Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d614ff08-1476-30aa-bfc8-70bceab5c13e.roa
File:                     d614ff08-1476-30aa-bfc8-70bceab5c13e.roa (raw, json)
Hash identifier:          Msm+881//eKxsVa1wJn85elPaTEGSrVMM4o89dAJ9Cc=
Subject key identifier:   1F:C4:1B:49:D0:24:3C:8F:23:09:40:51:28:20:01:FC:3C:72:62:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB038F0F25E89C556DA8CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d614ff08-1476-30aa-bfc8-70bceab5c13e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        71.199.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:38:f0:f2:5e:89:c5:56:da:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=cb7f6ee1-8571-4cb6-80d6-62308238606f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:84:7c:ee:9c:49:c2:4b:e2:2b:67:3e:7c:
                    fd:a1:11:23:1c:40:cf:97:09:75:e9:78:01:53:2d:
                    4d:c7:14:60:4d:48:b3:22:1d:a1:4b:a5:20:d4:1b:
                    f2:f8:09:15:f0:87:e3:06:c9:49:45:79:25:15:b0:
                    55:93:0f:d7:4b:85:8c:c9:af:2b:51:51:25:a1:4e:
                    8d:78:d0:a4:a1:e7:cd:a7:d6:40:68:dc:fc:1f:df:
                    92:a3:b0:8f:c1:ec:6c:73:ac:6e:8b:8f:20:6e:95:
                    eb:00:6b:81:0a:fc:a1:10:dd:63:12:2f:d3:0d:53:
                    ab:f5:ab:2b:d5:fd:8a:3c:94:b9:fd:a2:21:33:2c:
                    16:65:b8:76:57:e8:dd:e4:b3:c9:b1:94:67:ec:9a:
                    79:7d:78:b9:90:27:7c:f5:98:12:7a:6a:0b:7c:cb:
                    7c:57:39:01:29:49:44:48:f8:ce:ac:45:ff:02:36:
                    e5:13:e0:ee:4a:07:4f:f6:a0:48:eb:eb:7b:ce:f5:
                    c5:6b:33:32:e6:f5:e4:00:e7:cb:fb:59:54:3c:bc:
                    d6:e9:bc:71:ce:f9:71:e9:c7:a9:00:f2:30:24:57:
                    62:46:72:52:04:a1:fa:2d:87:fc:94:f3:93:65:13:
                    68:f3:b0:37:1b:ff:c4:0c:9f:2d:61:0e:cd:19:32:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C4:1B:49:D0:24:3C:8F:23:09:40:51:28:20:01:FC:3C:72:62:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d614ff08-1476-30aa-bfc8-70bceab5c13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.199.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:46:db:f4:f1:83:f0:db:4c:17:14:33:76:9c:61:51:4c:64:
         b4:22:5e:4b:93:f0:ca:a1:a3:9b:3b:f2:f1:de:ef:76:eb:5d:
         fc:26:83:44:26:a4:99:10:db:9e:a9:23:18:27:6d:0d:27:a7:
         20:d9:55:d1:e9:b3:f9:89:1a:c5:7a:63:b8:5f:2a:81:85:e1:
         3b:ca:8f:06:6a:bb:27:9e:77:cf:c2:5e:7d:1a:0c:3c:68:cb:
         d9:b6:52:f1:67:11:5f:69:c3:22:c5:56:8a:40:b3:3a:0b:95:
         04:8e:53:67:60:03:8e:ed:c2:8e:e0:b8:e7:17:1d:9d:31:8a:
         6f:9f:73:a7:d1:0d:7c:45:a2:e6:ba:67:4a:f8:7b:3f:cd:1e:
         f5:bf:4a:8f:18:aa:f9:c4:a7:1b:76:c0:06:4a:09:9c:61:f4:
         cb:6f:f2:cd:3d:8f:cb:c4:38:87:98:2d:cd:43:b6:93:22:ad:
         74:76:22:79:2f:cc:d9:58:99:b6:97:e9:0f:d5:1f:6b:35:f1:
         2f:f5:3a:ba:68:ab:8b:31:d9:57:6c:e1:20:f0:b7:fd:b1:de:
         69:4c:0a:e5:98:02:8d:60:7c:2f:5e:1a:15:ac:44:fe:7d:73:
         b8:0a:70:5b:76:33:58:c6:d7:76:e5:6a:52:5a:ee:05:52:cf:
         70:46:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:57 2025 by rpki-client