Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b0eec9-8ced-30d8-ada2-25bf9864b6c8.roa
File:                     48b0eec9-8ced-30d8-ada2-25bf9864b6c8.roa (raw, json)
Hash identifier:          CPgfWf2SpoDMmGHAXMhU/L1EOFqT2gIfC71f49D/6Ns=
Subject key identifier:   80:E9:55:17:9C:62:1F:EC:D7:34:88:0C:A5:94:66:ED:3D:6E:84:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0612CEC77CBBB84AA34B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b0eec9-8ced-30d8-ada2-25bf9864b6c8.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        24.13.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:12:ce:c7:7c:bb:b8:4a:a3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8c107226-80a5-4551-8ea2-bc84384afd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:ed:2f:e4:94:6c:c1:22:21:3e:fb:67:e6:
                    e5:b9:78:a7:28:ac:ec:91:1c:60:a9:f3:80:81:66:
                    8c:46:0e:2e:c3:41:f1:da:5c:a6:2a:40:fa:f1:68:
                    b0:cc:7f:4f:97:90:53:bb:fc:34:3e:73:c5:fc:5d:
                    3a:65:d6:2d:04:f7:ec:55:86:cd:5b:b3:a4:79:c2:
                    8e:8f:d9:9c:c3:fd:bd:0e:87:31:23:89:67:ed:11:
                    12:fa:cb:c1:2e:71:e1:70:89:29:32:73:23:e8:95:
                    68:de:ce:95:81:d1:6c:52:84:0e:b0:a1:ea:55:7b:
                    8a:d6:d6:98:51:ee:3b:a5:fd:c3:6b:79:ab:bb:c3:
                    00:7c:fd:d8:3c:f0:ba:78:90:2f:b2:68:95:8f:90:
                    8c:e9:42:77:0a:27:43:2e:58:bc:43:e6:cf:27:49:
                    66:5b:6b:bd:12:7f:59:50:c2:da:a7:de:87:bd:8f:
                    92:60:0f:0f:ca:14:37:b2:0a:45:9d:83:bb:9b:ca:
                    02:36:6b:33:95:b3:af:08:d6:70:78:64:80:3e:13:
                    9c:db:a4:71:da:7c:54:eb:0d:7d:3f:95:a5:07:74:
                    63:03:d6:66:01:a6:ad:92:23:6c:40:c7:e2:e5:de:
                    d4:fd:27:f8:9a:ea:0a:1b:c8:7d:69:c5:32:ce:a3:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:55:17:9C:62:1F:EC:D7:34:88:0C:A5:94:66:ED:3D:6E:84:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b0eec9-8ced-30d8-ada2-25bf9864b6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.13.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:38:6f:e1:25:24:71:b9:41:62:b6:34:e1:b4:4e:7a:99:59:
         bc:57:ea:26:ed:b2:c8:0f:38:7d:00:d5:95:fc:4d:ff:26:e0:
         37:1a:0d:f6:94:f3:b1:5c:f8:0e:2c:ec:5f:b7:69:ac:fe:cf:
         f9:e1:5c:99:ea:b4:a4:18:96:fe:f4:af:09:e7:1c:8f:1e:e9:
         a3:b9:ee:e9:f0:89:11:c5:cf:10:7d:92:dc:09:15:1c:23:ce:
         cf:2d:e8:74:b3:22:b5:1a:15:f2:ab:de:77:57:a0:f5:5e:25:
         93:b5:f9:77:2a:18:9f:5f:be:ce:68:a3:5f:a7:ee:48:cd:01:
         c2:ac:32:a7:43:43:a6:39:15:50:93:d9:9c:4a:a1:42:78:bf:
         01:49:f6:cd:b6:5e:62:27:18:17:98:4e:43:69:01:9a:b9:20:
         4e:91:ee:62:33:4a:71:36:65:c2:d7:ce:a9:02:7e:c1:c2:c9:
         cd:0f:2b:f1:f4:ac:1e:45:5b:d9:4a:d6:30:61:82:67:49:fe:
         ab:9c:05:b7:45:13:48:b2:25:ff:98:a0:1e:c8:e9:35:92:a1:
         55:f6:71:1d:9d:ea:5e:99:e9:6e:91:7f:03:b1:2d:a6:33:d3:
         98:35:39:3c:98:2f:0c:cf:3e:36:d0:28:28:4a:75:85:50:6d:
         ff:1c:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:07:15 2025 by rpki-client