-fbac-4581-bb06-44a5a6d64d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:17:1d:ef:1f:ff:94:a9:59:96:57:f2:df:
                    98:a2:77:1d:67:74:aa:9a:d0:c1:e2:0d:13:a9:8a:
                    e2:98:4f:4d:30:97:27:60:39:90:c8:5e:4c:a2:f3:
                    ce:fc:d6:e6:a5:fa:94:3e:3d:f2:36:84:1b:5a:c6:
                    ed:d2:6d:9c:b4:ad:f4:e6:94:e3:ae:63:2f:8f:42:
                    80:b7:b8:61:4f:d8:16:46:2d:34:8a:28:11:e6:ae:
                    f3:d0:65:c2:4f:65:25:31:fa:b7:d2:0c:01:70:16:
                    c5:76:69:21:8e:06:df:55:84:53:30:8f:da:c9:b6:
                    c7:53:d6:68:bc:1b:f7:b7:ea:d7:04:58:93:23:bf:
                    08:44:4c:2b:90:2a:26:25:67:60:d6:a7:59:6d:7a:
                    8e:0a:ab:df:c0:28:84:2d:5c:6f:00:44:d9:ee:66:
                    d7:5f:45:e9:de:0a:de:53:67:a6:53:20:a8:89:3a:
                    9c:a6:7c:c9:26:f1:af:eb:36:2d:1c:7c:77:99:cc:
                    d3:2f:8a:b4:4d:ee:9a:68:68:26:97:7e:33:b4:bb:
                    8a:6c:9a:3f:d5:69:fc:7e:53:f7:d9:35:10:9f:04:
                    80:85:84:c5:65:96:fc:47:87:e6:4f:e6:68:a9:16:
                    07:61:b7:fc:99:41:a5:7e:62:bf:50:1e:fd:53:60:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:CD:AE:1C:AF:66:EE:22:B9:29:CE:33:93:C4:6D:79:0E:D9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d2bd56-2819-3bad-80b4-7180f83351c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f3:ec:84:8d:54:00:98:7c:bb:bc:b5:d9:c9:45:02:6f:94:
         fd:a0:7f:db:06:b1:a7:4e:7f:b5:8c:8e:b6:f6:39:13:b3:aa:
         55:dd:77:cf:bb:00:82:6f:0d:66:b7:21:17:e2:90:c7:c1:73:
         41:22:bc:5b:7e:3c:52:5e:35:b4:df:40:9d:6a:ef:71:4c:f0:
         c6:90:d2:bb:0b:7c:33:1e:2f:3c:9d:09:f6:b3:ab:49:6c:e1:
         e6:f6:2f:13:ec:7a:51:65:97:48:a9:ef:9e:e7:5d:ff:a8:dc:
         4c:1f:63:03:09:0c:f5:be:7c:df:77:d4:e5:4d:68:92:c6:e3:
         81:74:ba:52:23:cb:47:81:81:82:2e:d2:c5:10:0a:75:52:dd:
         31:ef:1a:4c:a7:06:13:17:dd:1a:6c:dc:1f:5a:0b:55:c7:11:
         6e:37:98:44:56:2d:19:3c:7c:54:dd:4b:f6:5f:17:f8:25:6f:
         30:63:55:34:c6:29:89:48:cb:91:cd:c3:6e:3e:c5:17:e6:d0:
         d9:34:30:57:b0:04:ef:45:0c:2b:a1:89:78:b6:a4:05:a4:c3:
         89:6c:28:43:f9:5f:3d:d7:19:6c:11:fd:76:67:58:8c:1a:4b:
         f6:d8:e0:da:28:aa:29:3e:78:5b:88:df:8a:7d:b2:9c:44:a6:
         e9:18:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:24:18 2025 by rpki-client