Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/362fe793-313a-3343-8486-6fbb7c11aa97.roa
File:                     362fe793-313a-3343-8486-6fbb7c11aa97.roa (raw, json)
Hash identifier:          NNrimHUMfU+OOtR5dHeBwczENPGzipaKPVmH8KBAbU8=
Subject key identifier:   A3:41:D7:A0:69:BB:48:2B:BD:71:67:70:50:07:50:F4:BE:A0:D9:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06103F6186B093C47E8300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/362fe793-313a-3343-8486-6fbb7c11aa97.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        24.12.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:10:3f:61:86:b0:93:c4:7e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1ffce2fd-207d-4bf3-be9d-8dd72d4882d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:a2:1a:b3:17:fe:bd:04:36:3e:2d:af:52:
                    54:bc:34:74:ca:ec:37:a8:10:39:b4:fb:26:b9:03:
                    62:24:54:c5:03:5b:60:98:37:71:35:76:39:e9:77:
                    d9:ad:1d:d0:80:99:69:27:87:f6:26:70:97:5e:f2:
                    da:43:a8:50:d5:d8:99:a6:58:2a:42:e1:88:e1:7d:
                    23:d8:66:0a:37:88:a7:fc:69:82:94:e2:58:a0:a9:
                    36:1a:c2:4f:1c:dc:84:60:17:56:95:2c:41:7a:ec:
                    9a:2a:6f:8f:61:40:a8:a9:33:1f:f3:58:ae:96:62:
                    d2:c3:a0:22:41:d5:93:0c:73:9d:dc:9a:50:d8:28:
                    60:5d:37:c5:e8:e1:61:18:9d:20:8a:e7:82:6d:0b:
                    00:a0:01:63:ad:7b:30:c9:9b:1b:85:9a:3c:84:7a:
                    e6:c1:9e:0e:fe:ed:d6:9a:4f:8f:cd:62:5b:73:78:
                    09:2a:db:bd:ff:54:04:42:d2:f7:3a:f7:55:99:d7:
                    7d:c0:0f:0d:bc:85:0a:6e:84:f1:84:18:ca:36:a1:
                    be:e1:89:05:ad:e4:22:c9:04:80:bd:6c:6b:77:37:
                    16:17:c2:7d:1d:0c:48:49:b6:fd:1d:04:a3:28:2b:
                    0c:6a:cb:b1:3f:71:65:be:83:e3:54:1d:bf:6a:ae:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:D7:A0:69:BB:48:2B:BD:71:67:70:50:07:50:F4:BE:A0:D9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/362fe793-313a-3343-8486-6fbb7c11aa97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:87:cd:2e:bf:9f:f6:86:d7:a6:64:89:0f:85:bc:97:52:
         42:b5:df:8f:41:5b:6c:d0:3d:c2:f2:07:26:a9:90:ea:40:d3:
         a5:f9:c8:aa:48:8a:fa:49:f3:6c:2f:55:07:cf:b2:18:61:3f:
         cf:dd:6a:0e:29:c4:4f:21:68:39:df:be:8b:97:9d:8a:3b:b3:
         79:d5:56:35:d9:ac:35:0f:a9:25:10:d1:3e:19:93:0b:32:52:
         c8:3b:7c:dd:57:5f:76:96:87:2b:f2:6b:52:87:1a:26:b9:2d:
         12:11:24:94:8f:53:44:dc:ee:e6:d3:9e:ed:0b:dd:98:f9:b5:
         32:4e:56:3b:5d:ce:88:e8:35:9a:d3:ce:ff:da:2b:b1:f5:43:
         e0:1b:3c:06:d7:62:87:d5:f6:41:b7:98:86:d3:a2:9d:67:b0:
         44:80:d0:45:a4:03:43:04:e8:2d:ec:d2:21:95:f1:4e:bc:4f:
         4e:df:6b:9d:90:70:be:79:55:a8:86:7c:54:4b:7e:9c:a8:fa:
         ab:6e:8c:94:96:b6:ba:5b:db:34:d5:5e:2a:e1:e8:b7:94:fc:
         e9:2f:4b:44:73:55:8f:08:88:e3:d3:68:ac:a5:18:77:81:0c:
         a5:ae:5b:0d:b2:29:f4:7b:13:4a:e0:5c:e4:90:7a:78:bb:fc:
         48:d4:af:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:00:20 2025 by rpki-client