Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87837a78-b78d-326c-b0ce-a838da07007b.roa
File:                     87837a78-b78d-326c-b0ce-a838da07007b.roa (raw, json)
Hash identifier:          drpdopU9b2tYYxGfabnogZVNalE9V7ZODZNa5uS7YYY=
Subject key identifier:   F6:C4:92:B3:98:96:DF:51:40:02:4C:B7:8B:BB:C3:68:7E:85:D2:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C078AEB85AD1D05750DBA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87837a78-b78d-326c-b0ce-a838da07007b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        71.224.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:8a:eb:85:ad:1d:05:75:0d:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f080c9d7-b3dc-47e7-846d-74c07e2ca186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:70:41:3d:54:45:4f:cc:28:97:11:bb:db:
                    01:1c:47:48:69:0d:57:a7:be:1b:85:e8:2e:c9:6f:
                    ae:eb:6e:2a:b3:3f:55:8a:49:f1:0d:d2:be:13:c8:
                    b6:db:10:f9:c0:19:1a:91:e6:24:8a:62:c6:40:7f:
                    25:6d:42:a8:94:34:f6:4d:b3:43:68:29:bf:57:7d:
                    13:8a:00:69:b0:61:72:1c:85:75:1c:52:9b:4f:3b:
                    c3:ee:97:94:ed:bb:d0:c7:bd:e3:65:11:8a:0c:fa:
                    f5:5c:b4:18:73:1a:05:ee:84:ce:62:a4:41:ff:9b:
                    28:02:46:79:17:31:33:31:d4:96:2a:dc:c0:46:24:
                    52:2c:05:f1:6f:db:8b:a0:a5:5e:cb:74:d1:77:14:
                    59:eb:d2:1c:83:9a:ba:e6:23:ea:72:61:57:0b:21:
                    19:6e:56:61:b9:43:9b:21:32:56:bd:84:64:48:f6:
                    80:eb:13:64:62:52:1e:12:f1:ee:a2:b2:4b:ef:e8:
                    95:b1:f5:2c:e7:11:c6:51:2e:25:16:7e:5e:b1:f2:
                    83:95:1e:0e:33:3f:ac:d9:41:7d:10:ae:a5:54:15:
                    ea:f4:cc:08:35:ff:2f:7c:25:22:0e:0c:dd:aa:62:
                    09:b7:de:87:35:86:51:20:ef:bc:f1:c2:bf:f9:6d:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C4:92:B3:98:96:DF:51:40:02:4C:B7:8B:BB:C3:68:7E:85:D2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87837a78-b78d-326c-b0ce-a838da07007b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.224.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:96:26:ce:cf:fd:95:4f:32:ec:60:b8:b3:97:67:2a:f9:75:
         6e:98:5f:48:81:62:65:37:5f:0d:96:2d:bf:7a:d1:d7:03:10:
         f2:52:80:50:ff:87:66:63:75:5b:8e:5b:71:9c:69:11:9e:a0:
         2c:2c:00:6c:7a:b8:45:6b:84:a1:e8:26:ec:a1:cc:2a:a2:18:
         79:c6:96:e4:e2:02:65:31:fd:87:63:ba:ee:a2:13:26:e3:48:
         cc:e1:7d:83:07:b2:13:3f:8f:ed:ca:99:18:c2:a2:6e:02:6e:
         b6:28:b1:ed:80:3c:b8:9c:b2:3b:29:1f:9d:d3:7e:ab:2b:ab:
         19:e9:15:a9:0d:e0:89:ff:af:e5:26:21:0b:c3:07:61:36:51:
         67:69:13:fc:0b:e8:86:9a:78:b6:19:10:82:e3:ad:4a:b6:b1:
         e6:42:75:8f:7c:16:9e:f7:0c:2a:e9:95:91:11:02:09:87:2a:
         d0:78:69:1f:25:5a:ee:ab:d3:65:c6:16:ea:62:41:5b:79:ed:
         ff:a2:49:43:0c:8c:d5:17:ca:96:14:0a:ed:aa:3d:1b:77:e0:
         f5:c6:69:65:fb:00:b4:7e:dd:22:da:49:74:db:92:7b:ed:dc:
         c1:1b:03:91:00:69:bd:e4:c8:2d:b3:12:3b:31:f3:30:ad:96:
         06:a9:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:38:06 2025 by rpki-client