Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f92794-76b3-3f82-8309-3f9d4653d9f8.roa
File:                     06f92794-76b3-3f82-8309-3f9d4653d9f8.roa (raw, json)
Hash identifier:          E2jPbzpvIZhQpyKGXuUYwVCV14Y8qS2Nx1HLuR+VGz8=
Subject key identifier:   27:2B:37:45:B9:5D:5B:18:FF:90:F8:B3:E7:19:5B:99:AA:1C:7C:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992948A90DFEDBD2C9CDF7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f92794-76b3-3f82-8309-3f9d4653d9f8.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        24.5.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:8a:90:df:ed:bd:2c:9c:df:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=4bb6f1ce-cceb-40b8-94c8-11173e41b360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:ab:15:f3:95:fb:ab:f8:10:b4:2f:67:de:
                    53:63:c1:d0:73:33:a0:19:42:98:dc:78:6a:eb:c5:
                    9f:9c:44:52:f6:81:9f:c9:05:ad:52:d1:34:6d:2c:
                    f2:ce:90:8c:5c:78:96:90:4a:6a:d4:f5:a6:08:2d:
                    47:df:3b:48:d9:ce:e3:d3:4e:78:e2:6c:8b:20:24:
                    e2:82:3c:33:67:71:e3:81:44:1d:31:cf:f2:1c:d5:
                    c7:9d:40:48:ff:b5:2b:a1:fd:68:f0:10:42:2b:57:
                    9e:34:f7:08:74:c6:99:90:45:e1:28:c8:0e:21:f9:
                    7d:f0:f1:86:cf:4c:3d:59:d1:e4:f3:02:48:97:47:
                    96:29:bf:10:40:a7:e3:93:a1:5e:61:cb:1e:c1:11:
                    a0:7f:f5:94:b8:13:f7:0f:e2:1e:7d:9b:c1:6c:e5:
                    15:f0:7e:28:e6:ef:97:68:0b:9a:31:36:37:62:64:
                    57:80:99:73:c4:2a:19:c8:47:4b:3a:70:8b:db:d1:
                    9b:fe:c3:5c:e2:9a:2a:78:77:33:79:7f:1f:01:97:
                    fd:4e:a1:aa:1d:a1:c8:40:f2:19:af:e6:2e:32:41:
                    29:3f:a3:7b:3c:be:95:15:7f:ea:20:b1:00:be:da:
                    c3:e8:81:e3:55:a8:e4:83:33:57:5a:08:90:52:d1:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:37:45:B9:5D:5B:18:FF:90:F8:B3:E7:19:5B:99:AA:1C:7C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f92794-76b3-3f82-8309-3f9d4653d9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:2a:98:df:4c:5c:53:0f:6b:62:d3:b0:de:a9:d2:25:b8:60:
         d0:33:72:8a:44:e7:79:80:df:4e:eb:b3:c0:99:7b:ba:d7:be:
         95:bc:59:14:93:77:54:81:a2:54:2f:7c:84:e5:de:45:39:f6:
         17:69:f2:4d:44:cf:1f:f1:e6:a8:6b:df:63:e6:6f:3d:20:87:
         ec:f5:30:fa:3b:1e:3c:06:5f:98:bb:fc:43:7c:d7:64:a1:00:
         9e:b0:a7:43:6a:6a:a7:71:24:69:0a:cf:be:87:4f:cc:47:ee:
         68:d0:9f:20:1f:d8:46:71:d2:65:e4:9d:b6:91:aa:17:2a:2a:
         c8:b2:56:35:81:b5:e7:ae:f4:a5:8a:b6:a3:c8:ec:52:a5:79:
         49:36:d4:b1:85:6f:3f:46:11:a7:a1:9b:94:ec:b7:5c:b3:ea:
         03:0e:4f:fb:60:83:b9:e1:1e:b8:fe:aa:2f:ab:69:9f:7d:1c:
         df:c1:43:f2:75:d4:54:6c:a4:9a:01:f6:30:8a:38:7a:e3:5e:
         94:ac:fc:74:f3:5f:ad:a5:d3:84:07:cb:a1:df:be:69:c9:5a:
         39:ac:23:51:64:1e:5c:fe:65:fb:e2:7b:17:fa:b8:45:41:30:
         72:9d:b0:0c:78:62:7b:9c:a7:6f:b6:cf:87:a9:e4:9a:1c:7a:
         56:ae:32:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIqQ3+29LJzfegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
NGJiNmYxY2UtY2NlYi00MGI4LTk0YzgtMTExNzNlNDFiMzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+irFfOV+6v4ELQvZ95TY8HQczOgGUKY3Hhq
68WfnERS9oGfyQWtUtE0bSzyzpCMXHiWkEpq1PWmCC1H3ztI2c7j00544myLICTi
gjwzZ3HjgUQdMc/yHNXHnUBI/7Urof1o8BBCK1eeNPcIdMaZkEXhKMgOIfl98PGG
z0w9WdHk8wJIl0eWKb8QQKfjk6FeYcsewRGgf/WUuBP3D+IefZvBbOUV8H4o5u+X
aAuaMTY3YmRXgJlzxCoZyEdLOnCL29Gb/sNc4poqeHczeX8fAZf9TqGqHaHIQPIZ
r+YuMkEpP6N7PL6VFX/qILEAvtrD6IHjVajkgzNXWgiQUtG43wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcrN0W5XVsY/5D4s+cZW5mqHHyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDZmOTI3OTQtNzZiMy0z
ZjgyLTgzMDktM2Y5ZDQ2NTNkOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGAWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMYqmN9MXFMPa2LTsN6p0iW4YNAzcopE53mA307rs8CZe7rXvpW8WRST
d1SBolQvfITl3kU59hdp8k1Ezx/x5qhr32Pmbz0gh+z1MPo7HjwGX5i7/EN812Sh
AJ6wp0NqaqdxJGkKz76HT8xH7mjQnyAf2EZx0mXknbaRqhcqKsiyVjWBteeu9KWK
tqPI7FKleUk21LGFbz9GEaehm5Tst1yz6gMOT/tgg7nhHrj+qi+raZ99HN/BQ/J1
1FRspJoB9jCKOHrjXpSs/HTzX62l04QHy6HfvmnJWjmsI1FkHlz+Zfviexf6uEVB
MHKdsAx4Ynucp2+2z4ep5JocelauMhY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:32 2025 by rpki-client