Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5d30be9-7b47-38bf-bcdd-5afb49ec46cf.roa
File:                     b5d30be9-7b47-38bf-bcdd-5afb49ec46cf.roa (raw, json)
Hash identifier:          gTgYTIHqbAOn/K62TnvQbuUhWDb8L4qqiEHSgqbSPdM=
Subject key identifier:   A2:28:E7:27:28:FA:92:81:86:E5:6C:71:14:11:26:EF:F9:0B:63:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06CD22CAC06B919044EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5d30be9-7b47-38bf-bcdd-5afb49ec46cf.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        24.5.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:cd:22:ca:c0:6b:91:90:44:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f3a243af-662b-45d4-b4c3-2fd6c61e41d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:73:06:84:56:75:3f:1f:2e:03:85:61:cb:
                    29:d1:a9:be:fe:fb:8a:12:07:d8:89:60:00:5d:27:
                    19:fb:6e:1d:50:15:5a:18:1f:0c:f4:a3:88:94:43:
                    8f:0f:95:9c:74:f5:a8:fa:e8:4b:f5:0c:a7:c7:3e:
                    20:bd:2b:65:2e:48:5b:32:b4:b4:58:dc:18:28:39:
                    59:78:04:c2:83:5e:44:65:3c:f4:13:0d:dc:b3:e4:
                    59:29:39:93:ce:89:ec:4a:de:c2:65:e6:64:56:fe:
                    d2:52:c2:f5:d7:9f:ce:34:7c:43:37:c6:42:90:fa:
                    39:71:1a:b5:b9:87:8f:17:1e:20:c2:1c:fd:e2:0f:
                    b5:35:64:92:d2:c7:fa:f5:c2:13:f4:f4:97:de:f1:
                    d6:e5:bb:25:77:d0:fe:fe:ba:54:ed:70:f0:2e:cd:
                    d6:1e:78:76:6e:cd:82:63:7d:38:1f:0c:d8:57:90:
                    4c:ac:f7:54:01:98:dc:16:31:e2:8f:e2:ae:0d:75:
                    c3:67:86:e7:84:d5:ae:9e:da:33:7d:7b:13:0e:f7:
                    84:bd:a9:be:36:24:db:26:b0:5c:ed:11:88:10:5c:
                    e8:cb:fe:48:bd:8f:1e:2d:10:e6:a6:b5:80:41:5b:
                    7a:76:de:26:6a:c2:44:97:15:0d:0c:42:b3:b1:54:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:28:E7:27:28:FA:92:81:86:E5:6C:71:14:11:26:EF:F9:0B:63:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5d30be9-7b47-38bf-bcdd-5afb49ec46cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b6:51:ea:7a:ee:e4:4e:93:0c:31:71:97:e7:c8:4f:5f:78:
         56:20:35:2b:fc:90:ef:e4:3f:6b:1d:9a:2d:7c:5a:f4:83:31:
         9c:f5:70:07:ed:6f:69:99:92:18:48:6c:2b:91:e2:f9:63:83:
         41:d5:61:f2:64:e7:e5:f8:5e:1c:5b:c6:c5:62:b2:00:ef:c4:
         6a:b8:6b:b1:6b:43:8e:40:08:7c:db:4e:b2:15:df:fa:be:57:
         2e:3e:62:b1:ff:af:d9:2b:10:8a:6a:49:da:dc:b4:da:1c:b7:
         d5:d2:24:ce:58:d8:aa:c3:89:50:7e:05:2f:46:8c:9f:c4:d5:
         cc:f2:25:af:4e:a3:70:1d:6e:da:cb:e4:3a:22:00:7b:3e:51:
         25:27:f5:9a:11:22:e8:70:df:e9:7c:91:a9:fc:a9:c5:ec:6d:
         58:11:fa:95:f6:5e:5a:de:fa:24:7e:46:c8:32:e8:be:20:bf:
         bc:4c:d7:67:00:83:ce:c9:3e:c9:73:0c:d5:d6:4f:6f:84:d9:
         e9:27:4d:b4:bb:d1:89:15:59:2c:d1:b9:d3:b5:f2:6f:76:bc:
         31:a9:51:db:4c:23:b0:dc:a0:30:41:81:56:d7:fa:61:18:ba:
         3d:02:57:0e:f5:f9:be:83:d5:52:1d:9c:65:e4:f0:2f:7a:9e:
         2a:2d:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:23:54 2025 by rpki-client