Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77325681-1b51-3dd2-a900-fe3acf90902e.roa
File:                     77325681-1b51-3dd2-a900-fe3acf90902e.roa (raw, json)
Hash identifier:          wR+SN7d3xbiBAbMO21IjwAIls4CBo5rgNs39VVnhKnQ=
Subject key identifier:   E0:8D:A5:22:8A:5B:DD:61:4A:B0:CE:4A:92:62:36:CE:BF:38:09:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05E3A970F9E0F19CBA4000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77325681-1b51-3dd2-a900-fe3acf90902e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.249.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:e3:a9:70:f9:e0:f1:9c:ba:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=bdfdabf3-52bd-4794-871d-60457a489c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:a7:98:2d:e4:fb:e5:2b:c6:ea:7e:c6:52:
                    38:c3:15:e0:a7:03:ac:d1:6d:7e:2c:30:ff:68:6e:
                    79:95:97:3c:49:9c:16:43:54:03:eb:a3:be:ef:20:
                    54:0f:20:59:23:b9:ee:ee:de:6e:dc:33:a6:44:ed:
                    9f:03:3a:24:63:e0:46:3b:2f:b9:88:3e:e6:90:80:
                    74:71:20:2d:b6:8a:af:a6:a1:a7:29:62:2e:29:9a:
                    f9:c5:5f:84:6c:a9:77:c0:bb:eb:88:23:a2:5a:60:
                    a7:18:c9:b2:85:ce:79:14:21:ea:a2:c5:97:d9:7e:
                    d9:4c:20:36:92:fb:7b:81:46:41:22:fc:06:4f:e9:
                    a5:80:09:10:03:15:78:d3:56:df:78:a8:8a:c9:47:
                    82:28:f2:e2:0f:b6:18:08:74:8e:fb:4d:0d:66:f8:
                    7c:23:0d:58:80:8e:16:00:7e:11:05:00:a3:9a:b3:
                    f0:ac:52:ae:f9:fc:38:8a:04:52:38:4e:b0:39:db:
                    e0:0b:8b:46:20:cd:a1:06:0e:3a:39:1d:4c:26:68:
                    99:fc:8a:36:5e:b0:23:69:b6:20:b7:7e:29:ed:a7:
                    7b:f4:12:6c:5f:78:8b:74:6c:72:48:2a:ec:6f:c1:
                    0a:ed:74:7e:f5:53:85:f3:ad:1b:81:ef:73:b8:02:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8D:A5:22:8A:5B:DD:61:4A:B0:CE:4A:92:62:36:CE:BF:38:09:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77325681-1b51-3dd2-a900-fe3acf90902e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:b6:a4:87:b7:1f:4d:99:68:59:9b:4c:3c:5f:ea:f9:2c:
         78:67:61:7c:ed:74:c9:4f:ff:b9:16:e7:5c:bb:8a:48:90:11:
         ea:5a:51:0e:c4:f3:63:9a:07:29:2d:18:2e:c4:92:7e:be:8c:
         64:4c:ef:42:f1:6a:0b:2b:3e:c1:74:0e:4d:ec:4c:c5:35:44:
         f8:04:ee:b7:1d:46:e1:7e:9b:3b:cc:a0:53:3e:d8:87:ef:93:
         56:45:2d:2c:10:74:f5:2a:ce:ca:c1:22:8f:4b:5d:53:99:ec:
         0d:8f:5b:a8:00:0b:c7:3c:e8:51:b5:c2:8b:be:2f:f4:b5:31:
         63:0f:50:5c:e5:28:97:9f:39:74:11:09:64:62:8f:7f:4a:ec:
         0d:13:c8:b8:3d:27:8b:85:f5:82:b8:be:12:e6:fd:24:53:8d:
         14:d3:5b:55:06:87:0c:30:41:e3:ec:ac:28:95:58:f7:e1:c2:
         e2:7b:99:39:0b:47:98:bc:2c:3d:fb:4d:26:54:45:c6:c5:32:
         00:13:ca:5d:59:61:90:86:4c:fc:3a:51:eb:ce:df:bb:95:b3:
         28:5c:a7:6f:a4:b0:9d:32:ef:b5:6c:95:58:0f:25:53:ac:05:
         e0:06:7f:08:45:07:52:14:65:c7:53:1c:ae:08:ba:a7:ff:e3:
         7a:01:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:02:32 2025 by rpki-client