Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f325b92f-db94-39b2-86f1-3253370dd766.roa
File:                     f325b92f-db94-39b2-86f1-3253370dd766.roa (raw, json)
Hash identifier:          ydKEM1rlimQNMrFrcVrqopJwSqZ6QbZjm7qQHtw4lss=
Subject key identifier:   24:B3:20:D0:D4:84:E0:E2:75:AF:06:C4:37:89:64:21:4D:52:1D:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F86E4BC3B093099FE0C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f325b92f-db94-39b2-86f1-3253370dd766.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        71.235.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:6e:4b:c3:b0:93:09:9f:e0:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=4640c777-af60-46ef-bdff-0b1c833ad55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:48:be:d1:f3:70:8b:79:39:bb:68:d2:46:
                    11:30:2b:9b:08:d5:7b:c8:68:5e:6e:4a:b9:e8:c2:
                    1c:4b:a0:91:72:a5:a7:24:54:5f:bc:76:7a:0c:6f:
                    ec:8e:81:7a:64:9d:2b:b3:de:7b:a3:d3:2e:1c:4a:
                    36:f9:b6:46:09:65:7a:ea:ff:dc:b8:e9:2a:d0:89:
                    1f:2d:61:9c:f3:55:fd:44:25:d4:c9:13:e6:b3:00:
                    1e:c5:28:ab:ab:07:ed:51:54:3f:11:1c:52:a6:2d:
                    25:47:81:dc:b5:c5:8b:f0:bb:c7:47:4e:6e:59:62:
                    f7:55:d7:97:28:d4:9e:f8:86:8a:f9:e7:a4:69:74:
                    39:e4:e7:ff:6a:b3:bb:9e:fc:75:6c:59:a3:ec:cd:
                    91:75:ab:46:92:eb:3b:68:e4:1a:50:98:e2:d9:0e:
                    b0:60:f6:15:ee:3a:b3:af:3b:f0:50:07:1f:64:e7:
                    d9:f7:55:74:d0:8c:ad:c6:85:dc:35:64:1c:e3:b6:
                    e1:55:40:ed:7f:c7:3d:4d:3f:2d:52:14:0c:24:f0:
                    3d:c4:0b:0f:d5:73:eb:d5:94:0b:c6:fc:65:c6:8e:
                    8a:66:6c:57:2a:e9:74:46:4c:bd:f5:f5:48:f0:59:
                    56:42:63:79:7b:f2:71:db:b1:50:cb:3a:38:26:51:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B3:20:D0:D4:84:E0:E2:75:AF:06:C4:37:89:64:21:4D:52:1D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f325b92f-db94-39b2-86f1-3253370dd766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.235.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:3b:0e:90:1f:4f:02:f7:e5:58:87:0c:9c:a9:7e:a3:2c:
         a0:69:ad:fe:43:f3:8c:09:0f:81:ba:80:e5:40:07:35:2f:aa:
         d9:d8:32:93:90:04:50:11:b9:03:93:43:48:04:df:29:d4:10:
         c9:15:42:e0:05:29:16:9e:47:9a:ac:cb:e9:b5:10:77:dc:5a:
         51:51:6c:16:58:63:42:df:95:05:fb:cd:f5:e2:ba:39:10:65:
         4f:3d:6f:6f:a1:ba:c5:f8:01:84:a2:20:2b:ff:f4:68:7f:db:
         81:9f:5b:8c:c9:22:14:f9:2a:2c:db:f2:53:e3:bc:91:7e:22:
         a8:a8:8c:50:01:a9:95:d3:00:e2:4a:8c:9c:de:6d:9d:83:5e:
         49:2c:fd:8b:dc:4d:d9:50:c8:a3:04:02:6d:1f:0b:94:ec:77:
         7c:86:2f:48:53:5a:a8:eb:99:da:27:cb:ce:68:cf:d4:03:bf:
         66:f9:7f:c3:61:d1:d7:f1:62:a2:ae:9d:58:c0:30:6f:53:da:
         14:b2:52:4a:57:9e:75:d1:2a:2e:89:23:16:a2:8e:3f:5b:20:
         2e:de:4d:15:14:3d:ae:5b:79:7c:08:b2:d4:36:93:3b:cd:07:
         06:9a:da:7b:9b:29:d4:88:f9:e5:ef:d8:dc:59:29:71:fb:62:
         dd:bb:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:49 2025 by rpki-client