Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd1dda2b-0a9a-3ad1-af4d-aadc1fa2dbd7.roa
File:                     fd1dda2b-0a9a-3ad1-af4d-aadc1fa2dbd7.roa (raw, json)
Hash identifier:          M/jieuY9iNR6IwV457KXF3uGy+bkICR4WG8oUbOlCsg=
Subject key identifier:   8C:A1:8F:01:D0:A4:71:E4:85:A8:52:0D:70:87:70:EF:33:E3:5A:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431E43835D94F4D28EE7540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd1dda2b-0a9a-3ad1-af4d-aadc1fa2dbd7.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        24.127.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:e4:38:35:d9:4f:4d:28:ee:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=69a1e871-7d02-49b9-82b3-04d67575787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:89:06:ae:bb:aa:f5:fb:79:b4:8e:2a:50:
                    7c:eb:b1:d9:5d:94:09:04:57:db:8c:a4:85:0a:5a:
                    ef:65:f4:96:c9:29:7c:62:6d:c8:5c:60:d5:02:5f:
                    72:43:a2:54:39:f7:0d:f0:c2:ab:15:ba:01:b3:1c:
                    fe:12:0a:4a:50:eb:f2:98:5a:64:92:24:46:0e:c2:
                    be:5f:70:b8:ae:17:f3:ab:6c:60:01:09:f7:4b:08:
                    0b:52:d9:64:6a:81:49:40:63:89:c0:2e:77:7c:3a:
                    88:d1:ef:43:2c:ce:41:54:ad:d3:58:83:ec:71:28:
                    32:17:71:f7:b8:d1:a1:4c:9e:68:b6:88:a1:14:0f:
                    a7:7b:2c:69:ca:80:4f:db:57:57:e3:05:7f:18:d9:
                    1e:69:d6:4d:e6:48:81:cd:41:70:8e:1b:a9:6c:ee:
                    29:92:59:60:0e:f4:ca:6d:2d:88:40:d5:47:39:fd:
                    df:c1:ca:46:ba:70:60:1b:b8:51:b3:97:16:63:71:
                    41:fb:1a:f1:31:1a:2b:f5:9f:ef:a7:c8:a7:9d:6a:
                    ab:5c:14:f7:51:0e:49:38:9b:65:04:a9:ff:f9:3e:
                    0b:b9:4e:0e:75:63:4a:a5:33:1d:c1:85:e4:fa:4e:
                    d3:26:2a:c1:f6:27:7d:44:56:35:4d:40:ae:55:82:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:8F:01:D0:A4:71:E4:85:A8:52:0D:70:87:70:EF:33:E3:5A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd1dda2b-0a9a-3ad1-af4d-aadc1fa2dbd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cf:8c:67:a0:39:20:1d:47:9b:71:4c:38:e5:1e:ee:af:59:
         02:cd:d8:9c:c6:1b:d3:66:cf:3b:a0:0e:c5:7a:df:87:da:15:
         1e:67:93:dc:8d:b0:eb:97:d0:88:ed:5b:24:16:ed:9f:9c:0d:
         9b:60:31:fb:13:9b:ba:e5:21:1f:31:79:c2:05:9a:1e:2b:e4:
         0f:b8:2b:ac:34:5a:45:6b:92:c7:71:1a:05:fd:08:e8:a7:19:
         ac:10:22:ef:42:14:89:98:25:3f:ce:b9:18:61:55:ed:0b:3b:
         1f:07:1b:15:fa:68:b0:fe:71:88:39:98:b7:37:66:c7:cf:17:
         78:02:a0:63:8c:32:55:0d:ff:dc:47:f5:9f:62:8c:a1:c9:83:
         b4:85:f3:0b:29:22:d8:9e:0d:8f:a1:5b:41:f3:dc:0f:ba:09:
         59:1f:a9:56:a7:91:c9:a5:6e:d0:be:e9:9e:6e:c7:ea:92:7a:
         fa:5e:40:f4:6a:f8:ed:48:a1:8e:2e:da:ac:b7:0e:f6:f4:eb:
         ab:65:af:87:e7:07:4e:be:0e:a5:24:0d:a7:f5:b5:93:39:53:
         e0:90:70:d1:21:81:f8:e4:eb:6d:28:75:51:15:17:2f:fd:00:
         54:c5:bb:1a:d2:91:23:6f:c3:5d:2c:6c:7d:10:52:25:f3:b1:
         88:92:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:47:05 2025 by rpki-client