Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa
File:                     9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa (raw, json)
Hash identifier:          CfQUM9XKJI8ghe3naU2aSEpya6R1bHvt0B6xCrM+3+U=
Subject key identifier:   FC:54:30:5E:6A:23:6C:4A:B9:40:D1:C6:AB:E8:18:59:96:2A:81:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FCD36EF2AE5BD9AD76080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        71.238.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:cd:36:ef:2a:e5:bd:9a:d7:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=2c6ad564-35ae-44fa-9f9f-705266226ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bc:a3:36:b6:5b:b1:3a:28:cf:79:d6:92:7f:
                    b6:24:1e:b4:a2:39:b9:96:f4:16:16:e2:f8:dd:ac:
                    55:52:0c:2b:1a:b9:78:b3:c4:f5:fc:4b:8a:0c:cd:
                    da:98:33:0d:60:20:53:1f:cd:fe:f0:2f:49:4f:15:
                    b2:24:d3:a2:3c:fe:b5:c5:ff:ff:27:0b:d0:be:25:
                    02:63:0a:f7:d8:9f:40:03:2d:d2:1d:05:43:cf:69:
                    56:ff:82:ac:c3:a6:a4:a1:a8:e3:83:5b:83:f5:99:
                    6c:fd:31:97:c9:ad:7d:fd:0a:c0:d2:b4:37:69:bd:
                    f7:e9:51:cc:98:94:e9:53:9f:f7:26:1e:a7:bd:ca:
                    2c:bc:0a:8c:ad:4d:5a:81:d5:34:ca:ce:16:29:78:
                    0d:9a:68:69:f4:15:96:5e:e3:8f:09:4d:a3:8b:7f:
                    1e:81:70:8a:e1:d0:e6:fa:ee:ae:6f:38:71:78:ff:
                    ab:3f:6e:50:67:24:6e:91:1f:d1:57:8f:91:fc:94:
                    d1:15:10:67:af:de:2e:e3:76:ec:48:c4:54:c4:84:
                    13:4e:b2:d3:00:f2:9a:b9:5b:f6:6a:d2:e2:da:ab:
                    71:0a:2a:b9:bf:a8:f1:06:d9:cb:03:4e:40:ee:62:
                    37:44:e1:03:d0:4a:f1:cc:57:6d:96:18:72:3d:1b:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:54:30:5E:6A:23:6C:4A:B9:40:D1:C6:AB:E8:18:59:96:2A:81:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bfdeb96-9cab-3ee6-a426-144e10b4a295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.238.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:ad:35:21:8c:ac:2d:0c:21:57:e9:9b:41:c6:6f:cc:a9:4e:
         e0:b7:87:17:db:cd:08:e9:a7:39:1a:27:65:80:bb:3c:e9:e4:
         f8:2a:da:88:34:f7:a7:82:33:ff:9a:cf:c0:42:63:80:52:23:
         5a:e9:4f:83:66:07:f2:13:dc:f0:1a:bb:cf:e9:c6:09:3b:df:
         02:bf:68:dd:7a:32:eb:de:77:68:44:e9:37:07:50:65:cd:a7:
         1e:f0:6c:64:77:47:b3:0b:bb:67:12:d7:a9:4f:d2:f5:44:3b:
         93:34:72:ee:53:0b:e8:2d:65:20:18:f2:1f:2e:73:ee:ee:a1:
         c8:9f:99:37:3e:64:66:dc:8c:20:d6:9a:4d:c4:89:84:56:9a:
         87:b8:3a:a0:ce:06:7b:63:e2:e4:0e:92:45:c8:ca:63:4b:98:
         03:e5:c6:74:6a:af:e1:25:75:ab:02:4d:18:49:66:04:d7:25:
         71:01:a2:64:2b:72:aa:07:fe:e7:0f:90:79:f4:9a:8d:23:18:
         45:d7:aa:22:14:72:9e:3d:a1:97:03:6e:f0:d9:59:4a:c9:a0:
         58:30:38:ec:08:08:79:79:40:80:e0:31:28:69:d1:b3:e4:3c:
         e7:e6:da:2b:f6:80:35:6c:f0:0d:dc:55:8c:83:5f:ca:25:41:
         f7:47:69:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:41:45 2025 by rpki-client