Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15c78d8-1942-3699-8ec2-e0c56004732c.roa
File:                     d15c78d8-1942-3699-8ec2-e0c56004732c.roa (raw, json)
Hash identifier:          0FR0PX+TIRJBLNd9LE5/7MLkuVzZ7rrUIT8WkW9YIZ0=
Subject key identifier:   70:86:3C:DD:D8:35:46:1A:78:A1:D4:E2:31:51:E7:7E:07:E3:CA:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06C7FC6B3D48C1CD7E5F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15c78d8-1942-3699-8ec2-e0c56004732c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        24.130.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:c7:fc:6b:3d:48:c1:cd:7e:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=447ddc78-6d2f-4512-b809-7a58614cd832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:62:d6:71:95:d9:55:b8:98:c6:38:3a:8a:
                    81:73:bc:d9:35:10:0b:bc:da:92:a5:ac:04:bd:b5:
                    91:eb:03:96:b5:04:b0:05:91:76:43:3b:0f:a9:92:
                    b3:d9:53:18:b1:f5:a3:ad:1a:29:cb:6b:22:f3:e1:
                    59:93:db:03:8d:79:db:10:37:0e:d6:2f:44:9e:ac:
                    c3:35:67:cf:c9:31:5d:6e:09:25:c8:0a:2f:24:0c:
                    9a:bd:7f:25:52:7d:3d:eb:d4:dd:57:17:80:52:07:
                    a5:ce:3b:d5:be:a2:99:f7:43:2b:a9:97:63:0f:ba:
                    aa:d6:55:48:64:4e:ab:dd:9a:8b:9f:44:8c:f3:11:
                    68:43:a0:ce:ec:4e:05:55:ec:c2:27:88:f3:75:07:
                    70:95:94:27:f6:5a:da:72:5b:19:d4:a7:b5:69:d5:
                    c2:e2:f8:bf:da:f8:4f:e7:1e:da:d0:43:2d:74:5c:
                    3e:bc:45:dd:1d:29:60:74:ab:dd:08:b3:06:78:6a:
                    2b:c4:3b:ab:41:5c:01:6f:4a:5e:08:cd:95:84:cd:
                    56:56:39:b7:80:ae:db:89:25:dc:a2:fa:aa:8d:07:
                    7a:ba:1c:aa:f7:9f:69:d2:b8:c9:08:03:e2:e9:d6:
                    2f:2f:0d:3b:e6:0e:3a:9d:be:56:8c:73:ec:58:31:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:3C:DD:D8:35:46:1A:78:A1:D4:E2:31:51:E7:7E:07:E3:CA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15c78d8-1942-3699-8ec2-e0c56004732c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.130.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:fc:38:a6:79:45:16:bb:2c:fa:80:e9:55:03:a1:32:50:
         a4:93:f6:50:bc:c3:db:f9:51:2c:48:85:fc:b3:92:4b:d6:4f:
         7d:12:b6:b9:97:a6:9a:2f:38:63:86:d7:c5:bb:2b:4d:88:9f:
         0d:d7:6c:df:80:94:0b:af:cb:d6:62:15:64:16:32:3a:d4:99:
         f5:25:e9:e2:e9:96:bd:df:f5:db:6d:5e:61:27:c6:ec:af:e0:
         e0:e1:a7:55:ab:93:d0:cf:69:21:66:55:59:a3:0d:d5:7b:11:
         3c:1f:dd:66:60:8f:96:7d:05:dc:30:c8:30:70:16:43:e1:36:
         ae:e9:3b:40:55:40:92:13:8c:af:73:14:bc:dc:ce:d3:04:4c:
         0f:a6:6d:6f:41:47:46:27:c2:8e:9a:c5:bf:c2:6b:f3:37:7f:
         f1:80:6a:04:c2:9e:b9:24:77:bb:a5:09:9b:0d:b0:84:82:21:
         d2:fa:14:04:11:55:1a:d6:31:50:fe:39:99:40:3f:fd:a7:ac:
         16:20:55:7e:4e:b8:f4:ec:e8:51:d5:13:7c:34:28:9a:b9:53:
         7e:31:dc:f4:e4:8d:57:56:87:1e:95:68:56:fd:eb:20:c6:1e:
         5b:9b:b1:39:37:3f:4f:97:38:6d:01:87:e8:ed:4a:8d:52:9e:
         e0:7a:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:56 2025 by rpki-client