Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dbf5581-f9c3-3a5d-adc7-a56fc91629ca.roa
File:                     4dbf5581-f9c3-3a5d-adc7-a56fc91629ca.roa (raw, json)
Hash identifier:          T4P+0IYkXyxAl1HxuXpFykcKd4+yoqWgV+/UU1IKUFQ=
Subject key identifier:   4E:0A:58:74:A2:AF:81:53:F2:A1:79:A4:94:F4:0C:69:E7:66:90:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07B9990EB06B76551D4A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dbf5581-f9c3-3a5d-adc7-a56fc91629ca.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        24.14.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:b9:99:0e:b0:6b:76:55:1d:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=21af8c45-605e-41f0-90da-e876f2e0ef36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:f8:d4:29:5f:1f:60:97:fc:8e:fa:97:8f:
                    ba:3b:af:a4:fd:2f:2e:9d:87:af:5d:2e:37:ac:e9:
                    a8:fe:b4:87:ce:86:cd:96:27:4e:b1:eb:ba:f8:c7:
                    73:94:ba:62:2e:db:1a:a5:5f:0a:3d:52:8d:08:83:
                    2f:20:29:bb:49:32:02:79:00:36:b3:fe:0c:ec:4f:
                    10:23:4c:dd:a6:cb:b8:bb:3e:1b:2e:ae:4d:d4:8f:
                    01:2d:14:a9:f0:b3:fe:1d:cf:79:a8:5a:42:23:eb:
                    09:87:fa:a8:85:04:4a:21:b8:90:f0:9e:7e:a0:0b:
                    09:34:aa:d9:71:60:5e:eb:dd:22:6a:02:40:e7:af:
                    dc:32:eb:2c:0b:1d:83:2e:6b:24:c5:06:0c:0b:25:
                    71:e7:c3:c7:a5:09:5f:75:7f:19:40:da:32:25:4d:
                    11:b7:dc:7b:58:a9:e4:3e:a6:2f:79:2d:a9:14:01:
                    b1:1a:22:c2:a2:a1:29:46:19:51:0e:8f:ac:b4:a4:
                    3e:77:07:66:1f:2f:02:5e:63:e2:c5:62:1a:eb:bf:
                    e8:2a:d2:4d:5e:c8:f8:ee:88:37:a1:04:5c:0e:5f:
                    26:45:1b:44:c4:bf:ec:ef:7b:24:0b:eb:a5:9e:bc:
                    e9:57:67:87:49:dd:a4:10:7f:78:aa:5b:8d:07:fa:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0A:58:74:A2:AF:81:53:F2:A1:79:A4:94:F4:0C:69:E7:66:90:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dbf5581-f9c3-3a5d-adc7-a56fc91629ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:2b:28:1c:32:1b:dd:4a:26:5b:a6:a3:59:23:1f:4b:26:
         77:2a:d5:d5:58:3b:35:32:6d:7f:e9:6c:44:4c:ab:91:dd:c7:
         c3:9d:1a:31:dc:50:10:4a:c6:71:14:0e:bc:b4:cb:32:79:de:
         31:ba:81:b7:75:bf:ec:16:05:2f:4f:ee:1d:d6:94:17:6b:56:
         86:98:3c:b5:e2:39:cd:5d:85:d6:06:30:7e:bc:61:6e:f7:40:
         af:84:05:1f:f4:63:13:5b:fd:7a:ea:aa:ba:d8:92:d3:16:b5:
         2e:b9:22:82:78:13:7b:d6:bb:44:38:23:30:29:f1:8b:de:ee:
         da:44:ea:12:e3:39:36:36:40:5e:6d:eb:1c:7b:41:04:e6:af:
         57:dc:73:61:a0:e8:fc:e5:de:40:39:d1:6f:19:95:fc:cd:d5:
         09:f6:64:8b:64:ae:59:fd:51:34:f5:38:1e:f1:d3:f7:55:a9:
         73:13:58:af:88:19:42:a0:2e:ce:8a:15:7e:0c:11:0e:22:bb:
         97:82:66:61:e8:dc:ce:13:83:95:9d:05:76:bd:cd:03:9c:3e:
         26:2d:e6:cc:89:27:dc:61:b1:64:de:38:e1:5f:16:9d:66:a9:
         9a:8d:2c:ec:bc:c1:af:30:f4:98:4d:2a:bd:d7:7e:01:b2:32:
         96:c9:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:01:01 2025 by rpki-client