Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcaef02-a922-3a6a-96dd-d50819c297d5.roa
File:                     9dcaef02-a922-3a6a-96dd-d50819c297d5.roa (raw, json)
Hash identifier:          UejFzdLtnx8VRn5P1eDmHk1lEk4su+vdAWtsCL4L0Xs=
Subject key identifier:   B5:DC:0B:ED:A6:B1:A0:22:6B:88:17:05:A0:7A:39:6C:9A:80:BA:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8525673F0689CA24A2700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcaef02-a922-3a6a-96dd-d50819c297d5.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.147.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:52:56:73:f0:68:9c:a2:4a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=12a15ea3-8721-44a4-a584-3973dabd59c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5b:a0:1a:b6:ee:15:fd:77:1c:e5:a3:23:2f:
                    b0:ce:0f:ef:c8:68:43:82:77:b6:82:6f:90:4f:14:
                    a5:c6:c3:1d:f9:f4:2d:53:8c:fb:7f:7f:e4:d9:15:
                    8e:79:ee:54:42:e1:83:7b:86:14:e9:69:39:33:d9:
                    b1:d0:cf:66:68:46:cb:42:7b:40:33:12:db:26:66:
                    4f:5e:5e:a4:2d:da:d6:e2:19:d7:02:53:6a:04:1d:
                    98:12:8f:30:33:a1:f0:cd:61:a2:ee:06:b8:b3:dc:
                    b2:a5:f2:6a:31:38:60:c6:9d:ed:35:71:55:a6:4d:
                    d2:2b:7a:d1:3b:53:03:18:98:26:ac:8f:c6:e4:53:
                    fa:75:5e:a5:fe:50:00:1d:18:ab:2a:c4:5f:4c:37:
                    b2:b5:46:72:01:6c:a1:85:5c:0d:a4:6a:ea:f2:d4:
                    ed:20:34:e7:b5:7d:89:58:74:e8:4a:be:17:cb:a9:
                    72:55:dd:59:9a:7c:cf:81:21:75:f1:92:37:2c:dc:
                    6b:f2:64:a1:2b:e0:7e:8d:30:21:2a:d4:1f:60:d5:
                    0b:3c:69:a1:75:eb:84:b5:43:93:f4:8d:3f:04:62:
                    87:4c:17:98:6a:6c:a1:1b:e5:a3:2e:0b:85:80:3b:
                    d5:be:61:14:dc:cb:a3:14:6d:a8:d1:b1:b9:3e:92:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DC:0B:ED:A6:B1:A0:22:6B:88:17:05:A0:7A:39:6C:9A:80:BA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dcaef02-a922-3a6a-96dd-d50819c297d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:28:25:67:ff:94:4a:16:53:bc:50:64:57:41:de:61:90:
         df:26:95:42:dc:93:24:68:a9:41:97:a8:78:0d:3a:bf:b0:c3:
         ec:62:5e:ed:54:db:73:89:7e:ed:52:60:a4:1e:f0:5a:a8:52:
         12:08:61:5c:b8:ee:88:08:c4:8f:73:2f:65:70:cc:e4:40:15:
         f1:be:0e:d5:85:e7:c4:c3:f0:30:cb:43:4d:14:41:37:45:96:
         b0:c5:da:cc:0e:36:41:2c:84:45:f0:bb:ad:20:1d:72:04:b7:
         c0:d1:fd:7e:98:8f:7c:7e:20:23:c4:4c:37:de:5a:4d:59:a4:
         fd:67:bf:b7:40:d4:49:f0:71:07:07:0c:2c:2a:fd:9d:ef:fb:
         30:01:81:13:f1:47:ea:db:52:50:47:d6:2d:0f:16:89:20:72:
         d4:c5:a9:a7:cf:c7:8a:b1:03:24:f8:d6:87:39:bc:b0:86:39:
         d6:c5:60:e4:bf:38:16:ca:77:cc:33:65:49:de:62:9e:2f:a4:
         c3:b4:aa:cc:83:b1:3f:f0:81:34:4f:43:2d:3b:7f:0e:cd:f8:
         7b:dd:5a:70:dd:6d:fc:b7:9d:53:1c:94:5c:6f:24:e6:18:f1:
         c9:29:ff:4d:9d:14:37:c7:33:e8:fd:da:d9:06:71:d9:cf:2b:
         c2:d3:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:13 2025 by rpki-client