Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cce84916-94b4-31b0-bed8-909a73369498.roa
File:                     cce84916-94b4-31b0-bed8-909a73369498.roa (raw, json)
Hash identifier:          56dispoCD+gNi4Bz8XhMD+rr8tPnKLw2NhLmmqCD5J4=
Subject key identifier:   A8:97:2B:8B:E0:0B:DC:15:84:5E:DC:FF:7F:AF:C9:C2:83:92:01:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5323D1A2E093D141912C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cce84916-94b4-31b0-bed8-909a73369498.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        71.195.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:32:3d:1a:2e:09:3d:14:19:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=19376e7d-75c2-4d78-a963-85ad3bbfb8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:84:17:30:17:25:21:3a:1d:97:95:a8:a8:
                    57:06:5b:91:0b:56:b4:28:6b:cd:8b:e1:0f:6c:3f:
                    83:ff:c0:c4:85:b6:8a:99:14:8a:34:d3:35:96:54:
                    e7:4b:16:f9:7e:1b:60:15:e8:97:50:c6:1d:b8:c2:
                    ce:22:f4:63:bf:24:5b:56:32:9d:54:62:44:96:e6:
                    a6:77:ca:1b:ba:fb:34:1b:ed:00:a1:2e:a6:d5:de:
                    00:71:65:5f:7d:c0:2b:1e:19:ae:c2:08:c9:6e:b7:
                    f0:7e:b7:49:b8:30:82:04:c1:9a:98:aa:a2:2e:9a:
                    66:33:0b:98:d8:ac:21:cb:93:dc:ef:59:0f:c8:d3:
                    09:7f:ab:c7:f3:93:de:71:b7:2c:33:3b:11:1a:e9:
                    4e:ec:76:bb:d7:a1:37:7c:82:69:41:aa:a2:b2:8e:
                    c2:90:e9:e0:86:08:a9:94:34:4f:0b:37:a5:2a:39:
                    e9:24:e6:af:fa:a2:1f:f6:a6:8d:a7:60:02:f8:84:
                    07:52:e9:14:40:d9:37:c3:59:3a:cc:e7:0c:3c:35:
                    d3:6d:07:e4:ab:66:ad:49:d5:8a:81:d2:1e:c7:12:
                    a2:b8:16:81:9f:b5:b8:8a:94:57:23:62:2d:31:e1:
                    84:91:29:3d:e3:dd:3c:2f:7a:2e:90:05:bd:ba:a2:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:2B:8B:E0:0B:DC:15:84:5E:DC:FF:7F:AF:C9:C2:83:92:01:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cce84916-94b4-31b0-bed8-909a73369498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:81:66:15:23:f4:95:27:d5:f9:8a:bc:fe:38:93:32:5a:7d:
         b6:23:bf:53:12:98:5a:b7:2f:26:9c:cd:ae:fb:95:14:67:8f:
         ca:02:bf:5d:73:38:95:24:34:34:fd:4c:92:74:fa:fd:9a:78:
         e2:fc:02:1e:95:fb:48:e1:4d:fe:f6:d6:46:b6:69:3b:89:cc:
         c8:32:80:67:dd:70:82:a6:95:13:f1:1e:91:f9:c6:74:e9:34:
         d7:e2:3f:ed:11:f9:92:55:34:2e:a0:ef:01:ca:43:3a:d0:bc:
         a6:11:99:47:85:07:21:44:c3:91:ea:bc:89:6a:85:0f:a3:e2:
         e9:53:f1:7b:f7:f8:f7:a2:71:98:c6:cf:44:e7:ef:77:fd:56:
         53:e5:47:7b:8b:61:31:f7:8c:18:75:9d:26:6c:c7:d0:f5:33:
         e2:ea:52:7b:4f:4e:e4:af:54:08:7b:07:f2:2e:99:ff:e5:ac:
         e4:bd:a2:12:f5:90:da:01:e0:4a:e3:a5:0c:76:4f:93:61:7c:
         8c:9f:1d:3a:7e:3e:2b:8c:90:1a:51:be:97:c2:f8:bc:a3:2a:
         3a:7c:db:05:91:9c:87:a1:be:8c:4c:ec:59:4a:22:c6:9c:47:
         a5:0c:62:6c:aa:e3:7f:84:c1:b4:ce:1a:00:a4:43:77:e5:63:
         14:9b:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:56:00 2025 by rpki-client