Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc26c28b-04df-30b8-a5ce-73696b734033.roa
File:                     fc26c28b-04df-30b8-a5ce-73696b734033.roa (raw, json)
Hash identifier:          F7qDGdFB4H4kZIV4qlmempCQx63wVGnW5NUWrNS5COY=
Subject key identifier:   E4:43:93:06:A9:BF:DA:36:0C:4B:A1:ED:31:8C:69:52:7C:24:72:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C060C23B4CD5C6D9C72AE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc26c28b-04df-30b8-a5ce-73696b734033.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        174.182.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:0c:23:b4:cd:5c:6d:9c:72:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=18aaad02-e2f4-4df4-a947-e8d86799c2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:85:51:67:ff:e0:a3:f7:bc:c4:01:36:5d:
                    25:61:2d:03:f6:e9:a2:50:3c:e8:47:e9:cb:54:bc:
                    bc:aa:78:98:2d:db:42:e3:13:00:cf:22:c1:0b:54:
                    89:0f:5b:c7:18:e0:dc:ed:2d:28:2a:33:4c:4d:2f:
                    07:93:f3:fb:24:95:33:be:ab:5f:95:9a:6f:19:cc:
                    1f:f8:65:55:38:1e:63:31:36:93:54:90:c4:c6:a6:
                    54:a9:05:11:bc:d9:47:95:14:a0:20:1f:b1:1a:95:
                    aa:c4:e7:64:5b:89:f8:4c:44:6e:56:5e:5f:74:09:
                    d3:8b:03:63:e4:de:3c:b4:de:d4:ea:77:f7:88:ed:
                    91:6d:a2:94:f1:80:c1:75:0d:d5:aa:e8:e6:11:95:
                    c3:1e:ba:69:89:6d:8b:38:ba:57:b8:3f:15:2d:b7:
                    db:3c:6e:4f:0b:8f:00:7b:d4:b3:7c:6c:58:db:ca:
                    e2:3b:81:85:9d:19:e5:d6:53:8b:fe:26:6e:d7:f7:
                    f5:5f:4f:78:85:14:4d:a1:11:af:cc:25:2e:47:68:
                    56:0e:b3:11:3b:a0:a3:d1:47:a7:dc:1f:2a:c0:2c:
                    e2:a1:9a:62:3c:e6:a5:d5:1f:21:26:6c:76:49:64:
                    01:c8:a0:d8:cf:77:ac:b8:3a:e0:3b:62:93:a3:a4:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:43:93:06:A9:BF:DA:36:0C:4B:A1:ED:31:8C:69:52:7C:24:72:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc26c28b-04df-30b8-a5ce-73696b734033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.182.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:04:2b:77:00:1a:7e:cc:93:dd:ab:09:2a:a5:8a:dc:87:
         b8:55:3b:13:cb:0c:2d:90:b4:ee:65:68:71:86:ca:ff:05:2f:
         c4:ab:87:1b:f5:83:56:21:af:5f:16:39:28:73:1e:d5:d3:43:
         4b:1f:b4:c6:ad:f9:97:94:c6:f0:b6:d3:2f:4b:05:f2:9c:14:
         06:1e:8a:a3:bf:52:80:63:db:97:d9:11:c3:63:b4:6f:f0:9c:
         aa:81:06:b0:a6:cf:b9:26:23:bb:5f:9e:30:ab:08:71:55:d5:
         62:cc:d0:60:0c:5d:96:9e:dc:04:b5:0a:61:4f:0e:1f:49:0d:
         0e:af:e1:bf:6f:0f:a8:36:c0:b0:e9:90:61:95:ff:9a:a5:c1:
         e4:47:f5:af:d2:62:e4:ef:16:23:88:3d:0c:a7:3e:94:b9:8c:
         51:2a:c4:44:bf:8e:7d:3c:a7:a9:69:38:8b:95:4a:16:c9:cc:
         91:c3:42:f4:0a:bd:ed:22:ef:94:f6:88:7d:04:34:06:e6:32:
         63:18:aa:71:1a:e0:e4:f8:2d:f5:b6:42:86:d7:1f:75:74:6d:
         08:fe:77:7f:6a:c3:84:02:74:6e:02:e7:19:38:5d:49:d9:90:
         1f:35:78:4d:ab:bb:58:3f:a8:ce:1f:54:cd:fc:1d:7d:8e:18:
         91:2d:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:47 2025 by rpki-client