Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa
File:                     94a49f78-aa01-3760-a513-867975d6019c.roa (raw, json)
Hash identifier:          Oy+qzv9LJ1TwSLUSdZSyS4myz7OknK4tgQQLvI1+IeM=
Subject key identifier:   4B:F8:45:96:FF:BC:C1:33:15:97:0C:B5:FD:40:81:B8:CB:90:AC:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4312F85A1D9710B74A0A7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        24.21.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:2f:85:a1:d9:71:0b:74:a0:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d17b2020-272b-4a92-b19a-7a901ae1d527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:0b:54:3f:87:06:7a:ef:88:88:fe:f8:d9:
                    90:00:c6:62:b1:9f:e0:16:8d:52:be:1d:68:a9:85:
                    80:57:77:76:35:35:55:5b:70:75:f0:12:c0:c0:60:
                    6f:32:28:2c:d1:1f:ac:c8:82:50:6f:d0:46:9b:a0:
                    07:e2:55:77:9b:68:14:f2:35:a3:56:74:e5:e4:13:
                    fb:a6:b4:a2:f7:a1:a6:61:bf:1d:88:62:b0:13:05:
                    a6:93:c9:55:e3:e0:4f:a2:17:d7:d2:1c:f4:d3:9b:
                    bf:be:b6:e2:ce:6d:39:66:ee:87:1e:57:ee:a4:b8:
                    b1:58:8e:f3:eb:e6:00:cf:3b:56:c9:7b:30:8f:3f:
                    f5:41:cc:92:16:14:80:ab:60:dc:34:a9:d1:38:d5:
                    32:8c:07:7f:48:bf:d0:32:45:c4:59:49:a3:95:e5:
                    44:2f:dd:45:84:8f:50:ab:4c:bb:b8:ad:bd:86:01:
                    e6:fe:75:16:17:1a:b9:8a:e6:dc:82:07:a7:92:16:
                    74:f6:5f:bf:c6:c8:68:2c:f8:12:88:b4:e8:ba:34:
                    cf:e0:0b:28:b1:52:65:2c:a3:ba:0c:8f:85:e1:6a:
                    28:e7:66:94:ff:86:dd:67:af:8e:ea:ea:04:62:e4:
                    37:40:63:16:17:22:fe:eb:a7:ab:10:3b:67:fb:ac:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:45:96:FF:BC:C1:33:15:97:0C:B5:FD:40:81:B8:CB:90:AC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.21.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:dc:b7:11:bd:3e:84:f5:85:04:17:e5:55:47:e2:df:da:
         1b:ad:f1:98:39:36:b2:df:1e:97:78:fb:dd:07:0f:f9:59:f8:
         06:b6:5b:b9:ac:9d:83:a4:13:2e:a4:2e:15:e7:af:fa:05:99:
         27:c4:3d:97:b0:ee:3f:8a:ca:63:60:be:fb:2c:60:d6:f5:11:
         91:b9:2d:49:ff:a6:b4:18:c1:96:26:c2:99:da:f7:67:ec:a5:
         af:3e:3e:1b:f4:b5:2f:b9:4a:8f:f4:c7:e3:56:c2:f9:ca:3d:
         ac:6a:58:af:3d:bf:1e:02:57:c7:88:b0:99:c4:2f:f5:24:8e:
         10:14:bc:e0:5d:7d:6e:2f:f5:f2:59:09:78:84:40:08:9f:1a:
         c2:14:06:90:f8:b2:a8:8b:f4:cf:2e:61:b2:bf:9a:5b:82:0a:
         11:83:cc:ca:7f:a3:56:b5:06:58:25:25:af:08:4f:cf:78:c7:
         4b:9f:ca:2d:15:69:b7:67:e5:4a:4d:29:05:e8:00:68:02:11:
         b2:d2:04:73:e1:eb:f5:e0:cb:a7:73:4e:94:32:f8:55:29:63:
         fc:b3:0a:43:ba:48:6b:27:dd:99:d7:3a:49:95:42:30:77:d3:
         8e:e5:31:d0:e5:25:28:80:58:e5:94:43:f8:b2:13:59:59:b4:
         bc:3f:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:40:48 2025 by rpki-client