Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a94a4969-eec3-3457-b76c-a08c13fc678f.roa
File:                     a94a4969-eec3-3457-b76c-a08c13fc678f.roa (raw, json)
Hash identifier:          Gay08vtJrR65dchEd9e+2t437cz9BiSib0s2d0iYQ+I=
Subject key identifier:   2B:F0:69:70:FE:FD:0B:76:43:A2:56:1D:4C:90:ED:41:65:4B:EE:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07B5EBF26913F52BA55B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a94a4969-eec3-3457-b76c-a08c13fc678f.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        24.1.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:b5:eb:f2:69:13:f5:2b:a5:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3458e5c3-c00b-4cda-a6d8-b0e194e708af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:34:f9:12:37:a8:31:76:28:62:f1:f6:0d:
                    9b:fc:d6:f0:cc:89:f3:96:f6:f5:d9:3b:e4:f2:6e:
                    42:26:eb:b3:37:f0:c4:de:5d:48:1e:71:22:6d:5d:
                    1d:7d:ca:d1:f0:a7:e9:e2:bf:1c:73:50:ae:8a:1f:
                    79:64:07:a0:60:47:ab:f2:46:3e:86:59:6b:6c:ab:
                    2e:63:d7:1d:c9:b4:73:7a:cf:56:7d:4a:15:4e:06:
                    38:b8:c3:c0:c0:7c:a1:a5:73:b0:3c:5c:33:42:0e:
                    f0:5b:52:6d:9d:28:12:72:87:16:47:6d:e4:2e:58:
                    3d:3b:bc:29:3e:db:ed:67:7c:01:da:20:4b:57:f3:
                    ca:b5:6d:34:21:c1:89:cd:a1:55:0d:4f:74:f2:ab:
                    63:28:f4:91:bc:06:f1:32:de:54:a2:e0:76:42:d1:
                    3a:2e:ab:7d:1a:01:bd:e7:bb:91:09:5c:ca:34:89:
                    90:a2:ef:a1:87:57:d5:34:5a:38:35:6e:5b:17:bf:
                    d4:25:a0:9a:45:c2:a7:fd:ce:2c:e5:b8:58:96:35:
                    80:f4:4f:c0:be:1a:fd:a5:c0:70:b3:b8:16:1b:a6:
                    34:d0:d0:d2:d9:91:b9:d5:d8:5f:cf:49:13:f5:65:
                    ad:8d:bb:c0:82:3b:11:8c:3d:cd:49:10:c6:79:9a:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:69:70:FE:FD:0B:76:43:A2:56:1D:4C:90:ED:41:65:4B:EE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a94a4969-eec3-3457-b76c-a08c13fc678f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:aa:a5:96:fb:83:53:18:59:c7:33:5d:96:c2:da:6b:1f:
         ab:80:bd:73:bc:05:24:f3:72:8c:5f:17:e8:dd:10:ee:d2:1e:
         69:b2:ad:95:d4:8a:c3:ce:45:c8:7b:27:f4:cb:40:f1:75:56:
         2e:04:2c:11:ac:28:91:47:b4:60:25:1c:b8:03:ae:f2:7d:81:
         eb:01:2a:40:b3:6b:77:63:08:5e:ba:8f:ff:c8:a5:f8:23:68:
         82:f1:d8:10:7d:c1:3b:00:fe:d9:bc:7b:21:97:cc:e6:99:b9:
         c9:3d:b9:65:0d:e4:ec:6b:0a:f6:d8:c0:a9:10:ea:19:a1:54:
         25:02:4a:d0:dd:7d:0b:3d:c8:2d:9d:8f:05:4a:47:1a:d7:29:
         b9:ff:a7:41:06:8a:77:c2:e6:66:d7:30:57:fb:12:02:cf:b9:
         06:17:43:5c:97:a0:ff:31:54:0f:47:62:6d:40:46:54:e1:9f:
         bf:64:45:3c:4a:3b:68:fc:8d:5c:bf:a0:e4:13:89:f5:33:c2:
         98:48:7d:d7:fd:46:85:11:26:e6:8d:7d:68:32:f8:5b:04:9f:
         b5:d0:11:48:e1:2e:a0:6d:29:11:7f:28:ef:73:1a:8f:33:7b:
         6f:f4:21:1d:3e:c1:67:02:a3:d9:1d:04:c6:74:1f:3f:2e:24:
         29:57:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:57:15 2025 by rpki-client