Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26ffb46-2183-3629-b32b-cc015e332e19.roa
File:                     e26ffb46-2183-3629-b32b-cc015e332e19.roa (raw, json)
Hash identifier:          NbbJbtDZolMgROvN8S1OEkmf0TsqGi6evyANWmwolVk=
Subject key identifier:   FE:FF:47:44:CE:B9:79:E2:54:47:85:72:DE:64:15:BA:D4:8D:1B:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06DEB388A72750FB490E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26ffb46-2183-3629-b32b-cc015e332e19.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        71.202.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:de:b3:88:a7:27:50:fb:49:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=491d9131-e2d8-4e8e-850e-b8c916d1b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:fe:fd:0a:cb:88:a3:dc:a7:1a:bf:33:7d:
                    ae:f9:4d:43:23:06:59:b4:69:77:d0:71:ab:95:a0:
                    11:91:57:b5:f8:75:0b:a7:72:9a:df:07:90:90:fe:
                    68:9b:da:14:0f:31:37:80:30:57:20:90:4d:01:f2:
                    94:14:a9:f7:0a:f2:ed:b5:76:e1:bd:16:d2:8c:1c:
                    27:5a:10:b2:e6:7f:76:ea:08:12:93:8c:7f:56:72:
                    47:c6:ba:6e:92:ec:15:d3:2a:69:6d:36:bd:53:7e:
                    e1:5a:01:54:ff:13:e4:c1:06:d9:73:aa:13:84:75:
                    b8:d3:4b:91:3e:a2:98:97:37:0b:19:dc:71:01:30:
                    9f:9b:74:22:22:5d:e5:42:f9:44:34:fc:05:3f:43:
                    85:7b:65:8d:e7:49:4c:fa:15:6e:f0:0c:96:c3:e3:
                    60:1a:de:4d:08:d7:40:81:d4:31:4c:9e:47:2d:c5:
                    62:ef:b7:43:cc:0f:01:46:be:71:57:d2:a4:60:46:
                    54:82:0e:ba:ae:7f:44:88:ad:bc:6d:e2:53:2b:d0:
                    29:44:2e:ae:01:ab:c4:64:aa:67:22:d9:59:59:96:
                    9f:38:0d:98:ba:55:d8:4e:6d:41:1b:ce:b5:27:d2:
                    86:de:24:74:35:bb:76:e7:f2:33:40:44:eb:cb:40:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:47:44:CE:B9:79:E2:54:47:85:72:DE:64:15:BA:D4:8D:1B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26ffb46-2183-3629-b32b-cc015e332e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.202.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:08:14:dc:95:3e:0c:a5:29:a0:fd:6c:22:42:13:2b:42:09:
         55:7d:e1:b4:7b:52:a1:e1:ed:77:c7:b0:a4:76:41:c5:38:dc:
         c3:21:6c:e9:b9:2d:8c:b1:ec:f2:b0:e7:80:0e:53:24:c2:ee:
         70:66:77:a2:cc:fd:6b:15:c5:d0:5f:60:95:3f:5a:87:98:17:
         61:33:fd:a6:65:eb:2f:21:f2:da:e8:be:ea:97:10:40:ff:31:
         97:63:1d:92:3b:6e:38:13:bf:d3:b5:41:f8:4b:7e:26:67:ea:
         51:a4:b0:c2:15:bc:70:13:f5:ce:b5:ed:e8:65:b0:40:15:8a:
         09:b5:c8:f3:5f:05:aa:96:2f:b4:d7:7f:38:50:24:d1:28:86:
         26:19:db:c4:44:04:5d:56:f7:3b:03:7f:30:f7:80:b6:61:6b:
         6c:a1:69:92:80:6a:8b:87:75:15:08:f1:b6:e4:4a:0f:1b:f0:
         fa:36:f3:4e:34:be:ca:5e:ff:cb:8a:6d:da:67:68:a4:56:c6:
         de:06:34:fb:58:42:3c:3b:a3:e9:d8:e4:ff:23:55:b4:27:01:
         26:36:51:89:93:9c:03:9e:d5:4a:a9:20:5c:7d:cb:df:d7:e1:
         49:20:de:0c:70:29:73:13:bd:bf:bc:0e:05:dd:03:5f:84:ff:
         c3:d9:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:57:32 2025 by rpki-client