Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed025c57-3e0c-3587-8551-f2a91faa4dff.roa
File:                     ed025c57-3e0c-3587-8551-f2a91faa4dff.roa (raw, json)
Hash identifier:          fnjk1BLVmmEcyplPSCzv8PCJdTf8CjOqJygaWBAzpEc=
Subject key identifier:   E7:B7:E3:47:00:D7:B5:9C:84:1F:33:B4:07:AB:09:8E:02:D6:CB:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431633D65D6E39C935D5A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed025c57-3e0c-3587-8551-f2a91faa4dff.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.2.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:63:3d:65:d6:e3:9c:93:5d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=e0d79adb-55b0-4140-ab5f-33f035d4064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:ce:8d:2d:7c:ca:93:da:c4:38:52:b1:3d:
                    f6:6e:c1:60:6e:67:fa:e5:3b:f8:02:2e:ad:86:9d:
                    2c:df:db:8a:eb:24:db:13:e6:14:fc:0d:b1:34:71:
                    59:16:9c:5e:73:9d:a4:9c:69:53:c3:58:90:33:cc:
                    ef:e9:18:53:53:8b:d6:db:ec:03:26:4e:0d:bf:ee:
                    ef:64:a4:42:a3:13:ea:6b:76:7f:75:cf:00:ad:6f:
                    7c:77:94:3b:22:52:ae:60:0a:47:72:aa:05:ab:d0:
                    55:08:93:5f:09:88:e8:7f:e7:97:30:4d:be:b1:50:
                    1c:8b:1e:22:ad:66:08:d5:b0:c2:8a:99:3d:09:92:
                    97:99:ff:6b:97:29:2b:e9:44:bb:ca:ef:51:47:1a:
                    7f:77:9f:08:4e:8c:66:7d:f8:f6:d4:17:f4:22:f0:
                    a0:1e:81:c6:3d:a5:24:e5:92:e6:72:86:49:ab:b8:
                    52:71:bd:8b:0f:aa:76:b8:df:a1:75:f1:53:47:ca:
                    e5:fa:fa:d5:b6:b8:70:72:c4:74:bf:f4:14:b5:2c:
                    c1:41:a1:0e:cb:d0:a8:e9:91:15:65:b9:41:93:24:
                    57:6d:80:33:db:90:58:37:d2:db:ad:9e:7e:e7:cf:
                    e3:c7:de:32:f8:a0:54:37:1c:d2:bd:00:2b:83:66:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:E3:47:00:D7:B5:9C:84:1F:33:B4:07:AB:09:8E:02:D6:CB:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed025c57-3e0c-3587-8551-f2a91faa4dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:40:79:d4:7b:be:d5:ca:da:8a:30:e6:63:f5:e9:8f:0e:
         e5:4e:ce:04:6d:6b:2d:6d:5e:47:bf:e4:0b:66:eb:65:7a:43:
         81:1c:06:c8:d4:11:f0:1b:45:98:8e:9b:ef:1c:28:95:c1:65:
         b5:f8:57:1c:52:40:e0:90:0e:bf:5a:0b:c3:d3:26:33:21:9b:
         85:da:9d:24:2a:5e:97:b3:c8:ae:3a:a0:b8:76:30:d2:9f:8e:
         2a:ea:97:6a:f5:e4:0e:c9:4a:81:72:7d:2c:96:5d:f2:7c:7d:
         64:32:1d:14:25:ac:5e:e9:b4:ff:de:61:c7:47:1b:98:d8:de:
         d0:29:70:72:b7:37:c3:30:d7:bf:1b:62:85:6a:9c:70:21:25:
         13:b3:2d:22:bf:8b:39:49:38:e1:7f:82:b2:57:78:1c:e9:82:
         8b:9a:be:ac:6c:b5:a9:91:af:05:4f:d4:f3:0d:2a:36:05:4a:
         f8:18:d8:b3:29:ea:50:e7:dc:1e:06:c4:db:b8:7f:20:a9:1c:
         5e:80:9c:28:95:3c:38:4b:c6:10:b0:fa:74:5e:b2:65:4b:59:
         d1:47:2d:05:1f:3c:c9:8a:88:66:fb:c5:d8:3a:8e:57:db:33:
         87:44:fc:e5:96:4c:b1:58:b4:ef:84:26:bc:ff:e3:9b:85:5b:
         9e:c7:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:28:13 2025 by rpki-client