Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67f0107c-f6f9-3ca2-9f45-4f0a37927496.roa
File:                     67f0107c-f6f9-3ca2-9f45-4f0a37927496.roa (raw, json)
Hash identifier:          l8VB6umcjO9Vy0spLoEOsbMSex1XBFNYj3uUopi95h8=
Subject key identifier:   34:D8:BB:35:6D:DD:73:C3:5B:DB:69:DA:4F:E7:99:A0:99:03:30:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F76CA31A142D74C33362C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67f0107c-f6f9-3ca2-9f45-4f0a37927496.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        107.4.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:6c:a3:1a:14:2d:74:c3:33:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=a4fcbd87-8139-4bc8-baad-c22802a43b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:85:1d:7d:02:6a:71:a0:85:91:1f:11:36:
                    4f:48:61:0f:6b:6e:72:59:1d:52:16:c9:c9:c3:98:
                    87:ce:23:4c:84:25:a7:4a:eb:a5:3b:02:39:51:64:
                    c5:61:3f:69:fd:ec:a3:ab:28:f7:7e:d2:fb:f3:76:
                    8f:f4:86:31:19:77:0d:b3:3d:1d:17:e8:de:ea:d9:
                    c0:ee:65:eb:64:bf:34:47:cf:05:ba:5c:bd:e3:a1:
                    64:7e:ac:3b:38:2f:ff:52:49:03:31:b8:48:48:df:
                    e6:ec:59:4b:b8:e2:6c:7c:c0:d9:e9:33:5a:b2:f3:
                    03:ea:5c:f2:b0:d9:9c:d0:fd:4a:a3:d0:db:52:92:
                    2a:8b:3f:0c:5f:90:74:7a:57:d2:39:55:d2:b8:4b:
                    2c:8d:aa:47:09:09:b0:b3:e9:1e:21:af:b6:3c:db:
                    e4:38:62:08:6f:46:60:9b:0e:e0:dc:99:aa:51:ea:
                    9d:83:ae:ff:2e:7d:e6:c3:fc:be:81:1a:dd:c9:14:
                    ea:d3:f8:cf:e5:6f:09:1b:e7:53:ca:6c:2f:a9:7b:
                    9a:c0:3e:84:32:c6:b5:76:33:97:75:1f:14:b3:dc:
                    4a:77:7f:03:93:29:72:d6:b4:03:fb:82:2b:44:39:
                    51:b0:e6:b1:b1:07:66:d4:ab:79:53:65:e7:4c:aa:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:BB:35:6D:DD:73:C3:5B:DB:69:DA:4F:E7:99:A0:99:03:30:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67f0107c-f6f9-3ca2-9f45-4f0a37927496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:10:d4:2c:27:c0:d3:35:29:2b:8d:74:61:e9:a6:ce:6a:
         f0:db:b8:ef:c0:a8:13:4a:a5:fc:7d:a7:e2:8a:80:58:a4:be:
         9b:c7:a3:83:d1:bb:1d:73:b3:58:18:cd:48:ca:1c:7b:75:35:
         5d:d2:c1:31:90:57:88:6b:b4:d3:4e:e8:75:d9:c4:6c:75:bc:
         01:b8:f3:40:6d:25:36:65:af:55:dd:66:80:f2:e9:b8:e3:5b:
         95:72:71:23:0f:21:67:98:e5:1d:ec:43:ea:bb:5d:63:e0:91:
         8d:a0:c1:60:41:01:0d:fa:50:d5:92:a2:9b:63:f9:89:26:b1:
         81:cf:67:2c:77:09:5d:16:56:8c:cf:25:80:d8:63:44:cf:dc:
         90:4d:66:d4:24:31:6b:05:e1:69:e1:48:cb:a3:05:89:ef:d4:
         86:3a:53:eb:fc:62:a1:56:24:91:eb:47:3c:1c:5a:63:6a:db:
         d2:2d:c9:a7:54:74:ab:11:36:0f:cc:d5:0b:a5:51:ba:6e:68:
         9f:52:1f:3f:c2:78:4f:72:7f:95:60:93:63:53:71:a0:ca:c5:
         d7:79:00:b4:fd:a2:0f:68:14:92:a0:90:fc:6c:5f:92:76:01:
         ae:f8:82:b5:0d:38:cc:0d:5a:53:c2:6f:98:92:04:8d:0b:99:
         6f:8b:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:28 2025 by rpki-client