Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa
File:                     3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa (raw, json)
Hash identifier:          HtsviB0L6pfdPJv9QVOdZ6S+VncNia/x9X4Ob4jEi8Q=
Subject key identifier:   34:99:C7:5A:87:B0:EE:26:E6:1A:A3:17:1C:E8:66:82:B4:6B:43:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06D81002095827D75E06C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        67.170.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:d8:10:02:09:58:27:d7:5e:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8679bb84-9c2d-4a5e-8075-f94b76c329d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:56:f6:67:a6:a7:3d:98:8d:d3:cc:d7:2d:
                    bf:0f:4a:d6:aa:84:bb:dc:cb:d4:a3:ce:96:13:18:
                    83:bf:77:c7:5d:7f:f4:13:11:91:e8:02:f8:81:74:
                    ff:8c:aa:b3:66:16:89:25:82:0c:32:79:89:55:e8:
                    97:66:74:cf:b7:5f:3a:30:55:f5:68:8d:03:94:c8:
                    42:df:93:9c:8b:e7:b6:2d:96:f1:85:a1:c2:fc:2d:
                    29:4d:c8:ce:b8:82:93:94:50:2b:c4:cd:d0:7e:14:
                    e4:bb:1c:f0:8c:a7:eb:b3:27:38:b5:62:27:b9:13:
                    47:eb:f2:5c:04:25:df:1d:9a:8b:70:f5:8e:ff:79:
                    43:65:a8:8f:1a:90:b8:b2:17:62:83:89:f9:bb:fb:
                    7a:55:fd:00:c7:a6:4f:20:12:df:56:c4:25:1f:5e:
                    d6:b9:00:09:46:11:e7:f4:a8:ca:4e:dd:76:12:b3:
                    53:eb:16:92:1b:53:61:4f:5b:8b:04:5a:de:e4:fb:
                    59:5d:a1:32:25:28:0a:00:5c:c2:71:d6:3d:01:89:
                    d9:a6:41:60:06:8e:81:8f:df:f9:e5:fe:9c:c6:11:
                    e4:f3:42:9a:f7:7c:06:51:f5:68:d3:1a:6b:cc:e9:
                    82:62:8f:1c:32:c3:fe:e9:0f:c5:74:cc:4f:34:0c:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:C7:5A:87:B0:EE:26:E6:1A:A3:17:1C:E8:66:82:B4:6B:43:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b84a6bc-7106-32a6-ad27-e133ac63ed59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.170.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:89:6d:fe:8f:73:02:4a:4b:e9:38:00:e9:72:8d:25:d7:
         88:68:b3:64:f4:5e:da:7c:06:47:b3:c3:f9:6e:1d:5f:5a:f8:
         9c:be:8d:74:06:79:35:bb:f7:d8:d3:f6:28:df:b5:63:db:ec:
         2d:4a:ae:22:e3:c0:b5:a9:fb:74:a4:b4:3f:b8:be:c9:79:83:
         87:af:50:ef:35:c1:95:0d:aa:a3:df:b3:b5:b9:69:1f:db:22:
         92:8c:bf:6e:2b:0b:21:43:fa:ab:e7:82:39:eb:56:80:45:54:
         c2:51:00:4d:0f:15:0a:2a:e6:8b:6a:5f:10:f9:3f:bb:6a:0c:
         37:f4:95:49:f1:77:66:77:51:4e:c0:63:4b:cf:62:ae:91:24:
         77:87:e7:69:35:4d:fe:c9:2c:8e:f0:3e:39:5b:d7:86:a4:8a:
         55:34:e2:29:d4:e1:98:a5:6b:21:4a:dd:40:5b:84:5c:e9:44:
         99:7f:71:4f:96:88:eb:84:e6:cb:90:b3:4c:cb:6e:23:3e:bf:
         04:df:f5:3c:90:5a:79:e6:27:44:9c:a1:86:a9:f8:71:6a:e5:
         76:13:f2:8e:d0:ca:4d:65:9d:4f:af:72:f3:ed:c1:f6:ad:6f:
         5d:5b:b5:f6:12:48:47:02:a8:c3:c9:e7:28:ea:f9:15:4f:34:
         9c:f3:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:25:40 2025 by rpki-client