Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb9ca2c-6a4b-3fed-8ad1-87822edc75d2.roa
File:                     2eb9ca2c-6a4b-3fed-8ad1-87822edc75d2.roa (raw, json)
Hash identifier:          PTqpduny5PO7rT0SDyX0QsnYBKNUS6R+HbBidyeIyp8=
Subject key identifier:   08:30:5E:1A:DA:80:CF:CC:7C:3F:CD:18:A8:50:7F:90:72:55:16:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F4C8D4B2514F8E4EB6B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb9ca2c-6a4b-3fed-8ad1-87822edc75d2.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        96.108.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:4c:8d:4b:25:14:f8:e4:eb:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=0016cef9-a764-4b18-973e-1db5c65c1dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:95:73:5a:8c:d4:ea:29:92:a8:d2:1b:87:
                    7b:5c:44:c5:e9:97:81:a3:36:f2:1c:bb:fa:40:cc:
                    5d:f6:90:5d:6a:45:35:ae:76:78:5f:77:3d:a8:b3:
                    5c:65:c9:34:55:20:af:19:39:06:e6:c9:f5:62:92:
                    12:a8:dd:74:36:18:14:cb:38:83:9f:55:00:bf:9e:
                    62:e4:22:4a:95:02:93:2b:64:8d:1b:59:8f:34:ab:
                    bd:8a:c2:f2:9d:4e:67:2d:25:ac:f9:bd:28:8c:74:
                    9e:68:8b:10:0f:69:17:e4:a4:82:87:65:be:f2:95:
                    e5:7a:b1:4d:ea:02:9b:a6:50:d0:54:3a:62:21:bc:
                    3f:0a:4f:bb:86:45:c9:43:37:33:8f:4e:85:e7:63:
                    a6:fa:be:06:ae:ae:8a:20:fa:0f:e0:74:4b:22:cc:
                    c6:30:db:75:f5:18:f2:9d:4a:36:94:3b:1e:3e:fa:
                    1f:8a:17:27:37:0f:30:5c:61:24:54:88:61:f6:cd:
                    63:a8:53:f6:f8:90:7f:85:4b:3b:56:b3:e0:24:f1:
                    02:d8:53:67:d4:e6:56:25:21:69:38:71:46:57:a0:
                    95:d1:e4:b8:fd:48:08:72:0b:11:58:e4:f6:ad:ce:
                    4e:3c:7f:ec:08:ff:2c:f0:f7:e2:93:07:5c:fb:1a:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:5E:1A:DA:80:CF:CC:7C:3F:CD:18:A8:50:7F:90:72:55:16:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb9ca2c-6a4b-3fed-8ad1-87822edc75d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:8d:f1:f2:cc:a3:4c:78:d4:8b:c9:f6:1a:76:21:be:6e:
         43:38:9d:fa:1d:f3:af:55:5e:2c:1b:c6:8d:72:bb:a9:df:90:
         2e:71:34:22:18:33:d9:9e:16:c8:a1:7c:50:95:dd:2c:eb:1c:
         69:e6:cb:b5:ca:3f:39:a8:11:f5:7a:03:6a:d5:a9:fe:12:6d:
         33:af:79:0f:bd:e8:bf:ef:01:4a:ec:aa:96:fa:ae:10:5d:06:
         0c:f5:24:e2:40:6f:92:f2:39:e0:76:ac:be:08:45:71:75:17:
         4d:47:77:7d:6e:0f:46:28:cc:b6:be:6a:4e:6e:48:64:a0:de:
         da:2f:e5:d7:9d:29:5a:b5:c5:d6:9b:b8:17:ed:b6:99:68:37:
         fa:93:d3:86:51:fa:02:06:6b:a7:69:de:83:27:0d:27:4e:4f:
         77:ce:a5:9d:89:75:ae:9f:18:c2:bd:25:bf:bb:a4:46:9e:6a:
         71:22:04:dd:e7:66:c1:de:18:c7:c2:c5:1e:ba:d9:c7:7c:f7:
         a6:ca:d4:4e:e4:79:ee:29:b5:34:f2:1e:1f:bf:7a:c7:8d:e3:
         0b:e3:11:17:3a:0d:c5:5e:90:e9:4f:ce:07:85:9c:ad:5a:ff:
         e2:ba:e9:5a:6a:06:26:9f:f8:e7:4d:7d:9a:dc:68:90:a7:94:
         11:3e:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:07 2025 by rpki-client