Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad6d9830-1afb-3125-af45-13985f143df3.roa
File:                     ad6d9830-1afb-3125-af45-13985f143df3.roa (raw, json)
Hash identifier:          zkM04T8fnfZ5qKLI7gVqATjoZjZS/bmWjWMXefWOPvw=
Subject key identifier:   B7:9B:5D:9C:AA:A1:B9:84:E6:5A:DD:0C:B4:3F:7F:43:D1:F7:C0:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0787FD3AA2F72BF5CC98E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad6d9830-1afb-3125-af45-13985f143df3.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.253.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:87:fd:3a:a2:f7:2b:f5:cc:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1bbce595-9a8c-462a-bb5b-9d5ac7bf8d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:88:8b:91:3b:83:6d:2c:27:87:85:50:6a:
                    78:9c:ad:59:29:01:e2:cc:7f:c6:f9:9a:3f:65:bc:
                    5d:fd:0f:3b:82:36:fa:7f:4e:5e:b8:ec:89:54:35:
                    e5:39:29:87:24:80:44:f2:96:6f:dd:9b:2d:66:60:
                    95:0a:6e:f7:ff:6d:14:45:dd:0c:da:6f:a2:3b:e1:
                    3c:8e:0e:cf:01:2f:dc:9e:61:87:1c:e3:bf:3d:8b:
                    c4:87:03:3e:5f:9a:9a:57:af:00:0c:4f:af:53:60:
                    42:1d:2b:00:68:99:72:8d:cb:51:2d:ab:f4:5f:d9:
                    a1:74:ce:c0:b3:b7:e4:c9:dd:7c:8a:a9:a8:c3:df:
                    16:a1:fc:c4:79:0d:f6:5f:59:8c:8e:ae:2e:44:07:
                    dd:71:d9:46:27:8f:8b:37:c5:57:ef:26:7a:2c:e2:
                    56:d5:a4:b7:f7:11:76:d2:67:d6:de:08:fb:df:a3:
                    11:f9:67:34:86:df:f6:c1:fb:64:37:03:17:5c:79:
                    79:8f:ab:1c:70:89:7f:36:d1:87:c0:87:0e:5d:39:
                    96:1b:67:41:3c:65:2a:29:31:04:f2:c6:6b:99:a9:
                    d0:b6:9b:c5:89:fb:4c:fd:04:a9:f9:6e:f9:1e:b3:
                    76:5b:0d:64:4c:60:49:22:7c:1d:0e:13:6e:91:f1:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:5D:9C:AA:A1:B9:84:E6:5A:DD:0C:B4:3F:7F:43:D1:F7:C0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad6d9830-1afb-3125-af45-13985f143df3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:00:53:b8:dc:2d:98:64:7d:10:fe:5f:11:6d:fb:37:0e:3a:
         0e:3d:4a:03:12:a8:9c:42:1b:a1:1b:e6:f0:d9:46:3b:7d:c0:
         2b:29:68:78:17:7d:61:d0:08:25:68:1e:8a:84:2d:f3:a6:b6:
         2c:70:da:06:43:59:6b:77:66:f8:5f:b3:2a:1f:3e:05:fb:8a:
         02:39:03:5f:d8:36:e1:25:db:4c:a9:20:f4:32:33:4c:bc:53:
         d2:1d:eb:dc:44:8b:f1:33:c3:5a:e0:06:5a:ea:4e:88:85:7b:
         0e:06:1d:32:1f:1a:7f:3d:e5:1f:78:e2:cf:92:5a:01:1f:7e:
         4a:8c:59:44:b4:1b:9b:69:05:21:92:3e:f2:c2:e9:12:38:be:
         55:aa:01:71:cb:e3:46:d6:ba:3f:d4:7a:51:a9:d7:9c:12:7a:
         85:40:de:46:6e:d5:b4:e4:31:ac:d6:58:5a:e4:7c:7b:97:99:
         a8:1e:a8:c6:32:f1:4e:87:69:cd:d3:c6:f6:04:00:a5:cc:51:
         ca:7c:ab:e6:12:63:cc:e9:2b:dd:8e:c1:7f:b4:b5:6e:42:6f:
         0f:f8:b2:a0:15:5b:9e:74:37:6d:56:dd:f6:67:e3:9c:3a:5d:
         f9:68:1f:c0:27:9b:a0:7b:d6:e5:e5:af:65:28:15:6d:c8:11:
         02:3a:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:38 2025 by rpki-client