Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4d2975b-a6d8-34ea-8336-dace10175b6f.roa
File:                     c4d2975b-a6d8-34ea-8336-dace10175b6f.roa (raw, json)
Hash identifier:          zvrBitnBxLpUY/ZRyd4cH5D3eLvXt0m0gqGEnffhlXQ=
Subject key identifier:   11:D8:5C:69:8B:DC:7C:77:85:F1:5F:65:DA:CC:D9:E4:26:A8:38:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07870E29B84D7FBB25ADC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4d2975b-a6d8-34ea-8336-dace10175b6f.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.249.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:87:0e:29:b8:4d:7f:bb:25:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=28acfbc6-6003-4f93-9eb9-de1f8c58cdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:95:df:26:aa:0d:85:42:19:d4:d1:48:91:
                    c7:ea:32:e2:b2:70:78:be:54:ba:94:97:25:48:37:
                    96:0d:e7:c3:36:c5:a5:c2:01:87:c8:11:c0:77:78:
                    b4:34:32:0b:e9:95:dc:6c:7f:33:7e:e5:d1:7b:7d:
                    7e:49:c6:61:74:1f:4e:5e:a6:2a:30:87:c5:d4:5d:
                    d3:56:cc:af:04:86:6e:f9:c8:ba:78:16:60:21:68:
                    35:59:9b:43:c7:95:6d:d1:c7:0a:7b:68:a1:a9:3f:
                    73:8f:3e:50:03:be:29:81:e7:69:2c:13:5a:3e:d0:
                    bc:37:2b:26:3b:71:cd:19:7b:bd:94:71:00:14:65:
                    ba:a8:de:ad:e4:f5:b2:61:3e:4f:92:de:54:14:90:
                    3e:8d:5d:b6:87:95:2d:c6:54:72:b7:da:a2:6c:a7:
                    18:3d:5b:cd:59:41:f5:82:d3:18:f2:97:47:56:36:
                    71:53:9b:14:65:34:22:95:41:c8:96:86:15:a5:33:
                    59:f1:bc:77:fd:5b:fb:29:99:9f:39:8c:3c:d6:b3:
                    87:2a:f9:4b:20:84:68:dc:23:65:a3:cd:f4:f0:ff:
                    fd:1d:12:6f:ea:aa:55:47:b8:a9:86:a3:7e:12:09:
                    64:13:dd:a6:9f:00:a4:db:df:2d:c6:83:ba:82:4c:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:5C:69:8B:DC:7C:77:85:F1:5F:65:DA:CC:D9:E4:26:A8:38:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4d2975b-a6d8-34ea-8336-dace10175b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:52:e6:37:7e:b4:fb:c1:5e:7c:98:c8:ed:18:a7:0b:57:
         d0:b9:e4:e7:0e:4b:f3:90:d6:5e:1c:83:95:92:03:c6:24:fa:
         17:ad:eb:7f:ad:68:26:94:00:0e:20:78:fb:cd:fa:ee:3c:ab:
         40:1a:19:66:c0:71:9c:ce:b1:de:d2:5c:ec:7f:27:3d:28:95:
         92:31:9b:6d:c2:96:fc:5f:b9:1c:61:b3:c3:ba:9f:a8:c0:bb:
         bc:46:1b:ef:16:d4:5b:03:ca:67:69:08:a6:39:b0:51:b7:5e:
         bf:85:65:2e:82:98:96:34:80:67:71:c8:3a:61:54:a5:80:10:
         30:2e:fe:a6:25:48:58:4b:f0:72:d2:50:aa:79:34:d5:f5:f5:
         3b:05:12:b4:6d:54:4c:ff:64:4c:0e:09:14:df:07:84:bf:4f:
         f4:1c:40:73:27:96:d3:d3:d8:d0:a0:4c:d9:57:a8:98:3d:f8:
         68:f3:53:84:27:96:87:93:40:5f:31:de:00:ee:25:05:46:23:
         44:61:02:77:2f:b3:8b:45:f6:5d:b0:cb:c8:0e:e7:85:e1:d2:
         19:74:cf:84:9d:9c:74:82:50:c4:13:f9:bb:18:59:5e:8e:5c:
         58:2a:42:da:cf:c8:27:dc:a1:dd:fe:34:5d:80:11:6b:63:1b:
         e6:18:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:07:08 2025 by rpki-client