Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b56f4b42-9fce-3357-825e-76c826c69d7b.roa
File:                     b56f4b42-9fce-3357-825e-76c826c69d7b.roa (raw, json)
Hash identifier:          MmeqDefgzvb12wDB+YamMgY6pmGRh55MPAooPa6aFfY=
Subject key identifier:   28:03:66:A8:70:89:95:F8:76:D6:90:AF:E5:07:4A:E4:69:0D:D4:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4315B18739DAD4950F12400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b56f4b42-9fce-3357-825e-76c826c69d7b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        174.168.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:5b:18:73:9d:ad:49:50:f1:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=05b14313-28cb-4a91-89b2-f917bc4419b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:14:a1:d1:e8:1b:e4:dc:dc:0d:1d:eb:3d:
                    48:50:d3:52:05:d5:21:75:1a:1f:e9:19:bf:87:51:
                    a0:4b:25:ce:e3:ca:87:a4:0b:71:7b:82:38:2c:8a:
                    75:96:bd:d1:e6:49:38:cc:d3:9f:5a:cc:c6:c6:71:
                    c1:0f:c8:00:88:c3:0a:ad:47:2b:99:cc:74:56:e5:
                    4b:38:4a:33:59:89:60:64:44:a9:de:fc:d2:da:d1:
                    0a:66:c1:1b:bc:c9:cc:14:ae:bb:97:4f:00:1e:c9:
                    5f:86:1e:96:22:1d:89:d0:bc:10:37:f5:7e:57:e8:
                    9d:3f:b7:23:e5:0e:e7:05:93:71:07:89:22:79:ae:
                    3e:67:7d:90:9b:ca:a9:63:e6:fe:35:17:5b:d5:0d:
                    53:50:f3:32:67:77:b5:42:2c:01:5c:5e:35:c4:7b:
                    65:27:b3:99:e5:3c:18:81:b7:21:e2:8b:14:09:6d:
                    a1:2c:fd:2c:c6:53:c8:5e:f7:0f:fb:c2:6f:e6:dc:
                    5a:6a:b8:83:21:cc:b1:50:42:db:95:b6:2b:73:c7:
                    72:c6:68:17:55:86:ff:fd:d7:2a:76:9e:40:ce:02:
                    d6:ac:76:40:58:23:7c:51:cb:f8:5d:4e:e5:11:76:
                    f9:a0:66:64:18:58:32:6d:6b:a8:99:c2:3a:64:a0:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:66:A8:70:89:95:F8:76:D6:90:AF:E5:07:4A:E4:69:0D:D4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b56f4b42-9fce-3357-825e-76c826c69d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:44:f2:45:9b:5f:fb:34:65:17:b8:08:1d:cf:ff:f8:95:c1:
         d8:37:51:5f:ff:cd:07:1a:f7:f4:b3:fa:a9:ba:7f:07:79:3b:
         50:24:18:40:ab:2d:77:1c:51:02:9d:67:1a:09:33:f4:07:9c:
         82:0b:0a:d8:94:83:4f:97:fc:80:0a:df:8b:1c:c4:60:5e:02:
         cf:71:6b:31:d6:c7:c5:0c:5e:ab:8f:5f:4b:db:f9:e2:94:a8:
         05:ae:39:74:e7:1e:82:c5:ab:24:ea:16:ab:b2:7e:43:40:48:
         2e:5d:da:ce:3e:fb:bd:60:25:95:8e:7a:d2:e3:cc:d1:f4:12:
         84:e1:d6:f1:e7:79:e9:bf:74:25:38:6e:67:02:26:4b:6a:0f:
         8c:c3:07:28:b6:91:73:0e:29:a4:20:c8:ff:ba:01:94:d5:44:
         17:a5:a3:fb:be:55:6e:2b:a3:b9:c0:11:06:91:8b:2f:e3:e5:
         4a:b3:e9:ef:2e:45:53:1f:95:18:89:6f:e6:bf:b4:c4:0c:b3:
         cb:30:9f:d1:b8:16:35:f2:3b:b4:05:2f:65:01:37:40:e4:88:
         39:20:19:52:22:1e:66:03:53:04:b8:d4:82:34:ce:c4:97:26:
         7f:bf:50:f8:8f:b7:f7:31:1c:e7:25:c3:3f:4b:ed:6b:64:d5:
         34:34:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:56:32 2025 by rpki-client