Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99aba95-6872-36ea-9142-ae2587a2b5ee.roa
File:                     d99aba95-6872-36ea-9142-ae2587a2b5ee.roa (raw, json)
Hash identifier:          T+PzUXFZhMFBiw78eDPhQiCY860LJbzJ3VlD90fCpNM=
Subject key identifier:   A9:CE:FA:85:03:0C:24:1C:0F:CB:57:A1:03:62:65:11:B7:F7:B6:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B1F654F363899AB9AAB56000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99aba95-6872-36ea-9142-ae2587a2b5ee.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        96.115.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:54:f3:63:89:9a:b9:aa:b5:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=81e621f9-b0e5-4188-a61f-cab8a147bab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:ae:a2:98:1f:c0:b5:1c:17:bf:5c:4b:77:
                    56:54:f1:2a:80:1a:71:73:51:5e:a3:b7:65:ff:14:
                    9f:5b:4f:19:c9:da:43:6a:dd:bd:a7:e9:bd:e9:ac:
                    7f:20:7f:84:6c:b5:9d:2b:2d:ad:ae:3c:5e:c5:5c:
                    2c:43:31:87:5f:35:fb:26:94:d7:20:bc:50:d8:e4:
                    9f:b8:6e:49:56:7e:9a:2a:dd:59:90:9a:32:bb:d8:
                    0b:87:c5:54:4e:30:b3:10:a9:de:a2:ca:a0:ea:83:
                    a9:87:47:00:12:19:08:7e:14:ef:58:83:09:bd:ae:
                    63:4c:57:6c:c2:b5:80:30:da:3c:ce:04:d9:a1:79:
                    23:c6:e5:99:d1:2f:4e:5e:95:4d:67:29:5c:8a:ca:
                    eb:4b:11:56:e8:b1:26:dd:c6:08:1a:1b:dc:22:63:
                    c5:c7:b3:1e:fa:d4:b4:6d:e6:bf:00:7b:e6:3b:e5:
                    79:e0:b9:ee:c5:f8:5e:4d:ef:7b:1e:a6:41:e8:eb:
                    6a:93:b3:1c:ed:89:f5:c4:3c:79:76:9c:81:d6:0e:
                    c9:4b:f9:65:43:81:7c:81:55:63:03:db:17:eb:4c:
                    5a:18:72:f0:91:db:b0:07:8b:5a:a6:a2:ba:df:18:
                    48:a8:1e:60:78:7d:84:78:57:f6:10:84:c2:c3:99:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:FA:85:03:0C:24:1C:0F:CB:57:A1:03:62:65:11:B7:F7:B6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99aba95-6872-36ea-9142-ae2587a2b5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.115.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:04:88:4e:0e:f1:47:71:3e:b9:c1:7d:2d:38:0e:c9:7d:c8:
         61:21:6b:b4:71:13:fe:45:6e:ae:36:78:c9:7f:1d:47:3c:19:
         12:bb:e2:24:95:6d:0a:af:12:cf:a1:0f:82:8e:dc:87:12:d1:
         2f:cf:f4:da:38:1f:19:96:79:15:c2:fa:f5:c7:6d:bf:a3:ab:
         5f:53:b7:88:9f:12:86:53:d8:54:5c:82:5c:7e:4e:30:2d:0c:
         4f:1d:73:28:73:d3:04:b6:99:2b:d3:28:87:b7:72:59:79:64:
         88:a3:af:c2:3a:a1:c8:70:10:bd:d1:fb:b1:67:98:7d:22:6c:
         3c:90:8d:41:65:e0:8a:58:30:61:ac:06:72:53:f9:a3:3d:40:
         f6:ce:c7:1c:4c:37:27:15:14:ed:f1:ae:c9:8c:7f:de:cb:64:
         db:a2:bb:4e:25:47:f0:9d:49:b1:74:01:7b:78:0b:7b:cc:c8:
         ff:14:80:8a:e5:e3:56:42:dc:e9:f9:20:85:38:0a:b5:58:cc:
         b4:7b:1f:d0:b6:a7:d6:61:ab:d4:76:84:c8:ad:44:0e:88:02:
         9b:f3:f5:b9:9a:4a:fb:a9:65:ca:4f:9d:af:23:a2:04:c1:47:
         3a:85:13:bc:3e:49:9d:15:69:38:83:e4:f7:de:bc:c7:ee:bb:
         3e:4c:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:31 2025 by rpki-client