Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1693105-0de7-3157-9c7d-2aada709d15d.roa
File:                     e1693105-0de7-3157-9c7d-2aada709d15d.roa (raw, json)
Hash identifier:          XELXckN/lsFK4sziUQSiltpWYWTUXFnGztWlDCE7NqQ=
Subject key identifier:   AE:07:89:CB:16:5F:51:64:08:61:A3:94:D3:B6:EB:2D:4C:11:51:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA612EA9D15ED293563A600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1693105-0de7-3157-9c7d-2aada709d15d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     20214
IP address blocks:        174.48.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:12:ea:9d:15:ed:29:35:63:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=adc55be7-d237-445d-a106-e7885b43c2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:c9:b9:e9:5c:c0:bc:d8:34:d3:7a:b2:08:
                    02:2b:24:4e:b4:f5:31:24:e3:be:e7:13:31:27:78:
                    f8:d0:08:af:15:b0:a8:4d:c4:95:22:46:29:27:07:
                    66:1a:5a:d9:6c:c5:11:0c:ee:e0:66:0e:19:b0:d8:
                    e9:36:61:e6:ba:a1:41:97:8a:fa:02:69:7d:c6:a3:
                    1d:8a:49:c5:94:c0:17:41:1b:b5:50:98:78:b8:b2:
                    b5:75:4a:c3:e9:44:d0:3e:a7:95:cb:65:b4:94:99:
                    99:20:8d:5a:ee:5f:7b:db:48:e8:a2:63:82:f6:1c:
                    61:ce:fc:b9:3d:be:69:07:3f:2c:7f:2c:8f:d2:7e:
                    c1:21:f7:2c:a6:9a:24:7e:f4:fe:6a:e9:0f:b2:9f:
                    17:b6:5a:20:17:90:24:ba:61:bb:61:62:0c:dd:8b:
                    37:af:17:55:d0:8b:d1:05:16:ec:3a:9e:42:fb:a5:
                    64:a2:81:45:36:2f:53:38:07:4e:fa:e9:75:2a:fd:
                    aa:b3:9d:fa:d1:e9:af:26:31:1a:d1:a6:cc:9d:73:
                    e3:5c:26:94:da:f5:0c:8b:9b:1e:f5:45:0f:49:97:
                    98:08:86:6e:f6:de:bc:21:7e:a1:3f:18:93:31:c6:
                    51:d1:3d:6c:04:24:86:69:14:33:f9:f4:9c:1c:97:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:07:89:CB:16:5F:51:64:08:61:A3:94:D3:B6:EB:2D:4C:11:51:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1693105-0de7-3157-9c7d-2aada709d15d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:fa:f7:8b:cb:22:2f:8b:c1:2c:3d:6b:07:6d:e0:04:c1:
         ce:f2:0c:2d:7c:b7:67:3a:ef:d6:f0:3b:b0:a1:bf:a5:02:28:
         f2:19:27:77:4a:83:de:80:be:fa:df:28:81:71:c3:5b:90:7e:
         68:99:0c:cc:55:77:f5:c3:ce:0d:41:db:41:a3:c9:60:ac:71:
         4f:79:88:c9:f3:a5:78:49:80:58:5c:04:92:d2:ac:24:a9:f1:
         2b:72:f0:01:71:e1:0a:d1:27:26:55:39:59:7a:51:3a:37:7f:
         d6:6d:81:35:15:57:47:bf:c5:55:ff:6c:f8:b0:97:72:fc:f5:
         29:bc:7e:f1:b0:8c:80:7a:95:28:ac:7f:13:3b:a8:1e:f1:85:
         45:33:87:19:43:8c:1e:80:ab:7f:68:69:af:44:63:59:f0:68:
         e5:3e:83:4e:2a:6f:b2:37:b6:9b:41:c6:92:2b:c5:c3:bd:b4:
         b7:64:b6:92:f9:d7:3e:ee:65:d4:b5:18:82:c9:52:84:0f:41:
         8c:54:a1:82:1e:a6:80:72:d4:8c:a9:e1:a1:b2:26:33:75:8b:
         5d:3e:15:f4:72:66:ed:ac:04:f4:07:2b:5c:9e:07:28:be:0d:
         36:2e:5b:e2:b3:3f:d3:6f:d7:af:b4:ff:25:22:04:54:9e:7c:
         e8:f6:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:35 2025 by rpki-client