Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda2e128-aaf5-3ccd-b0f2-15e4cc103c27.roa
File:                     dda2e128-aaf5-3ccd-b0f2-15e4cc103c27.roa (raw, json)
Hash identifier:          +1D3JvT5pFqpdYjJkB+oOcl7oRRSOJfr9TJ5UZ1ebvQ=
Subject key identifier:   21:00:C5:49:57:16:AF:EE:17:B1:86:35:C9:86:90:38:84:12:04:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6BCF29B46B5479FAD4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda2e128-aaf5-3ccd-b0f2-15e4cc103c27.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        71.237.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:bc:f2:9b:46:b5:47:9f:ad:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=88406e57-f976-4a83-bdd3-e221a4e533a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:a3:2f:e4:ae:62:e8:18:b4:23:2b:a2:05:
                    3e:ca:45:2c:4f:74:52:3b:a3:da:5f:1e:df:a3:13:
                    ca:ff:8f:2b:cb:9b:b1:ab:3f:12:32:d6:f3:32:36:
                    3a:23:d4:5f:af:22:cc:c0:5e:d5:49:03:a5:1c:77:
                    93:13:14:3c:b6:a2:01:08:5c:07:b3:6d:ca:51:c3:
                    73:ae:b8:d9:1c:79:c9:21:a4:2c:c8:fd:f9:50:45:
                    a0:a4:c2:71:0e:3d:25:ee:6c:c4:72:37:3b:ce:a0:
                    88:57:1a:70:9a:da:27:05:a8:4d:41:dc:80:25:6a:
                    fd:2e:ef:a2:f8:87:27:c9:67:b9:24:e6:27:4b:cb:
                    6f:24:6d:6a:84:3b:c7:db:5a:8d:07:80:a7:61:c2:
                    f1:0a:52:b3:f4:b2:1e:69:e2:60:5f:1d:5d:fc:2b:
                    5f:10:71:ce:30:09:3b:a6:33:81:57:ae:77:80:1b:
                    d5:d3:3e:89:26:ee:cc:bd:bb:1c:98:95:76:3f:e7:
                    d1:d3:6a:7a:39:b9:a9:0d:dc:b9:8c:bd:db:31:98:
                    d4:ff:ee:da:6b:f6:d4:d6:d7:ed:14:97:9c:15:81:
                    7d:78:81:7a:65:48:df:1e:43:4b:e1:b1:c9:f1:b8:
                    77:06:8e:72:8d:a2:cb:5f:2d:5b:51:67:48:18:5e:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:C5:49:57:16:AF:EE:17:B1:86:35:C9:86:90:38:84:12:04:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dda2e128-aaf5-3ccd-b0f2-15e4cc103c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.237.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:24:a2:dc:f2:61:6b:e5:31:b7:0b:b9:73:58:d6:80:8e:
         90:7d:9c:af:84:32:ba:ee:de:a3:76:fa:a4:fe:08:3c:4d:4c:
         c6:53:b3:88:2c:08:9a:0f:45:be:80:78:e8:08:cf:02:a1:8c:
         6e:36:14:24:60:c3:ad:9f:e9:70:ad:97:63:3e:d3:1e:a3:74:
         a0:90:a6:37:90:ec:c1:cc:17:e5:a9:ec:d7:d1:da:f1:60:1b:
         ce:1f:53:cd:15:ff:8a:13:85:a4:4c:26:25:9b:95:9f:ae:75:
         8b:6d:4b:25:32:23:bd:db:9f:2d:0c:88:66:b5:6f:dc:45:7d:
         15:39:11:16:c6:53:23:c4:6e:a4:bb:94:6f:cd:74:eb:1d:d9:
         90:04:9c:6d:3c:b9:7b:74:ab:eb:de:23:64:6d:86:66:fa:1b:
         e9:8e:43:f6:d8:92:16:7f:15:e3:f3:36:41:01:3d:d3:89:58:
         0f:0d:61:bf:7f:27:ba:00:3a:64:5a:fe:f5:64:5b:75:74:fe:
         2f:ca:4e:79:f3:c4:7c:59:53:ef:be:93:05:7c:76:c5:c8:d5:
         f2:57:93:ca:b7:23:0a:41:7a:77:28:92:20:8e:2a:b3:50:73:
         b2:d5:ef:e5:f8:4d:4b:c3:29:59:2f:2a:05:33:a4:61:27:d9:
         6e:b7:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:26 2025 by rpki-client