Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3292756-84d9-3cb2-bd62-eef6d0827022.roa
File:                     d3292756-84d9-3cb2-bd62-eef6d0827022.roa (raw, json)
Hash identifier:          2cjmk8r3a73E0WnzHg2XfDsqZZ1jEAhCluG0B90I+0k=
Subject key identifier:   01:38:09:9D:A6:1C:14:40:6E:F5:D2:A8:FB:62:01:15:28:32:C9:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C11F44DCF7F9E757410FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3292756-84d9-3cb2-bd62-eef6d0827022.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        69.142.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:11:f4:4d:cf:7f:9e:75:74:10:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=1d05d3aa-805b-48ba-bfba-0d8c440ea387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:7f:53:c6:c9:5e:77:c7:53:a3:84:69:bd:
                    82:49:f9:e7:35:c0:c3:2a:25:aa:35:34:f4:a8:22:
                    95:3f:47:9f:7f:24:86:f1:4f:e5:66:32:d5:11:26:
                    8d:bc:a5:00:d3:14:86:2a:d1:2c:43:5c:15:ee:2d:
                    71:d5:98:58:32:6f:41:8e:65:21:41:50:29:09:f1:
                    f9:0e:b5:cb:db:11:78:c8:e9:33:05:63:ac:ab:ba:
                    cf:a8:40:c7:b7:94:cc:eb:43:71:b8:08:a0:d5:ca:
                    34:58:bd:ff:b9:3e:75:98:8d:49:61:87:46:e8:e7:
                    42:33:75:54:fc:86:b0:7a:c6:c8:85:b3:22:5b:d6:
                    35:dc:9d:06:1e:ba:4f:b8:b3:39:00:96:94:9a:a2:
                    24:11:6b:22:70:ce:3d:18:68:f7:2f:59:b8:05:ea:
                    d4:10:a8:bc:38:08:0c:c5:2f:72:a4:72:1d:ce:23:
                    af:14:2c:66:f7:de:ec:58:c9:b6:e8:47:b0:e6:fa:
                    fd:8e:67:c4:8d:ba:76:31:66:d0:71:60:e0:e2:85:
                    35:3a:16:79:77:d3:04:ab:4a:b3:49:02:02:25:72:
                    b1:dc:97:8f:1c:90:02:8a:6e:3c:58:94:ad:4b:3d:
                    a2:10:b8:fa:b1:27:4c:d5:d7:69:a7:45:33:8f:44:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:09:9D:A6:1C:14:40:6E:F5:D2:A8:FB:62:01:15:28:32:C9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3292756-84d9-3cb2-bd62-eef6d0827022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:d2:f0:57:c7:f0:b9:c5:05:0c:14:56:ca:e1:78:d1:d1:27:
         e6:22:46:63:4d:c3:5e:7f:26:2d:64:fc:48:02:72:b2:5a:dd:
         8a:b9:5f:8a:1f:19:74:08:b5:d5:4f:d2:44:e8:a6:ac:2e:eb:
         14:89:71:76:d2:0c:0c:57:93:70:cc:f2:c5:c3:9c:22:92:e5:
         18:e7:c1:18:a4:1b:0f:88:3a:fd:39:2b:ff:4a:ba:5a:49:11:
         b5:d1:35:39:66:af:72:70:ad:0d:83:6c:23:d0:5b:ee:0d:ec:
         fa:c9:ec:aa:aa:45:c2:38:a5:0a:be:38:30:af:ba:ef:a6:db:
         6d:7a:1c:1d:77:af:49:f9:7c:a4:4a:29:e1:93:f8:5f:76:06:
         7d:89:05:b1:ef:86:c4:7c:4c:32:93:13:d6:d6:ec:00:e0:ee:
         26:ce:b0:fe:37:d9:cd:58:ff:bd:47:60:99:d0:de:f9:83:e9:
         dd:58:a6:59:1f:8c:a9:80:28:a9:f2:0d:ce:01:60:99:8f:29:
         32:91:c1:87:97:cb:8b:74:45:3a:f0:50:d6:be:b5:25:cb:8e:
         c7:a6:6e:86:08:92:d6:ad:6d:3b:96:45:99:83:32:a4:10:13:
         ac:23:c8:bd:16:17:5f:a8:9e:f7:65:44:68:6c:3e:d2:13:f7:
         df:41:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:50 2025 by rpki-client