Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69761658-0350-30cd-b11f-08fb3ae7cfd9.roa
File:                     69761658-0350-30cd-b11f-08fb3ae7cfd9.roa (raw, json)
Hash identifier:          m7+CETRV3PNdF01WPKDeFcDIWDyxCm+ntqyeEiCW6Fk=
Subject key identifier:   8A:5A:AE:6A:BE:CE:75:17:CF:8C:22:36:0D:D9:9F:A0:1B:21:3D:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431391A196E2BA8E9176940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69761658-0350-30cd-b11f-08fb3ae7cfd9.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        71.59.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:39:1a:19:6e:2b:a8:e9:17:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=25c5875f-ff0f-4ffc-a23e-994d1c7317a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:8c:d8:d3:b2:67:0d:a0:fb:61:0b:86:db:
                    a8:54:10:61:aa:24:b8:ad:c5:35:ad:fc:93:b2:36:
                    34:42:42:7e:d8:ae:67:1d:c7:2e:b7:90:ce:d0:72:
                    22:0b:d4:2a:7a:90:00:76:56:ee:f7:6b:7a:dc:46:
                    6a:42:f2:e8:5b:b6:df:8d:76:f8:3e:28:16:21:d2:
                    dd:24:59:dc:2c:d1:d4:1a:7c:b8:5d:ee:07:d0:a3:
                    b2:c5:b7:47:00:78:27:44:0b:2f:9b:18:39:7d:fc:
                    40:a8:5f:ec:79:36:bd:1d:45:60:ff:9c:74:2b:15:
                    1b:cf:c3:f0:56:5e:78:c6:7a:22:b7:b4:78:d8:2e:
                    1a:21:b4:7a:f4:67:1e:af:a7:da:68:58:bf:59:09:
                    e7:c7:ee:af:6c:b3:34:1c:a2:08:95:98:df:5b:33:
                    85:f4:9b:da:d3:15:39:cb:2f:d5:d0:38:14:ab:0b:
                    ca:0d:bf:1e:71:f6:b7:53:29:74:11:d2:09:68:7c:
                    23:34:1d:4a:d2:7c:ea:fb:e3:8b:88:2c:9c:e9:d8:
                    0c:ed:79:42:8a:9d:12:e4:78:60:bc:53:b4:1d:60:
                    33:27:99:45:27:db:df:db:fc:ca:c2:7c:5e:ee:25:
                    23:ca:07:a8:8d:01:d3:af:95:6c:69:81:c5:d0:9f:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5A:AE:6A:BE:CE:75:17:CF:8C:22:36:0D:D9:9F:A0:1B:21:3D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69761658-0350-30cd-b11f-08fb3ae7cfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.59.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:b5:e9:5d:3a:6c:f1:d4:5f:ff:e9:e9:8a:bd:99:e4:52:
         f5:83:f5:fd:b7:5f:5b:17:03:a8:1e:8b:16:a1:21:34:c5:28:
         df:ce:5e:3c:55:15:4d:7d:39:48:07:5c:98:d4:d7:70:7c:e1:
         81:f0:19:f0:eb:16:28:76:a7:a2:b5:4d:86:1c:1f:41:49:c0:
         30:ba:b1:a3:f3:9b:b4:08:f7:a3:de:85:b7:49:64:b4:db:6f:
         87:f2:08:fd:15:61:49:db:a4:bf:9d:29:f4:6b:87:a4:17:94:
         f5:2f:75:a5:bc:ac:e3:6e:d5:33:49:a5:65:0b:12:0a:66:12:
         18:58:99:33:87:00:53:07:a9:04:bc:78:d8:4a:ad:84:cb:bd:
         27:90:45:80:02:25:92:0f:dd:af:5c:19:28:0e:9d:bf:bb:24:
         20:e3:19:08:59:b5:fd:02:cf:b0:a7:1d:e1:08:a3:00:38:d5:
         92:9f:f7:fc:e2:08:42:70:36:2c:6d:94:bf:d3:45:53:82:35:
         34:9e:cb:be:96:f2:f6:a4:ce:d5:20:2c:40:19:01:9a:45:36:
         99:40:44:33:37:8c:b3:19:3d:0f:1c:ea:b1:d6:03:3b:a1:ac:
         2b:c0:5b:c4:b4:4b:b5:ba:7b:48:21:09:e1:2d:4f:fe:c0:f9:
         10:d2:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:36:20 2025 by rpki-client