Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af65b846-d4a1-34b8-8f66-e79654dad1cd.roa
File:                     af65b846-d4a1-34b8-8f66-e79654dad1cd.roa (raw, json)
Hash identifier:          wCNFZgStUvIPpq33aDb2vEIgWEiTbvXF64ySq4SNlZQ=
Subject key identifier:   F2:A5:37:07:76:76:3D:1E:0D:81:B6:5D:4D:DF:32:08:47:BC:25:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C060E261E94BCD37A9ECD88
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af65b846-d4a1-34b8-8f66-e79654dad1cd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        24.1.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:0e:26:1e:94:bc:d3:7a:9e:cd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7d7da0cd-74f3-4cd6-80b1-f02648ff183c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:02:f5:55:62:50:e8:d9:1c:bc:26:5b:8a:
                    09:24:d0:3d:1f:b5:ad:0e:2a:5b:42:70:7f:ae:d0:
                    ce:e7:12:cc:a7:96:fd:72:ef:2c:2b:1e:a4:c2:f2:
                    46:5d:8d:07:45:05:b1:d2:16:f5:2b:e3:f5:9f:82:
                    97:18:08:7a:1b:5f:3d:52:6e:bc:52:72:a9:0f:ed:
                    29:a8:5c:93:35:ef:f3:b6:5c:dc:01:52:03:1e:3f:
                    ea:ef:be:78:66:8c:ac:38:53:ae:69:5a:1b:87:66:
                    d1:ea:61:a4:11:4e:e7:0a:46:0f:f3:03:70:b6:e0:
                    03:e9:d3:4e:d2:e8:a5:91:b7:88:9c:38:92:0f:c0:
                    a4:b2:1d:23:73:cd:dc:20:07:4a:60:e9:c3:04:4e:
                    11:61:df:87:f5:4f:07:fc:fc:c2:0c:46:88:ed:b9:
                    03:cd:86:5a:70:b5:00:6c:fb:73:e1:ad:3f:6b:b3:
                    71:b3:e8:19:31:bb:29:27:ec:80:36:12:82:50:b9:
                    1b:d4:d9:9d:43:37:2f:55:c2:76:b5:27:54:03:2b:
                    52:25:fe:33:0e:bd:52:fd:14:54:54:40:b1:61:43:
                    67:e1:44:68:f2:53:6a:86:cb:14:1a:ad:ca:3a:00:
                    bd:98:46:78:72:8d:2d:36:19:46:38:ac:ba:eb:44:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A5:37:07:76:76:3D:1E:0D:81:B6:5D:4D:DF:32:08:47:BC:25:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af65b846-d4a1-34b8-8f66-e79654dad1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:74:65:14:69:a8:b4:78:c9:b6:9f:e8:1e:6f:24:0a:52:dd:
         3a:6d:67:c8:8f:1e:35:8b:f9:65:da:5f:05:ee:b5:e6:84:0f:
         0f:62:36:2d:30:1b:e8:53:be:c9:ba:4d:fa:fb:33:59:38:70:
         31:ca:6f:b9:fb:fd:c4:18:65:2d:f7:a9:5e:79:e2:1e:7b:28:
         89:b5:32:81:e9:16:ea:4a:82:58:c9:18:8c:fe:be:66:c2:89:
         e3:1f:a5:32:bf:37:7e:68:dc:f6:29:03:e7:86:e5:6a:2a:ab:
         57:bb:54:d2:7a:0f:79:bb:09:f7:f7:82:fe:a8:58:73:fc:a7:
         c1:bd:44:5e:6a:75:16:01:6d:09:8a:45:24:13:76:ce:27:8b:
         d4:1a:39:55:ea:13:bc:25:b2:e7:f1:d0:8a:a4:e7:a4:f4:da:
         18:7f:7a:c5:51:bb:06:bc:da:88:43:87:ca:a1:8c:65:db:61:
         63:a2:76:6b:7e:5a:0f:81:f3:8d:62:04:de:cf:c2:07:31:85:
         16:b8:c6:91:8e:d3:18:3d:af:c7:40:44:79:b7:f2:23:ee:6e:
         c7:42:0d:8c:3b:12:14:f2:2d:57:f5:88:39:a4:3f:08:25:84:
         71:f4:fe:6b:45:eb:3e:84:92:f2:a0:93:f2:54:90:95:f9:49:
         20:1f:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:51:28 2025 by rpki-client