Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4da00dbb-d31c-3ec6-857c-eb5f41018ccc.roa
File:                     4da00dbb-d31c-3ec6-857c-eb5f41018ccc.roa (raw, json)
Hash identifier:          CJHudAnSQUTF1CWprUG6H49gZpsiEHcNl1oyYpogrjc=
Subject key identifier:   CB:42:FF:B9:D0:9D:D1:1F:C2:DD:57:0F:1C:8F:39:B7:E3:B2:47:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED5D2B85E754A7C2133B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4da00dbb-d31c-3ec6-857c-eb5f41018ccc.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        71.63.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:5d:2b:85:e7:54:a7:c2:13:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=986077c9-605d-4a56-8991-15709fb77598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:3d:a9:08:02:91:95:a4:01:51:7c:45:67:
                    0f:e7:20:0a:25:75:24:b9:a6:2e:c6:73:94:cb:64:
                    91:f0:88:e8:83:1e:f1:1e:09:cd:e6:a0:05:0b:36:
                    5a:1b:5d:26:ce:bc:84:1d:ba:85:ae:f7:25:8f:c2:
                    3d:93:e8:9a:c0:d6:af:29:4d:be:0e:31:49:8d:d8:
                    52:8f:89:0e:26:7a:9f:4a:30:e4:71:d4:d3:d8:d2:
                    14:fb:65:15:b4:95:e9:02:c4:81:d2:41:c5:8b:78:
                    11:e0:1f:ff:e7:d5:a8:31:61:bf:9b:42:09:03:2d:
                    30:b8:a2:7e:2e:0e:2b:dc:da:2c:4f:bd:d3:f4:40:
                    52:7c:2b:94:2a:2c:00:0a:94:c6:e4:31:ca:21:1e:
                    a2:95:d2:9e:b0:ef:b2:47:89:76:4b:6e:77:28:5e:
                    50:d7:7b:fb:95:ee:dd:8d:c0:ba:a1:c4:18:67:fe:
                    82:6e:82:d5:49:a9:fc:7b:1f:13:5b:9d:60:14:7e:
                    fd:ec:5f:e8:2b:48:3d:e5:df:93:84:f8:8e:41:1a:
                    5c:49:e7:38:f1:5b:0e:37:7e:41:42:7a:c4:5a:c5:
                    4c:79:1d:06:08:d7:af:23:78:bc:c5:a7:25:0b:86:
                    cb:8e:80:25:22:bf:1b:83:16:39:ad:74:d3:02:5d:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:42:FF:B9:D0:9D:D1:1F:C2:DD:57:0F:1C:8F:39:B7:E3:B2:47:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4da00dbb-d31c-3ec6-857c-eb5f41018ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:25:93:a8:61:61:56:c7:a5:a5:22:46:df:23:7e:d2:8b:
         b3:c9:96:9d:37:4e:b9:8b:a2:6e:b5:20:3f:38:b2:7d:88:0f:
         f7:83:c9:e3:07:b3:f3:52:f3:ed:b5:71:56:14:0c:18:6f:71:
         d5:16:3f:65:98:f8:e5:11:81:f4:80:fe:a9:d9:57:f4:96:6e:
         c8:56:84:63:4e:a2:f3:2b:6f:1e:dd:71:3d:a9:3d:81:60:7c:
         5f:fb:81:53:1a:b2:a9:49:03:3e:ca:6e:5c:16:b1:b0:13:38:
         e9:72:a5:d8:54:fa:3f:64:ff:3c:38:28:ce:6b:3e:04:a8:7e:
         8c:28:f2:4d:86:c2:a3:2f:5c:e3:19:b9:50:fb:f6:d1:2e:ef:
         c7:5f:95:2a:d4:32:d6:bb:c9:1a:c1:84:49:f8:f8:ae:db:40:
         60:e6:69:ae:14:ae:d6:35:56:0e:a5:83:44:78:93:2f:cf:3d:
         e1:b6:b3:ea:75:81:25:5a:ea:0c:3f:a4:04:8e:7b:69:d2:9a:
         95:b9:5c:c4:0a:d4:66:c4:27:19:0a:9c:51:16:6a:ad:29:f6:
         9d:24:60:cc:ae:96:86:b3:cd:91:e2:c4:19:c1:f1:49:ab:15:
         2b:a3:28:8f:e7:f3:70:6d:3a:29:8a:48:10:59:d6:0e:26:12:
         79:4a:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:19 2025 by rpki-client