Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60e2a04-9bbf-34d9-b4a5-7d17439eeef4.roa
File:                     d60e2a04-9bbf-34d9-b4a5-7d17439eeef4.roa (raw, json)
Hash identifier:          Y+1WMVHWk3n1MhC0o6T+Pt8lr08w0A/72K51Ab6ThGU=
Subject key identifier:   02:3B:85:58:37:CF:BC:14:96:AB:84:8D:4B:F7:C3:BE:82:21:AA:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF752F8CC9F9E0428B8B9140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60e2a04-9bbf-34d9-b4a5-7d17439eeef4.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        24.99.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:2f:8c:c9:f9:e0:42:8b:8b:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=775d52e7-5d41-4552-a2ec-70dce57d4d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:85:c3:09:28:1d:35:4d:05:b8:32:41:f4:
                    2e:1e:5a:a5:87:d8:26:91:f8:fa:3b:69:dc:b7:62:
                    ad:70:98:9a:cb:33:6f:33:06:83:f1:69:9a:51:8a:
                    0d:ee:b1:c4:8b:ce:05:8d:a6:80:17:b9:0a:21:a3:
                    0d:93:d2:4a:8e:96:4b:c9:c0:97:39:63:3b:16:6a:
                    5e:33:e3:66:4c:d5:ff:dd:ea:7d:3d:de:7d:35:ac:
                    83:7b:40:74:e3:6d:6c:b7:aa:15:27:ce:3f:28:8b:
                    77:91:3f:a9:18:ff:25:a6:ef:23:4e:04:2c:60:2f:
                    7e:79:8f:4d:e5:41:01:89:f2:37:a4:9e:64:b8:66:
                    4c:44:3d:e9:cf:44:cb:e3:f5:3d:33:e0:30:c0:ae:
                    8c:b0:8d:fa:7e:0d:51:74:ea:a8:76:f2:3f:48:62:
                    de:54:bf:4e:b9:c9:66:3c:ca:cc:ae:77:10:76:61:
                    50:e9:17:97:07:c0:97:e5:ef:fa:78:26:6d:70:a3:
                    ca:00:72:d5:2b:11:6c:25:75:d3:76:c1:0e:b3:2e:
                    7d:6f:81:8c:42:24:9f:24:f0:aa:9e:26:16:0f:bf:
                    32:cc:cd:90:ab:73:65:e0:5d:1b:d9:f5:0b:c7:57:
                    5f:57:66:57:66:99:e3:34:a6:8a:78:b7:e5:94:38:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:85:58:37:CF:BC:14:96:AB:84:8D:4B:F7:C3:BE:82:21:AA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60e2a04-9bbf-34d9-b4a5-7d17439eeef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:de:60:ed:52:ee:83:e8:a1:dc:56:b6:87:19:14:83:ef:4f:
         1f:30:bf:10:16:eb:a8:ee:3f:a2:6e:4f:06:c9:8a:52:e1:b4:
         85:a6:50:e8:db:bf:e5:8b:ff:04:c7:ac:31:54:18:f3:34:14:
         00:c6:99:d3:8c:f2:60:83:89:9a:0f:e0:3d:e6:01:b4:63:a0:
         14:ed:6b:df:80:76:6e:fd:e2:25:d1:8e:55:45:8f:c5:3a:f3:
         bc:1c:55:9a:5f:bf:7e:72:ed:eb:29:56:73:cc:0f:cb:b7:da:
         a9:56:33:ac:8a:88:7c:33:22:aa:58:3f:20:c4:39:ba:1c:28:
         2d:9f:17:94:3d:14:41:1a:bd:cb:eb:5e:f9:b9:e7:6e:f4:e8:
         42:f6:4b:85:14:b0:2c:17:a1:28:a2:0c:a8:a6:a1:f9:0f:04:
         e3:ad:2d:bc:fc:dd:a4:f5:8d:b3:57:0d:b9:68:c8:87:13:51:
         92:21:77:f9:75:3b:fe:ee:3f:df:18:2c:6c:6a:f1:d1:00:f0:
         22:ac:37:e3:58:bb:94:e8:ef:98:61:fa:87:4f:7f:49:a6:f6:
         01:93:9d:cf:ac:60:5c:c3:b8:50:6c:14:76:bf:27:65:96:a3:
         55:e9:6c:82:e9:3b:21:0c:a2:40:20:c8:c2:96:f4:b8:40:78:
         52:bb:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:57:38 2025 by rpki-client