Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65200d82-007d-38bb-b727-bf0b0775e93c.roa
File:                     65200d82-007d-38bb-b727-bf0b0775e93c.roa (raw, json)
Hash identifier:          ElrKgOXoDa+sZqlnyOFJz8DsFrcJtC7U69LlttnYXO4=
Subject key identifier:   BD:43:48:7C:94:B6:AA:EE:DB:81:BB:6C:CE:26:9D:F5:81:92:32:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF5828637FAA057808CDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65200d82-007d-38bb-b727-bf0b0775e93c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        71.194.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:58:28:63:7f:aa:05:78:08:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b8edf38d-4c01-4fbc-a066-0dab3890b410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:53:88:49:9d:5d:c9:0b:78:69:ac:1c:a6:
                    f5:f3:b9:5a:93:6f:bf:2a:60:1d:c4:a5:43:8e:fd:
                    5d:4e:7b:3f:75:b1:d4:99:c6:28:e9:f8:92:f0:98:
                    2a:20:1c:ea:f2:bf:67:4c:d9:12:59:18:42:cf:77:
                    77:69:10:6d:30:fb:22:b1:3c:6c:f0:1c:e6:3a:9c:
                    33:14:ce:c8:cc:a3:d4:ab:60:ce:ed:79:1f:25:06:
                    c8:f4:ac:d9:d9:41:3a:10:4f:f1:79:34:dd:8e:6c:
                    79:0b:8b:a4:b7:c0:ba:a7:8d:18:a4:7c:6d:8c:17:
                    d5:46:dd:64:44:aa:7e:bf:d7:48:85:ef:8d:06:00:
                    ad:c5:06:be:de:5b:ae:cb:a8:e9:e4:8f:b4:15:df:
                    b4:bb:cc:70:d0:5c:56:dd:3b:70:e4:bf:97:93:27:
                    97:4f:b7:a2:ec:50:d8:cb:47:42:91:61:7c:81:a9:
                    7b:07:17:8f:60:9c:dd:4f:3f:f0:3a:7a:45:39:71:
                    be:93:cc:d5:3d:4c:59:d9:1b:a1:31:65:cf:ad:8e:
                    59:79:23:e5:f4:8f:19:c2:3e:08:4b:6d:cf:d7:03:
                    c6:07:8b:f0:45:ca:6e:04:48:62:fc:4b:e3:5d:66:
                    fd:fc:6d:28:1c:d4:78:13:15:f6:b7:ed:72:51:de:
                    7e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:48:7C:94:B6:AA:EE:DB:81:BB:6C:CE:26:9D:F5:81:92:32:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65200d82-007d-38bb-b727-bf0b0775e93c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.194.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:ad:07:ad:d1:08:9d:e7:b2:bb:83:27:9b:68:33:f6:f3:
         94:36:9f:1e:3c:9b:3f:9e:bd:bb:e3:ef:bc:59:13:de:7e:e6:
         9f:c5:29:00:b3:67:35:b8:9a:ab:04:14:72:ef:a5:70:5f:53:
         c0:44:ab:3e:a7:93:a7:b2:c3:e5:51:42:49:54:3a:b0:dd:4a:
         4a:00:fe:5d:8e:e4:31:75:88:f8:6d:91:85:79:01:9c:18:b9:
         35:ee:65:ca:b3:6d:74:03:b4:dd:a9:d0:d2:33:69:d5:28:7e:
         2c:24:ce:7a:98:16:01:7a:a8:fe:c1:40:37:ed:69:10:79:7a:
         e9:c3:5d:89:43:d7:b8:cc:cf:20:20:47:32:e1:98:fc:48:1f:
         6f:af:e7:06:7a:f2:2c:cf:04:81:f1:33:1d:b6:63:1f:55:a2:
         f5:c4:ab:b6:8b:08:dd:3c:b6:43:e1:25:6b:eb:40:58:a9:75:
         3c:cc:1c:d6:c6:69:b6:b0:e7:e7:57:b9:8c:69:fb:c3:11:0d:
         e3:67:4c:d8:66:db:83:23:c2:d2:5e:39:38:71:34:0f:78:16:
         ae:9e:e5:af:64:f8:0c:1b:ad:5c:75:2b:d6:dc:3e:33:63:22:
         4d:27:e2:d8:57:a3:f3:7a:63:44:5c:34:22:13:43:12:c1:e0:
         18:8f:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:59 2025 by rpki-client