Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409f2e80-1b99-30f7-9b05-9df3563906cd.roa
File:                     409f2e80-1b99-30f7-9b05-9df3563906cd.roa (raw, json)
Hash identifier:          hJNP9IKii2CbuoK8j6Vse5+l5hNIfPVjPCQM7ZM1QVs=
Subject key identifier:   BA:12:92:72:6B:6F:ED:6B:16:2D:FB:EE:78:8B:9B:35:5D:D6:AE:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05E4C9CEE836395BC42E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409f2e80-1b99-30f7-9b05-9df3563906cd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.249.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:e4:c9:ce:e8:36:39:5b:c4:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5466ec59-5a66-4814-b5d9-40278f5ebb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d2:13:8b:cc:64:44:40:f1:93:b6:1a:52:98:
                    20:63:fb:c5:66:69:5a:71:1f:55:79:9f:f5:b2:00:
                    ea:10:2d:b3:41:12:32:3c:88:31:5c:28:4a:e2:34:
                    7f:d4:f7:57:f6:02:cd:d4:c2:6d:b7:32:40:52:ce:
                    45:fb:b2:54:ec:00:c7:20:b1:c8:c8:22:2a:2b:73:
                    5c:0d:ed:6a:71:81:10:bc:1f:69:9e:5e:df:11:6b:
                    28:19:48:c8:dc:e2:c6:f5:99:4a:96:54:65:84:d9:
                    f4:70:06:34:97:6f:39:a1:3f:df:4e:63:f9:9c:2a:
                    9d:d7:1d:21:f8:1d:ff:8b:b4:93:cb:d5:8a:0e:eb:
                    ab:d7:88:94:56:08:f8:c0:e9:c8:80:eb:f3:94:05:
                    20:1b:b8:d3:f9:5b:a7:e2:4d:87:62:22:64:88:5a:
                    a6:8a:0b:d8:2f:8a:4c:3b:f7:f6:e6:43:c3:f5:b3:
                    01:c4:66:a8:68:fa:7a:9a:95:e2:fc:e1:ec:3c:2d:
                    96:72:81:fe:c2:51:36:40:cd:aa:9e:fb:a7:f4:42:
                    19:91:6f:d2:58:34:21:32:6f:7c:a3:4b:9c:54:fd:
                    10:49:1d:5e:75:cf:03:c9:1a:16:cd:07:78:60:ce:
                    83:88:6a:93:fa:d3:35:91:e3:7c:cb:f5:d5:0d:ae:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:92:72:6B:6F:ED:6B:16:2D:FB:EE:78:8B:9B:35:5D:D6:AE:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409f2e80-1b99-30f7-9b05-9df3563906cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:f7:21:ce:ee:90:75:8a:30:2c:f4:bc:07:69:87:87:b1:
         cc:cc:f8:c2:01:ae:a7:d7:48:4a:41:cc:47:6d:6c:be:62:9d:
         15:5e:79:f5:62:7c:78:19:1f:df:d7:30:3e:47:e6:a6:a5:63:
         b6:fc:1c:08:a7:ec:78:19:ac:45:81:56:c0:17:5c:f0:b4:e7:
         52:90:ca:ef:d5:86:60:9a:ba:83:3c:2f:a1:e9:ed:50:32:c4:
         dd:78:b8:4c:a5:d8:a1:5b:28:1c:64:29:b6:a7:4a:98:bf:8b:
         1e:16:c0:45:82:71:19:fa:fc:a3:81:ed:40:f8:7f:9f:13:94:
         27:4e:eb:ce:ee:06:8e:ff:8e:24:58:eb:18:fd:e9:f5:40:2c:
         36:46:29:61:67:c0:95:a0:cf:4f:a0:ec:7d:db:3f:1a:ee:86:
         53:3e:e4:7a:73:af:83:4e:33:58:82:86:8e:6a:1b:6b:4a:a7:
         30:ae:da:92:7f:5b:fd:b6:67:a8:ff:6d:94:3f:2a:8a:b3:20:
         b8:28:f1:0e:df:8f:52:13:db:f8:6c:a7:1c:d9:b5:5a:1c:7e:
         f1:22:8c:1f:a8:9a:76:03:52:1b:5c:dc:1b:7a:af:71:78:be:
         f7:af:19:57:24:14:9d:7c:c8:fb:78:4f:20:7d:f3:e4:7f:1f:
         15:8c:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:08:52 2025 by rpki-client