Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ef08e2b-b391-3ea0-9862-d3a3d1387e3b.roa
File:                     4ef08e2b-b391-3ea0-9862-d3a3d1387e3b.roa (raw, json)
Hash identifier:          RwwCOSdSmA8Qq+GHJGK/KM/ISrxWkvApjmq/1Kq7rL4=
Subject key identifier:   87:A7:5D:C6:3E:AE:9F:2D:5C:A9:92:89:77:3C:6D:2C:AA:54:5C:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5CFED38A5C7756448ED40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ef08e2b-b391-3ea0-9862-d3a3d1387e3b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        69.252.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:cf:ed:38:a5:c7:75:64:48:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=7d47e94b-85fd-4cad-a3ac-ad269c25aafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:51:ed:e2:d8:c8:1e:56:d7:88:a5:44:61:
                    36:8e:8c:ee:59:24:96:e0:b4:45:e2:2b:73:ff:a7:
                    be:74:e9:d3:51:11:f9:1e:c5:ac:e1:86:f9:02:eb:
                    d7:a4:7f:5b:92:5e:80:73:be:0e:40:52:24:da:07:
                    3f:54:75:be:bd:28:72:79:d0:06:f7:1f:bb:ab:1c:
                    1a:9e:a4:88:3d:bc:6a:c1:3b:07:5c:57:f9:01:3d:
                    63:7a:de:fd:6e:7b:5b:a3:da:95:92:f0:fe:5a:70:
                    f4:d4:1d:a4:a8:75:16:58:fe:00:ea:36:10:7e:71:
                    e8:fe:e0:cd:ac:5f:da:fd:6c:a8:2c:7a:cf:41:e7:
                    9b:8f:ae:df:34:0f:e4:91:d4:79:76:5e:e0:b4:e3:
                    1f:87:37:fc:58:47:78:a5:e6:48:f9:76:21:e1:f0:
                    e7:49:1e:35:e4:2a:03:7c:5e:b6:5a:2f:c3:3b:cf:
                    02:3c:75:60:ed:2f:e6:e1:ad:d7:b3:d0:be:d7:e1:
                    cd:17:a7:2e:4d:30:f2:cb:32:9e:9e:04:b1:b7:f7:
                    10:da:90:1a:c9:b8:d0:20:38:58:93:97:7b:68:fa:
                    ed:60:0f:8b:45:fe:1e:71:7c:9c:af:aa:62:1a:3f:
                    14:f5:1c:a0:86:1d:ac:d4:55:35:c4:40:6e:05:8a:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:5D:C6:3E:AE:9F:2D:5C:A9:92:89:77:3C:6D:2C:AA:54:5C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ef08e2b-b391-3ea0-9862-d3a3d1387e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:9f:c6:7c:05:34:36:a4:25:b2:d7:00:2d:e8:ad:81:34:
         a8:51:e1:b6:5e:67:17:80:cf:f2:29:59:75:e1:5f:f7:cd:28:
         4d:7f:bb:f4:b1:69:11:36:44:fc:5f:79:47:0f:37:f9:f0:90:
         87:30:6c:9b:dd:fe:21:93:86:fe:7d:54:39:a2:31:aa:5b:53:
         b3:80:b2:5a:61:a2:74:cd:1f:ed:be:99:8f:a1:63:f0:77:7b:
         3f:5c:00:a7:b9:43:bd:e9:b8:b0:2f:3a:4e:40:d9:b5:02:ba:
         70:ce:48:c1:cf:47:6d:07:a5:4a:7f:31:66:e9:00:71:34:6f:
         63:92:f9:40:bc:04:c7:6c:d2:73:c1:ea:3e:1b:1c:5d:28:7d:
         94:4e:4e:9e:40:68:05:c6:06:f2:1d:c0:dd:49:0b:d5:0d:27:
         2c:60:f4:61:29:5b:a3:cb:de:d1:f0:b1:36:a3:40:bb:40:92:
         f5:89:41:c0:93:5e:6d:c3:fc:65:fa:ba:00:fb:57:b0:69:b2:
         50:83:7f:4b:19:1e:ad:fd:82:c0:57:b1:71:e0:7a:0f:f9:eb:
         4d:41:b8:68:97:4c:20:83:96:78:a5:ce:b2:3f:d6:ca:16:f7:
         3d:b2:5c:05:3b:76:2f:39:b9:65:09:52:97:03:1c:d4:77:74:
         58:34:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:55 2025 by rpki-client