Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4cbb48d-998d-32d5-a183-b2bb137348a3.roa
File:                     a4cbb48d-998d-32d5-a183-b2bb137348a3.roa (raw, json)
Hash identifier:          SMcjxi+vk5D7d8PZJfUu11IKaPFairitTwm3M3BtBqw=
Subject key identifier:   E6:F1:DC:1D:F9:F7:43:04:D9:35:30:60:E1:48:59:5E:8E:A7:89:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430C602EA675AF0A9E849C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4cbb48d-998d-32d5-a183-b2bb137348a3.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        71.227.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:c6:02:ea:67:5a:f0:a9:e8:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4e4af1fe-9b40-4a08-8154-0f67ca22d7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:45:29:a4:ef:96:a1:48:e2:3f:60:fc:f3:
                    89:2c:f8:e5:7c:1c:2d:cf:5a:7a:b5:73:aa:61:65:
                    3f:81:ee:c9:e1:9d:da:eb:bd:d7:b3:42:31:da:94:
                    59:0a:0a:0c:32:1f:d4:f3:63:40:fb:82:f4:53:04:
                    b2:d2:5e:8a:d4:99:57:1c:02:41:96:fd:8d:45:78:
                    6c:60:45:a3:22:64:11:21:15:39:14:49:21:dd:5d:
                    3e:37:6c:2f:49:18:d8:33:02:1e:d9:ce:7e:34:e1:
                    35:42:76:3e:9f:a7:d5:ae:26:cd:65:89:f1:93:d5:
                    aa:db:89:16:e8:1f:f9:fe:d9:2a:28:e5:2e:e9:42:
                    02:a6:ac:a7:28:7d:0c:51:4a:19:74:1e:85:9c:2f:
                    4c:4b:fe:9d:2e:63:19:7f:a2:d1:a7:bc:aa:43:a6:
                    42:c4:71:a5:25:f2:e6:b2:42:24:d9:e4:af:c1:1d:
                    69:ed:be:4b:fb:9a:33:33:3d:00:10:f2:85:26:99:
                    fa:f9:f1:c9:f5:1e:51:c1:c6:a1:ba:bc:b2:a3:78:
                    45:62:ec:59:75:81:87:1c:8d:7e:cc:f8:f8:86:a4:
                    7f:b1:7a:72:51:0f:28:49:1e:09:ee:33:aa:b9:32:
                    3c:14:be:fa:3b:9e:70:85:a6:49:c8:f4:66:92:ef:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:DC:1D:F9:F7:43:04:D9:35:30:60:E1:48:59:5E:8E:A7:89:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4cbb48d-998d-32d5-a183-b2bb137348a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.227.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:98:4c:5b:28:41:dd:ba:32:ec:b2:a3:27:fe:c6:e1:34:bd:
         b6:51:9c:a3:fa:b8:b5:42:10:3d:46:0f:75:b4:c3:12:64:1e:
         e0:94:4f:2b:03:00:f6:84:f6:ab:50:2c:e1:62:82:f8:d2:2d:
         db:36:af:a6:a6:8d:c1:7c:ba:2b:a7:3c:77:0b:9f:7d:95:65:
         94:b2:dc:99:f6:65:eb:56:6e:57:57:67:7a:fa:76:e8:af:bf:
         9c:34:7a:76:d5:71:09:fb:0a:72:a9:35:60:87:3d:9d:9b:54:
         8c:5f:be:b8:a9:8f:83:aa:d8:65:ac:14:47:9b:14:49:95:43:
         75:28:87:79:a2:01:f0:0a:a3:a6:3a:48:31:31:50:f0:22:85:
         39:a7:7b:51:b1:3c:ec:13:62:d0:7f:97:45:2a:4d:ef:3a:ec:
         cd:ba:31:99:3a:93:84:c6:a8:fa:ef:40:8c:27:17:fa:52:9e:
         f7:bd:00:0e:17:ea:c8:ef:d0:17:68:50:b9:9e:d8:0b:90:35:
         dc:77:0f:2f:ee:55:0e:d9:fd:3c:4a:e4:cc:9a:81:ff:be:0e:
         c3:6a:bf:a9:fa:35:fb:af:91:43:dc:d2:1a:21:54:be:10:16:
         35:b0:c2:20:87:1a:81:6a:d3:ce:bc:81:a4:f4:78:98:28:98:
         d2:8f:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:45:47 2025 by rpki-client