Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458fdf8c-2c0b-36aa-b912-623d0e246338.roa
File:                     458fdf8c-2c0b-36aa-b912-623d0e246338.roa (raw, json)
Hash identifier:          QHimDQef+ms7N4Mf0TjimCun2pTLSlJbC6r3n5YL+Ac=
Subject key identifier:   18:27:59:84:16:81:E2:7D:76:94:40:9C:56:98:A8:1A:0E:6A:2C:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF752DAA58B8AA8C49D89880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458fdf8c-2c0b-36aa-b912-623d0e246338.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        24.99.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:2d:aa:58:b8:aa:8c:49:d8:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=eeeb81a1-fcc2-463b-868e-53406205d86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:23:bd:4a:61:36:68:ac:54:f2:d3:0c:d8:
                    c3:db:2f:e4:6f:76:b4:63:dc:41:ae:7c:8f:bb:1d:
                    3e:d1:b2:b9:9b:9b:84:b4:c9:1d:a1:e8:39:47:55:
                    fc:83:78:7d:87:a1:cd:39:7b:2c:bb:f8:9f:e9:44:
                    22:92:dc:32:e4:5e:0e:93:4a:55:28:5a:01:a3:93:
                    37:3a:71:9c:ae:77:be:83:21:88:bf:84:65:c0:91:
                    e2:5d:fa:01:e7:2a:a4:63:35:9a:24:3d:f2:5d:b1:
                    85:ff:fd:c9:8e:60:79:bf:1a:02:8f:91:5a:49:0a:
                    97:b8:36:5a:a4:76:e1:62:e7:6d:9f:8b:bc:b0:51:
                    24:33:23:52:a7:b1:ab:e1:19:a6:bf:0e:d0:63:2b:
                    e9:95:15:18:c4:18:ff:07:3e:2e:64:57:f3:6a:70:
                    8c:bd:5b:8d:1e:9e:1d:12:b3:33:2e:b9:c9:94:6f:
                    a1:58:e3:a5:b5:a9:52:ec:a5:c6:4a:04:e8:c0:2e:
                    65:df:fb:ac:97:b2:bc:ae:72:4c:08:9c:c9:84:52:
                    96:e6:88:fc:e2:ed:2d:ad:1e:e6:2c:70:cc:76:75:
                    4d:16:7a:36:3e:27:6b:ba:cf:5c:10:86:8b:6b:6c:
                    46:e3:cb:7b:e0:84:26:ca:b1:27:dc:4d:75:39:bd:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:59:84:16:81:E2:7D:76:94:40:9C:56:98:A8:1A:0E:6A:2C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458fdf8c-2c0b-36aa-b912-623d0e246338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:27:f8:bf:a2:6d:81:3f:96:d0:84:40:7c:5b:d0:9c:fd:89:
         42:e0:20:a2:53:58:bc:2c:d1:a2:d2:f6:2b:76:98:55:c3:19:
         35:ce:45:4f:06:87:41:e5:20:13:6a:e6:22:af:75:5d:1e:32:
         6f:c8:8b:21:4b:34:3a:ea:57:36:87:cd:6d:74:3b:71:61:30:
         f0:ab:78:75:5e:86:2c:a9:f4:32:80:b1:4c:6b:ad:05:8e:7c:
         d4:66:38:1d:eb:b4:49:f0:2c:ed:e3:7c:50:cc:36:92:3e:04:
         b8:79:a0:ab:ec:da:1e:81:e3:6f:30:8e:e7:75:ca:c0:03:89:
         58:16:ae:d7:cc:13:11:1e:50:ff:a7:66:39:c9:b6:92:86:68:
         21:e0:cf:d1:5f:23:15:84:05:0a:96:78:bc:83:22:05:8a:d4:
         a0:c4:be:01:74:68:13:49:b3:ec:14:12:4d:0f:1f:0f:f0:11:
         29:3d:b8:f5:1f:cb:21:0b:fb:0e:40:7d:53:03:38:95:69:f2:
         39:b7:be:1c:85:55:a2:b4:b5:8f:f3:e4:3d:c6:6a:f7:e4:19:
         21:7d:c4:05:d8:9a:97:a8:46:aa:fa:09:e8:cc:fe:8f:8b:e5:
         3a:e6:4b:85:4c:ef:ef:40:cb:92:62:31:c7:22:39:82:15:2a:
         95:c1:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:59:40 2025 by rpki-client