Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac41e9e8-89b0-32ed-a52c-06487b48b9c9.roa
File:                     ac41e9e8-89b0-32ed-a52c-06487b48b9c9.roa (raw, json)
Hash identifier:          vAIOt+Uu55ga/UOkaqVT1UoKt+zWBeusKZEZoqqGZw0=
Subject key identifier:   11:0F:6C:BF:FD:3B:75:5F:1D:52:B1:83:73:36:83:E4:04:69:FD:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF5B8DE5BBBAF0EFDD9BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac41e9e8-89b0-32ed-a52c-06487b48b9c9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        71.228.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:5b:8d:e5:bb:ba:f0:ef:dd:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=79dab1b9-44e4-4a8f-9682-3316ed49f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:c6:96:24:ba:62:6b:f1:19:53:80:1a:47:
                    0c:ce:37:e8:4c:f5:3a:bb:32:cb:e4:23:22:ca:7a:
                    2b:0a:c2:ab:3e:b8:86:5b:27:c7:ed:24:cc:1f:84:
                    b1:4a:83:14:8f:08:83:14:3e:e4:6a:ba:af:8c:9e:
                    c9:25:2f:f5:93:ee:ad:24:50:f3:ee:94:5b:27:03:
                    e4:ce:27:48:57:67:e5:b3:75:ca:47:eb:31:ec:bc:
                    2e:aa:32:2a:58:9c:89:e9:15:7d:7e:8e:4c:43:ec:
                    f1:fe:fc:84:41:d6:dd:43:d4:ca:76:96:f3:12:47:
                    c8:30:62:e2:00:9c:0c:af:e5:ac:68:d1:26:46:69:
                    87:49:59:76:12:1a:39:2e:7d:f3:e4:f4:24:45:59:
                    bd:2f:8a:be:04:f9:29:d1:7c:95:53:c6:d4:8e:23:
                    14:a8:bc:ef:d4:c6:f8:90:77:0c:5f:22:77:43:18:
                    31:14:9e:70:66:8b:99:8b:22:a0:61:fa:20:01:7c:
                    a4:82:69:dc:0a:78:9e:e9:21:32:fa:85:5f:cb:bb:
                    06:a4:55:87:f2:c9:fb:f1:4a:eb:d9:ad:e5:23:5c:
                    99:a5:b2:ca:d1:13:11:d2:31:36:54:06:5b:ef:90:
                    ca:9e:8d:6b:90:53:d9:dc:bc:3e:5d:98:73:00:35:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:6C:BF:FD:3B:75:5F:1D:52:B1:83:73:36:83:E4:04:69:FD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac41e9e8-89b0-32ed-a52c-06487b48b9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:08:cd:76:a5:e9:94:65:cd:9f:d6:c7:20:78:f3:f1:25:
         c0:99:06:3b:98:38:52:f4:f1:2c:d1:5b:44:16:28:ee:52:3f:
         7c:52:94:05:fd:55:ef:5e:a4:c1:fb:e0:e9:cb:ca:ff:09:7a:
         05:68:d5:2a:56:e7:0e:fe:0a:4d:00:1c:71:e9:13:45:0f:f4:
         a7:9c:ce:ff:0b:7b:d5:02:17:76:ef:a2:f7:b7:04:83:e7:ba:
         cb:87:09:03:92:3e:d8:63:52:20:79:b5:be:7d:a3:16:c2:95:
         22:73:e0:d2:55:3d:5e:33:48:e8:b7:f7:a7:af:0c:2a:62:49:
         e0:4c:41:4f:b0:dc:d7:65:83:83:a8:19:e9:71:48:0e:13:67:
         7a:f1:04:8c:35:ed:de:52:a0:55:f5:99:d0:54:69:95:2e:fc:
         ba:cf:50:ba:ea:6c:dc:70:47:0c:71:99:41:1a:7b:2b:cf:36:
         54:47:38:08:2d:e1:f0:9c:0d:a9:8d:36:4c:a9:9a:e8:8e:e5:
         74:35:5c:67:15:c6:85:c6:28:42:d8:c8:54:1f:1d:3c:9e:b6:
         37:5a:a7:9f:30:c3:7f:73:94:7b:d0:29:ab:b2:8d:f8:78:bd:
         02:e4:fb:3b:42:ca:9d:1f:a4:7f:b5:d4:d9:d5:8c:8d:27:b3:
         14:33:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:23 2025 by rpki-client