Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59f171e9-5a97-3a11-9df7-c8aedc9aa698.roa
File:                     59f171e9-5a97-3a11-9df7-c8aedc9aa698.roa (raw, json)
Hash identifier:          QnP6s3bTbFMTY0ZBGGqkzeR/2wlMnGv/9/KK61eSXsg=
Subject key identifier:   24:E9:16:26:76:A5:32:01:9F:25:B7:DA:A2:E7:53:45:76:B3:8C:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4317BBE0526089379E7A640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59f171e9-5a97-3a11-9df7-c8aedc9aa698.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        71.234.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:7b:be:05:26:08:93:79:e7:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=1521489f-ba98-498f-8deb-0d6e4f68e995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:e1:5a:ee:27:7b:71:0d:7d:ec:ea:af:10:
                    8b:88:f0:25:a6:00:56:f5:fc:aa:ca:8f:7a:62:cd:
                    a1:7b:59:c5:c4:80:e5:79:02:b9:e5:40:33:e2:03:
                    c8:e2:80:fc:44:82:52:62:de:f2:f8:dc:73:c1:a9:
                    04:0a:a0:8d:4b:c4:e2:18:0a:a6:c7:e4:de:91:65:
                    d6:34:13:78:73:19:a1:59:e2:89:b3:6f:cb:42:ec:
                    9b:55:5d:9a:f1:fa:4e:93:ff:89:b3:fa:63:86:5d:
                    f7:36:44:51:ad:f7:16:df:4d:2e:ee:17:d5:ed:74:
                    2c:8a:b1:7f:4b:19:96:4b:2c:98:55:96:3f:88:e6:
                    95:a6:fa:6c:3e:2d:c9:f2:87:42:7c:98:8f:36:62:
                    33:38:2c:07:f6:a4:da:af:6e:23:1c:00:f6:ba:3a:
                    e0:57:fc:d2:67:31:74:86:cb:02:bb:8b:a5:61:56:
                    df:a4:a4:54:36:1d:98:0f:16:b1:7b:a1:3b:b5:fc:
                    8a:0e:4e:9f:c6:c0:1b:2a:c7:48:40:76:22:28:f7:
                    5e:2e:3b:df:c4:d9:a6:55:74:eb:a0:e8:d8:be:59:
                    e3:08:83:e2:65:de:8e:42:ac:f2:03:d2:38:2e:b9:
                    c0:78:66:33:7b:02:5e:01:7d:6d:e5:62:13:13:41:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:16:26:76:A5:32:01:9F:25:B7:DA:A2:E7:53:45:76:B3:8C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59f171e9-5a97-3a11-9df7-c8aedc9aa698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:be:b3:c2:47:c0:e0:0e:48:26:ed:b1:09:5b:cc:52:62:2b:
         de:24:64:70:36:45:04:07:72:f8:d3:41:c1:56:7f:33:12:e0:
         59:03:5c:44:54:01:0b:fc:8f:78:cc:85:a7:70:d4:ea:77:04:
         b6:f7:bd:3c:f1:5b:d8:06:d0:53:22:e2:0e:c1:95:ec:5d:ed:
         2d:0a:5a:2f:ea:f0:7a:1d:62:ce:3e:2c:4d:11:86:e4:91:12:
         e0:4b:4f:b3:c1:70:65:68:6e:ca:cb:32:ef:3d:c5:da:c2:64:
         44:4f:92:23:39:9c:94:05:e6:76:dc:74:17:39:ad:e3:01:79:
         96:1c:4d:f0:e5:4a:4e:c2:ae:dc:fd:36:96:f4:22:71:83:98:
         4f:f9:1a:30:55:2a:d1:89:a8:c4:64:c4:8a:7e:81:68:e8:c8:
         53:07:01:4b:b2:0c:f6:0e:b9:a5:90:26:4c:2f:80:ec:c7:1d:
         a9:92:e3:73:1a:93:bc:c7:97:ad:62:6d:e3:f0:7c:a2:cb:e6:
         13:c4:7b:b8:ae:50:82:75:92:d2:6c:98:3c:2f:fd:5d:48:f0:
         57:d1:9d:40:58:0c:0d:26:12:9b:43:12:44:f5:0f:03:4c:a9:
         c0:c9:e1:74:ec:a1:ba:e4:83:ae:02:c3:42:1d:97:b1:2c:d0:
         c7:bd:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:11:04 2025 by rpki-client