Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fa0eaf8-5118-3c86-8ef5-a5fda3f3ef0c.roa
File:                     7fa0eaf8-5118-3c86-8ef5-a5fda3f3ef0c.roa (raw, json)
Hash identifier:          QDIvd9Z8g3V5KE0hA1iymRF85RbYuIjnUDU5SmhvBNc=
Subject key identifier:   26:35:61:83:6B:A0:65:B3:4B:D6:CE:29:4F:00:CD:7F:58:C6:6D:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6B150D8E3C1BC5BE13E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fa0eaf8-5118-3c86-8ef5-a5fda3f3ef0c.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        24.22.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:b1:50:d8:e3:c1:bc:5b:e1:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=5230ac46-c6f3-4c8f-952d-e0f2e68f905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:68:a7:4a:78:ba:e7:0e:64:e4:70:a0:96:
                    d6:8e:5d:fe:61:29:13:24:20:49:98:a1:ae:22:ff:
                    91:0b:ff:1d:a5:f9:98:a3:4e:6d:e9:46:d0:79:06:
                    c0:6f:5c:45:b0:bc:3d:82:69:b2:76:dc:2a:8b:3a:
                    5e:d9:0e:f2:d4:17:8f:5d:b8:c5:e6:b5:79:d2:ba:
                    d6:ee:98:a7:4d:df:8a:4a:2c:2f:ed:a4:4b:b8:fa:
                    fe:2a:aa:54:b6:38:25:b1:60:69:74:84:95:97:82:
                    4a:8d:3d:12:cf:60:00:fd:45:5a:1b:d2:3b:6f:d2:
                    e4:08:8b:4b:c4:4f:c6:fd:00:a7:44:5c:18:8e:c3:
                    de:34:a4:43:28:55:e6:ca:b5:4d:13:7b:35:92:ce:
                    8f:4a:6c:66:7e:ee:83:2a:8d:21:4a:70:20:d7:c9:
                    43:10:ad:f5:04:c1:16:2f:80:38:ef:f0:74:cf:00:
                    91:52:93:65:37:76:07:b1:f0:80:f2:c6:58:48:98:
                    2a:2b:44:92:7f:56:1d:ee:40:19:0c:f7:99:92:d1:
                    85:5d:33:18:6d:d2:3b:91:fa:75:3f:e8:81:48:bf:
                    3f:4c:5d:af:ab:1c:ad:90:d8:f1:97:d6:09:b2:bf:
                    81:f6:1e:0b:e9:bc:1e:d9:49:12:96:8e:3f:c9:5b:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:61:83:6B:A0:65:B3:4B:D6:CE:29:4F:00:CD:7F:58:C6:6D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fa0eaf8-5118-3c86-8ef5-a5fda3f3ef0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.22.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:08:03:f3:fb:6d:a8:93:ac:d5:4a:36:8a:cd:9b:e6:29:
         78:83:94:2d:3b:8d:b0:da:da:17:d9:55:51:c0:8e:ec:86:23:
         5a:13:f6:98:6b:4a:11:4e:43:62:d2:6d:77:50:5c:d3:e9:75:
         16:9a:74:8c:a2:8f:e1:f1:54:2c:12:5a:46:54:a5:7b:ca:d8:
         bc:e1:74:07:6d:6a:1e:7b:f1:f2:b2:7f:b5:b0:a3:06:72:e1:
         c7:71:35:66:af:12:fe:49:1c:fa:68:26:f7:48:bd:0d:c4:2c:
         f7:1a:92:96:b9:b0:2f:e7:48:c7:65:84:27:bc:6f:92:2e:a3:
         73:98:1d:0c:e9:f6:18:60:c7:9d:a4:dd:7a:02:dc:6b:84:6b:
         04:ac:9e:3f:1b:c1:6a:53:63:2a:88:f2:3c:d3:d1:1d:b7:50:
         a7:e8:31:26:2c:f5:bb:fa:06:d0:22:a4:25:10:93:1b:42:82:
         5b:34:cc:41:78:25:32:ab:ea:62:53:9f:5c:a4:f7:13:a9:d3:
         a3:6e:19:5f:37:dc:5e:22:bd:af:76:b7:3f:af:2a:01:c1:33:
         ac:3f:95:ce:45:27:41:02:5e:51:3c:8b:6c:bb:13:af:ce:3c:
         f9:f7:5f:b5:d1:27:c6:db:32:cc:a1:62:d9:50:be:9c:fb:26:
         cd:8f:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:45 2025 by rpki-client