Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/716c5eb8-7780-3ca9-8b2b-a32f089ab843.roa
File:                     716c5eb8-7780-3ca9-8b2b-a32f089ab843.roa (raw, json)
Hash identifier:          AcurhrHQYeZxPGgHGsXLEIxOXzldmGUq8A7jcIY/Qa4=
Subject key identifier:   AD:FE:B9:00:DF:9B:F5:8E:33:88:35:70:C5:2E:BB:F2:64:59:B2:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB039073350D181F665F280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/716c5eb8-7780-3ca9-8b2b-a32f089ab843.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        71.199.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:39:07:33:50:d1:81:f6:65:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a827686d-41b4-41da-973c-501e0c5141cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:95:72:fd:16:19:f6:fe:1d:28:41:a5:dd:
                    c0:a9:95:90:53:b7:1f:4a:65:fc:18:b6:10:4a:35:
                    93:19:58:f1:0a:cc:d0:a7:8a:a4:ee:90:06:6e:49:
                    9e:70:21:f3:e4:d6:ea:d2:7a:95:eb:ba:90:40:4c:
                    99:2c:62:14:3c:78:b4:81:9e:7c:dc:f2:fd:39:59:
                    50:28:ab:d3:55:83:f7:8c:89:6d:68:20:e6:eb:e6:
                    b1:b0:65:88:3c:b3:df:0f:31:0e:6b:ac:8d:67:95:
                    42:c7:95:95:26:c3:b1:ba:17:15:6f:98:de:18:3b:
                    e2:ec:22:b8:37:0d:9f:37:1c:39:25:fe:49:c3:c7:
                    da:52:b0:92:6f:09:c2:67:1a:6d:1e:af:c3:2f:4b:
                    35:9c:dc:d8:fd:e2:92:16:02:e3:6a:1f:66:ce:ce:
                    d1:31:d4:bd:ee:0e:67:2a:3a:52:33:d5:ca:df:62:
                    88:2d:21:f5:68:6c:2c:eb:96:d8:69:36:17:f3:b9:
                    40:92:2e:fd:e4:83:e5:7f:52:a3:32:e6:f4:61:0c:
                    b1:99:68:7e:e2:31:40:39:68:c2:09:2e:f9:d8:59:
                    26:05:06:79:4a:20:e6:50:17:ce:0c:67:d3:51:6b:
                    68:f3:1b:18:52:f2:9f:15:e7:27:6b:1c:ba:b6:d6:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:B9:00:DF:9B:F5:8E:33:88:35:70:C5:2E:BB:F2:64:59:B2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/716c5eb8-7780-3ca9-8b2b-a32f089ab843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.199.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:ad:a7:3e:0c:69:e3:d2:69:d3:f2:07:aa:58:1d:24:c1:
         78:89:ab:18:51:f3:d8:dc:c6:dc:53:9e:db:e2:56:19:b6:8b:
         c4:e9:a3:ec:91:fe:e1:88:20:93:cf:f5:8d:89:06:43:3c:3d:
         ca:f6:70:b7:3d:59:ed:b5:99:86:44:5b:06:cd:cf:d0:bd:c7:
         0c:46:92:b1:96:20:6c:9b:c4:2c:65:7b:0d:7f:3d:1a:a6:1b:
         e7:99:ac:bb:eb:08:1b:1b:cb:1a:57:e9:7f:42:78:8d:b1:c9:
         9e:ea:96:7e:e8:86:9c:57:69:fc:ef:d1:f9:86:5a:71:c6:3e:
         76:50:16:8b:90:90:1e:90:49:8e:cb:07:c8:c4:94:5e:03:45:
         be:d4:eb:ee:cf:d9:c6:74:94:26:eb:6e:d4:a7:b4:81:e8:44:
         f2:a6:20:03:db:d3:0f:8f:81:c4:81:19:71:4a:a0:6d:c5:52:
         de:cd:2c:ba:3f:97:42:12:d4:e9:f2:d0:19:01:d9:11:03:5c:
         56:a4:63:f7:d4:13:99:3a:70:2b:8f:6b:0e:a3:e8:41:8c:5a:
         99:cc:f0:2c:64:f2:f4:d1:f4:39:2f:4a:59:de:fd:23:f9:76:
         dd:2d:4f:67:b5:d1:d0:61:96:bd:37:56:97:90:33:52:01:3f:
         75:14:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:05:36 2025 by rpki-client