Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd475950-643d-326c-9bb6-59e8ff4b6e0d.roa
File:                     bd475950-643d-326c-9bb6-59e8ff4b6e0d.roa (raw, json)
Hash identifier:          4wIxEnfuIThec5VDi+Cvcr7ob9sf8ZGf5hmpwkyFdME=
Subject key identifier:   BF:73:D8:B8:C6:4E:7B:3A:E1:6C:3B:9D:72:E0:60:50:6C:FB:17:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DA08F4C4AE7C5C6082680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd475950-643d-326c-9bb6-59e8ff4b6e0d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7015
IP address blocks:        69.241.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:a0:8f:4c:4a:e7:c5:c6:08:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=10685e3e-14ee-47ad-b7d3-1565da024c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:68:c6:8c:71:82:62:67:aa:3f:5d:fc:6d:
                    a9:ef:aa:64:85:62:0d:ac:75:49:cd:43:65:2e:52:
                    d5:74:70:ea:bf:b6:fa:f5:2f:ce:c9:c4:82:59:b8:
                    a0:df:88:99:73:32:2f:aa:15:c0:75:80:fe:fc:68:
                    fa:27:73:a3:9d:ea:1c:ee:5b:65:7a:a8:f2:cb:44:
                    a1:18:ba:c9:83:6a:1f:3b:3f:79:84:2c:b5:bc:fb:
                    00:11:4f:f2:f9:d6:0c:50:42:0e:7b:bf:ad:cc:2d:
                    c6:3d:f1:14:c1:b4:8c:ea:40:b6:7a:a6:20:38:c1:
                    0c:ca:14:4a:56:6c:5a:3c:ee:1f:17:04:df:94:48:
                    70:74:65:93:e4:e0:ef:f2:e1:72:5c:45:af:ff:18:
                    cd:63:0f:f5:93:fe:e4:85:0f:fc:b0:19:bf:c6:9e:
                    fe:36:75:94:d9:6b:d3:19:06:ac:87:6c:ff:d0:9c:
                    56:0b:bb:e6:ca:fa:3c:1e:3a:c5:c4:0d:82:76:44:
                    a0:83:1a:16:cf:16:06:a7:60:06:10:8a:03:b0:d8:
                    3e:30:25:4e:f8:a3:88:32:57:1b:e0:82:0a:12:ee:
                    44:b4:d5:ae:b8:db:00:8f:98:a3:22:59:d3:39:87:
                    58:b1:8d:c2:36:d0:fa:c1:60:d8:5c:8c:bb:f8:ed:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:D8:B8:C6:4E:7B:3A:E1:6C:3B:9D:72:E0:60:50:6C:FB:17:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd475950-643d-326c-9bb6-59e8ff4b6e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:84:66:b9:f0:2e:ea:7f:36:a3:5a:15:79:f8:9c:4f:11:
         7c:4c:c3:1f:aa:53:2c:ab:72:fe:85:c5:3c:76:93:f0:48:11:
         26:57:9e:9e:ec:3c:a0:c6:e0:73:59:7d:72:52:c9:a9:04:1a:
         d6:a5:2f:56:58:5d:46:0e:90:d5:13:8d:b7:5c:eb:61:08:da:
         e7:53:ef:e6:50:97:f1:6b:75:89:ae:05:92:81:fc:3e:12:ad:
         fa:ca:63:c1:5b:a7:3f:8a:3a:43:27:4a:0b:c9:b4:8d:61:81:
         b5:52:e2:51:ae:62:43:30:a0:0d:20:1f:ac:f5:7e:16:37:db:
         26:1c:16:a3:5e:7c:fa:88:19:4a:d4:8a:09:4d:2a:06:fd:b6:
         b3:86:ab:f1:58:12:26:fb:0b:9e:89:e6:32:c6:c6:30:d7:81:
         6d:a5:ee:8d:d6:03:f9:7a:91:c0:9e:e1:d0:7f:56:56:97:0c:
         02:bc:68:b8:8c:56:d9:0e:04:de:11:89:91:f6:c5:d3:5c:48:
         46:f5:06:66:a8:9a:c5:1c:19:c1:d5:d2:f3:e7:5a:85:0e:e6:
         4b:c9:41:54:ca:51:37:6c:5f:31:98:9c:70:0e:af:95:98:df:
         01:b0:1f:92:69:0e:13:46:0f:74:21:95:ca:eb:86:04:83:a0:
         10:ac:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:26:30 2025 by rpki-client