Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c94fbf1-33d7-3d32-82f0-a9d7728cf27e.roa
File:                     4c94fbf1-33d7-3d32-82f0-a9d7728cf27e.roa (raw, json)
Hash identifier:          XX4kILDaJi2GOcOP4zK6E9LncIMwDz+eJVGD/UaB9cU=
Subject key identifier:   0E:56:60:4C:3B:56:13:DF:D7:8B:44:86:95:6D:E9:AD:D6:99:2A:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849A1EF780918E2926901302F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c94fbf1-33d7-3d32-82f0-a9d7728cf27e.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     33661
IP address blocks:        50.145.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:78:09:18:e2:92:69:01:30:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=15b3fdd8-246d-4b5d-b3af-bc2af3dfa099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:43:db:69:ec:88:18:5e:3b:90:6b:b6:62:
                    96:54:31:7f:93:22:ea:ca:e4:dd:f6:39:30:d1:4d:
                    b8:32:7e:1d:58:8a:ac:b2:d7:8d:62:25:44:d5:03:
                    83:2f:93:9f:27:a6:fd:63:c1:89:61:9c:0a:39:1e:
                    f8:67:ef:c5:59:ff:b6:c1:bd:6f:50:dc:14:33:14:
                    32:1f:1b:c7:ef:1d:af:f9:e6:d2:c2:2f:20:92:22:
                    70:9f:30:bc:e7:fb:46:b3:fa:83:67:d5:9c:bf:e8:
                    97:92:da:3d:88:da:67:ef:4f:e7:a9:f9:f7:55:2d:
                    ca:79:03:79:92:4f:ab:e5:50:dc:36:c5:d4:7a:71:
                    9c:a2:bc:d2:83:f9:41:bd:30:7c:f7:4d:21:eb:e3:
                    59:cb:9b:66:d1:46:88:f9:a6:21:cb:be:82:93:4b:
                    91:02:e8:a9:a8:9f:28:85:de:e2:59:fc:00:e6:95:
                    27:92:f2:e2:46:9e:06:f3:ab:2d:82:eb:33:30:ce:
                    e8:a6:b0:de:79:2a:13:20:28:87:ba:13:ec:ea:e8:
                    02:39:d3:bb:87:b2:0d:4e:03:fe:fc:56:af:d7:5f:
                    54:4a:fb:39:52:7d:b3:88:b1:18:2d:10:57:7e:71:
                    c7:fa:0e:ff:b7:14:59:94:a9:67:cd:74:4d:36:a0:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:56:60:4C:3B:56:13:DF:D7:8B:44:86:95:6D:E9:AD:D6:99:2A:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c94fbf1-33d7-3d32-82f0-a9d7728cf27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.145.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:7e:b6:e5:e4:bb:e7:c8:e8:d3:90:41:2e:42:4b:c0:91:
         93:22:e2:b1:5a:07:4e:60:50:08:08:73:77:15:fc:68:13:b7:
         b5:14:0e:ab:6e:44:c8:8a:6e:ac:e3:83:31:fb:21:8d:b6:3f:
         15:7c:c8:9e:19:37:e5:48:ca:79:80:b3:9b:0e:5e:b3:f9:59:
         8b:0b:16:31:93:80:ad:fd:96:53:2b:fd:2e:42:cb:e5:87:24:
         6f:0f:e5:17:40:c7:b4:04:13:eb:9b:85:d8:bb:2e:22:37:5e:
         b8:a9:fc:9b:ab:1e:a2:06:37:c7:8b:f2:63:d7:3a:d0:91:9b:
         29:15:e2:e3:62:3e:86:f2:bf:e3:58:0a:5a:0f:c1:3a:16:23:
         23:af:f3:f9:59:b5:b8:a5:2a:52:03:9d:47:8f:e7:18:de:18:
         21:6e:48:73:f4:39:87:41:38:35:7c:38:d0:76:a4:8c:49:52:
         d7:c0:74:6c:52:fb:6b:02:82:5c:7d:0b:b7:b0:e8:00:44:fb:
         a0:5e:da:fb:f8:d0:dd:62:ed:9c:1e:4f:92:a8:6f:1a:bf:14:
         4b:84:5a:fe:24:d4:c7:e8:70:a5:e3:af:ac:1d:a1:a9:83:d7:
         db:96:6d:79:a6:f5:6b:2d:e5:f3:38:36:cf:a7:77:4f:72:03:
         01:cc:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:09 2025 by rpki-client