Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6686876b-a727-36f0-ae91-f3c442edbcea.roa
File:                     6686876b-a727-36f0-ae91-f3c442edbcea.roa (raw, json)
Hash identifier:          ++++Oj7FcqCkDkNEd1O0pG9Ld6ZxqLSnS4D1anY1UlQ=
Subject key identifier:   A3:AD:ED:1D:12:03:FD:96:DF:75:6D:4F:92:2D:57:49:E5:DA:18:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4C885CBDF85E38452D5E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6686876b-a727-36f0-ae91-f3c442edbcea.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7725
IP address blocks:        162.150.16.96/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:c8:85:cb:df:85:e3:84:52:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=e36fdda9-839f-4316-ad6b-cef9c97370b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:bf:7b:c8:0a:19:5a:ca:1e:9b:ec:6c:e9:
                    c3:75:d5:c3:92:0d:14:4e:50:d2:a6:54:c8:43:40:
                    ba:3f:51:99:40:a6:ea:02:be:19:e8:59:e2:83:ce:
                    2c:c2:4e:31:08:89:b2:13:82:10:67:cc:f3:2a:c1:
                    d5:c8:20:42:04:98:af:7f:37:04:1d:87:2a:ce:6c:
                    fb:87:23:c1:c2:56:4a:49:45:d7:90:03:bd:4a:b5:
                    3f:6f:ab:d0:13:14:68:55:e1:9a:83:8a:58:99:90:
                    ad:81:9c:21:b7:28:8e:bc:5e:07:b3:01:db:ad:6e:
                    0b:af:a2:de:a7:48:61:32:d6:b8:3c:51:93:b6:3a:
                    74:41:8e:80:49:44:c5:81:37:b8:39:5d:02:69:86:
                    7b:5f:5f:e6:fa:af:72:c1:50:54:4e:d9:78:ec:4b:
                    69:84:57:6f:48:f4:56:90:9f:20:46:44:92:ac:27:
                    4d:c2:79:69:43:12:97:dd:78:15:8c:4b:fb:5c:f1:
                    38:b4:05:86:cd:20:c6:17:37:e7:80:ab:93:a2:e4:
                    4a:9a:9d:29:3d:b5:10:63:ee:c9:a0:86:f4:b2:51:
                    4f:12:62:78:e1:0d:88:3d:fe:52:6d:61:85:26:77:
                    ef:47:d9:b5:bf:79:88:11:f6:49:71:19:a3:f8:14:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:ED:1D:12:03:FD:96:DF:75:6D:4F:92:2D:57:49:E5:DA:18:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6686876b-a727-36f0-ae91-f3c442edbcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.150.16.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:f5:82:77:d7:5d:55:8e:72:0e:fe:a0:5b:78:4b:99:f4:
         01:ae:16:01:bb:fb:d7:28:f6:90:05:17:56:ed:ee:5f:88:66:
         dd:dc:49:34:d1:e1:b2:e3:7a:14:82:5d:07:d4:78:33:0e:b7:
         9e:89:93:99:7f:4b:c9:05:f1:18:5c:88:ca:08:4c:f0:3f:dd:
         98:31:71:0d:47:31:c4:ba:96:06:9b:b3:c6:ac:57:b0:1c:3f:
         f4:37:25:05:f1:71:32:92:84:99:bc:02:6b:3f:69:a0:7c:5c:
         4b:a6:f6:c8:19:55:89:be:ab:84:e1:6a:b0:d0:96:63:23:e1:
         9f:52:d5:68:07:cf:4f:c5:d2:a6:5c:56:31:df:a6:db:6e:55:
         9d:8a:94:ad:65:f7:b1:be:dc:a2:a8:b4:74:75:a1:6e:5e:00:
         34:d0:65:d1:bf:6a:5b:a2:dd:f7:b2:1e:c0:7d:ad:38:8d:ea:
         b0:5a:9a:ba:18:78:cc:37:14:f0:d3:78:57:d6:74:db:49:67:
         2f:d6:48:64:c4:13:93:02:94:29:78:d2:23:1f:34:50:f7:5c:
         14:ce:ae:81:50:83:81:cf:fa:20:e5:b6:7a:66:ec:e0:f6:ae:
         48:45:ff:1f:cb:7e:52:36:63:da:ed:6d:d6:21:37:44:2a:0c:
         65:06:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:31:32 2025 by rpki-client