Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd543e6e-a711-3acf-8b80-5f0e292fb734.roa
File:                     cd543e6e-a711-3acf-8b80-5f0e292fb734.roa (raw, json)
Hash identifier:          NuarxZcD0Rxr5yMhChXPKPNso2Ebr4DS8NRQAM0y4sQ=
Subject key identifier:   0D:82:CA:1B:CA:61:62:3B:59:7B:8F:18:0F:B1:27:C6:52:3A:D2:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6B86E0CE21224F92234100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd543e6e-a711-3acf-8b80-5f0e292fb734.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        69.245.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:86:e0:ce:21:22:4f:92:23:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=ceb6f57d-0e36-46d4-bfda-a165984024cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:e2:bf:7a:c4:c1:30:ef:bd:64:e9:ee:54:
                    73:46:01:2a:d7:08:a7:07:c4:68:fe:4f:df:25:38:
                    2b:00:b2:32:d8:99:a1:90:fd:f7:80:12:3c:62:5d:
                    cd:0a:21:7e:d0:da:8d:2b:19:e2:7b:6e:c0:fc:5f:
                    16:98:23:f7:fc:f0:f0:ef:4e:9d:74:09:aa:a9:15:
                    84:c4:0a:c3:9c:ef:32:51:7f:ce:3b:a8:5f:b2:24:
                    50:62:d5:2b:12:4e:a3:bc:88:c8:3c:eb:00:30:aa:
                    d6:7b:36:80:68:86:f2:c1:85:7c:e6:d6:ac:f2:7d:
                    a4:83:4f:21:79:f3:d0:a3:34:2a:13:86:91:e7:72:
                    5e:68:9a:bb:7b:ea:61:05:94:84:2c:cf:04:88:a3:
                    d1:0d:fe:ba:c7:4f:5b:df:03:6e:4b:df:4f:10:0a:
                    b9:78:3f:6e:a7:e5:eb:5b:34:b3:b0:1c:86:99:60:
                    16:4c:05:be:d7:c9:11:91:99:41:cf:de:f5:a8:5e:
                    40:95:ab:80:5a:c0:fa:78:3b:d0:31:61:55:eb:b6:
                    35:ac:7f:66:51:93:52:3a:a8:99:54:a8:92:48:ad:
                    42:74:08:4c:97:5d:29:d9:74:a1:76:07:cb:13:cf:
                    6c:0d:63:06:2d:eb:04:26:68:b8:35:9e:f6:a7:da:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:82:CA:1B:CA:61:62:3B:59:7B:8F:18:0F:B1:27:C6:52:3A:D2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd543e6e-a711-3acf-8b80-5f0e292fb734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.245.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:e4:6c:39:f8:ea:4e:74:61:09:b4:26:5c:40:2c:ff:2f:
         b6:33:0f:15:7e:2f:36:10:6c:9a:93:61:17:f1:7c:5d:81:66:
         b7:75:fa:d9:f8:e9:cd:55:74:a6:ba:d0:9e:33:ae:f5:ac:a2:
         18:fa:92:e3:55:4c:14:f2:42:ee:5b:5c:fb:c1:8c:3e:93:21:
         3a:8b:74:55:88:48:20:a1:18:0b:ac:97:d7:39:2b:2c:9d:b3:
         e8:98:31:d9:af:3a:10:17:cc:d6:46:01:fc:6d:16:11:19:5e:
         e2:2d:f5:be:f0:ed:31:5d:e8:aa:6d:48:aa:1c:e6:a6:c5:22:
         ba:bb:ed:b7:57:2c:25:84:2a:f1:70:84:1e:f7:a4:c5:58:7f:
         b0:41:b6:d2:b4:87:10:77:53:ab:b4:7d:90:00:69:7a:ec:70:
         6f:fb:4e:01:84:ca:0f:13:14:9f:e8:1a:d6:da:72:e9:2d:d3:
         2a:41:3d:af:64:a7:99:88:84:2b:a8:99:e2:e0:26:2f:1d:1e:
         6f:90:d8:13:f8:08:6b:5b:3f:63:bf:dc:95:3f:15:62:18:79:
         6c:d5:82:e7:6d:bd:69:0f:2b:22:9b:62:04:8b:2c:98:57:b2:
         1d:94:d4:fb:4b:6c:83:ad:47:ec:2e:b3:c3:f5:0a:f1:3a:f1:
         4a:5f:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:50:49 2025 by rpki-client