Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b5e27d9-426b-3dd6-970c-df370339ac7e.roa
File:                     6b5e27d9-426b-3dd6-970c-df370339ac7e.roa (raw, json)
Hash identifier:          Np/pI90R9KCAWTTCFoH1dua0QXTMjNOd5l7j3Y7MYZw=
Subject key identifier:   91:39:63:2B:15:4C:B7:E3:E3:69:BD:8A:0C:2F:F0:3E:2E:81:BA:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D396CCFF5EF28B296D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b5e27d9-426b-3dd6-970c-df370339ac7e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     20214
IP address blocks:        67.191.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:39:6c:cf:f5:ef:28:b2:96:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=b4211c93-1eca-41bb-bc1e-c0a0b0c4e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:3c:af:84:b4:a8:04:ab:c7:75:21:28:28:
                    f3:d7:2e:95:8d:ca:ad:91:f3:ac:0d:9f:06:db:42:
                    d4:10:68:d1:c8:7a:c3:01:d2:f7:6f:90:4c:fb:20:
                    5e:a8:58:60:61:1c:61:72:0c:2b:b4:53:b8:78:0d:
                    ee:17:ea:fb:ac:b8:f4:a9:16:f9:d8:4f:6e:f9:9f:
                    24:ef:d3:dc:99:54:35:29:46:0c:6b:07:ce:3f:8f:
                    0b:20:b7:d8:67:44:fb:99:b2:d8:b0:a3:14:31:f5:
                    83:3c:c0:e8:d2:20:72:6d:d3:9f:36:63:40:bc:5d:
                    a2:c8:73:6f:7c:70:7a:1e:0d:9d:62:4a:0a:92:22:
                    81:a2:3a:fa:04:6c:c0:9f:7a:39:50:62:03:cc:95:
                    ea:7c:00:71:e3:28:6b:ab:0b:7b:f3:29:e9:5f:71:
                    c2:f1:3d:96:f8:37:36:41:d3:7c:8c:d4:8f:b3:45:
                    dd:5c:81:e2:0a:71:ea:4c:97:79:71:45:27:75:14:
                    02:45:2e:8b:78:b6:83:cb:01:ce:7d:ba:04:8c:43:
                    ed:b8:20:b6:3c:11:22:ae:8f:36:c2:7f:07:2b:39:
                    6e:45:ba:f7:4d:28:8c:e0:01:bd:dd:c6:d3:cd:4c:
                    76:60:b5:47:de:2f:04:92:26:90:66:c1:ae:53:ec:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:63:2B:15:4C:B7:E3:E3:69:BD:8A:0C:2F:F0:3E:2E:81:BA:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b5e27d9-426b-3dd6-970c-df370339ac7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:36:25:d4:21:8e:89:5d:f7:8f:bc:ba:d3:90:c3:a0:7c:
         49:40:96:2c:71:73:3c:3e:0a:56:97:f9:18:ba:5c:6f:a6:e7:
         0d:fc:1e:a0:bb:48:20:d8:f0:f4:64:df:50:52:5d:77:d5:7f:
         e7:0f:61:c4:b5:3e:0c:0e:09:49:ae:18:04:cb:32:f4:b4:26:
         d0:da:14:2d:4e:cf:ed:64:a3:e1:e7:6a:c0:47:05:de:af:41:
         84:97:54:49:ba:8c:f5:1b:b6:15:d2:8a:a3:c4:0e:2f:7b:b3:
         33:87:7d:e8:fd:bf:d6:3e:fe:40:b4:ce:be:6e:53:fc:91:35:
         2c:f6:3c:4f:38:22:a1:65:75:c5:92:0d:58:ae:6e:b8:21:ac:
         b7:9f:c9:a7:8d:9e:eb:f1:3a:cb:84:83:57:7f:0a:3c:4c:cd:
         70:63:5c:dc:12:a1:7e:62:23:d9:a2:60:e6:89:92:e1:0e:ee:
         ce:21:d1:14:d4:7f:cc:4f:41:e3:6f:97:cf:e5:b2:ae:f2:83:
         ed:b2:c2:a9:e7:80:dc:7a:15:dd:4a:6e:05:58:52:16:a6:3c:
         e8:1f:23:6d:e6:36:79:fb:02:62:da:88:11:40:0a:ad:84:32:
         bd:b1:9c:cf:a9:2b:be:9a:32:60:93:e1:2c:8a:f2:2e:b3:d2:
         1c:86:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:25 2025 by rpki-client