Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa
File:                     ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa (raw, json)
Hash identifier:          vvHPX49gYyczM+WMg7DHKwytQC9IuS6M6oW0++1akiM=
Subject key identifier:   3A:CF:CC:A7:0C:F4:D2:E0:4C:15:68:19:9A:17:67:2D:51:3C:F3:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992948B8E06FBAA447FA5F380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        24.7.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:8b:8e:06:fb:aa:44:7f:a5:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=4e682281-d98a-4e3d-a735-389d4fb7110a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:ed:f5:7b:21:69:cb:ee:19:6b:94:d5:7a:
                    2f:bb:4c:1e:70:8b:a5:7b:a9:fa:c4:1f:25:80:0e:
                    c2:de:9e:86:80:6c:db:40:d5:00:74:74:dd:fa:b8:
                    68:6f:0f:15:ce:a6:48:3f:a8:1c:d9:c4:d3:59:b8:
                    27:cb:97:27:e2:7d:b5:13:d1:f0:b7:23:20:b0:bd:
                    37:db:41:af:32:b6:dd:dd:84:71:1a:6a:35:73:37:
                    35:c2:70:cc:97:84:23:31:2d:5e:73:3a:42:7c:a7:
                    cc:7a:df:9e:9f:00:db:6e:6d:54:38:f2:bc:4d:1f:
                    a9:ca:20:3b:84:64:7f:0d:96:97:43:f4:72:fe:9d:
                    9e:8d:13:53:9c:1a:f8:5b:b3:43:76:5b:a5:68:f9:
                    69:c9:84:16:7f:d7:76:43:0d:a8:c5:70:99:40:04:
                    b3:07:aa:13:c7:3d:8f:3a:f5:57:c5:8c:2f:06:83:
                    8a:89:02:71:f2:8b:7c:df:63:02:4f:5b:79:4a:7f:
                    e2:91:69:37:ad:48:0d:6e:46:0e:90:02:28:50:81:
                    e2:e2:11:26:97:b1:d6:e0:18:b6:ae:07:2f:2e:9f:
                    b0:64:12:4e:42:c3:c4:26:4d:02:fc:b0:fa:86:19:
                    f6:9b:b4:82:ff:2e:c9:37:77:c5:37:3a:85:b5:54:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CF:CC:A7:0C:F4:D2:E0:4C:15:68:19:9A:17:67:2D:51:3C:F3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:36:7a:d4:b6:c3:9b:13:2e:f5:09:04:61:20:89:f7:7a:13:
         87:b1:4c:1d:c3:01:9f:ca:a9:9e:1f:8f:8f:33:18:28:9f:e8:
         bd:d0:bc:59:ec:3e:a1:cd:2d:ff:7b:bb:d5:e8:7b:41:2a:7d:
         6a:34:72:ee:3e:4b:cb:3f:c6:ed:56:17:74:91:55:b3:92:e2:
         08:bd:cb:f2:61:f7:44:d7:71:dd:24:bd:68:40:e2:60:77:05:
         5d:df:69:f8:15:9c:2d:13:0f:0d:9e:3a:99:40:a5:cf:44:84:
         82:e2:76:f7:ec:69:9e:41:04:b8:39:8c:a9:00:63:41:8c:ca:
         4d:5b:52:72:ba:72:f8:e8:5a:18:f7:be:cb:1d:26:a6:92:68:
         e7:78:6e:94:ac:a5:3c:d1:27:56:60:36:26:40:0a:c8:27:e2:
         49:73:b6:73:53:b0:4f:49:e4:44:56:53:f9:4d:57:44:45:f3:
         2c:09:6a:31:86:25:dd:ec:f5:5b:a3:7a:ce:12:03:a8:3d:45:
         2b:35:b9:84:39:42:6d:2e:35:1d:57:a2:fa:c8:17:9c:4a:c4:
         25:03:45:f4:da:30:0a:d3:44:f1:b3:9c:a8:96:ca:21:a5:05:
         e2:89:c0:f4:dc:3d:f9:33:a4:7b:dc:89:ee:71:88:ee:e7:1d:
         3a:87:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:50:27 2025 by rpki-client