Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba5c1b17-f337-367a-b239-71306a347499.roa
File:                     ba5c1b17-f337-367a-b239-71306a347499.roa (raw, json)
Hash identifier:          +bLfzJh0c6/Y1+8RMv4+P+9a+HFIIXnSAMq+fUH991A=
Subject key identifier:   94:BA:7D:7F:F3:1E:27:E8:23:19:5E:E0:85:BF:D2:7B:F2:E9:65:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0744F141B934F90A605500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba5c1b17-f337-367a-b239-71306a347499.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        69.142.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:44:f1:41:b9:34:f9:0a:60:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=7c3c9809-320f-4067-9f6c-1db9cd318b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:d0:eb:b2:ec:3d:3f:c9:9b:ff:10:50:fb:
                    9a:9a:32:a4:7f:31:83:e0:c2:a9:ba:32:0d:f6:8d:
                    db:e7:33:df:c7:53:12:0e:8c:a9:9b:a7:60:d6:37:
                    59:c2:ba:49:ed:82:72:a5:fc:03:5c:90:9e:e7:7d:
                    f2:76:eb:c2:f1:0e:72:d0:05:f1:19:58:8e:41:6f:
                    7f:00:3f:64:a3:ea:66:38:ed:c9:9f:57:57:d5:f8:
                    9a:9e:c9:6b:ba:b8:a4:bf:26:be:c4:a4:57:c9:87:
                    b9:a7:bc:04:ea:d2:a1:ef:f1:3d:83:e1:c0:9f:89:
                    0a:46:b6:4e:04:5c:ff:18:65:93:81:a9:91:98:f5:
                    a9:ab:9c:bb:f9:4f:2c:5d:3e:c5:9f:71:74:de:7d:
                    92:2a:45:67:45:1a:d3:f0:0a:fc:18:89:eb:6b:a0:
                    17:c6:2d:0c:12:22:5b:96:6c:e3:c7:76:a9:b6:21:
                    56:ad:f5:b9:24:d9:a3:4d:b1:0b:8c:67:13:db:93:
                    fd:8b:9a:35:05:d2:f8:1d:de:74:89:53:fe:53:d2:
                    59:b5:dd:02:09:16:a7:44:fe:5c:d1:1b:d9:fb:d3:
                    5d:1f:59:73:ca:ac:47:26:c2:b2:85:49:6c:75:29:
                    f8:2e:57:47:78:99:f6:2d:60:58:53:ec:8f:b3:a1:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:7D:7F:F3:1E:27:E8:23:19:5E:E0:85:BF:D2:7B:F2:E9:65:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba5c1b17-f337-367a-b239-71306a347499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:39:16:cb:af:63:ad:e9:b9:27:d7:1e:e6:a2:2f:e1:1c:
         48:4d:03:bf:78:e6:a5:61:88:8b:c0:56:de:3f:21:f5:4e:85:
         a5:ad:c9:35:9c:22:2d:8c:94:20:6d:7a:dc:2c:25:89:e1:b8:
         29:2a:3b:e8:ff:71:3b:14:93:50:57:2c:ac:4d:81:a2:d6:20:
         9f:be:6b:52:cb:84:3f:7d:a1:b8:d6:cc:c3:12:a3:a5:99:80:
         ab:32:b6:db:55:31:35:5b:20:e6:98:52:6a:9d:c7:1e:0f:7a:
         73:1d:74:5a:cd:e2:ce:4b:3b:0f:6c:8b:49:ea:90:c1:71:e3:
         eb:30:29:3e:66:59:cb:23:de:49:e4:70:3e:74:76:be:8f:2b:
         a6:2f:27:ec:7f:1f:91:9f:d8:55:e6:fa:cc:69:7e:83:23:dd:
         40:82:62:63:62:89:ff:8a:2f:9b:c4:33:ab:e8:29:af:42:16:
         e5:6e:94:49:15:68:fd:81:b9:ce:31:46:05:13:b0:a5:f3:70:
         90:b0:78:f1:da:d0:92:36:5f:10:22:c1:22:ec:79:72:28:82:
         d3:91:17:4a:b7:32:d7:37:97:9e:2b:36:f0:b3:90:e5:4d:28:
         9d:41:c7:11:99:3b:ab:69:d9:7d:6f:a0:4c:66:ea:8c:32:2d:
         f5:54:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:40:29 2025 by rpki-client