Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b05e6c-0364-3953-b202-bd4881c70254.roa
File:                     69b05e6c-0364-3953-b202-bd4881c70254.roa (raw, json)
Hash identifier:          SaFlMK06Ktg82eRt2pdcL1OBYblvkNh69b7eMd+VBYA=
Subject key identifier:   CD:F3:E2:66:DC:F8:77:C7:9B:86:8F:59:06:F0:89:5D:9E:A0:7C:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06D047D47422FC1DCBAC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b05e6c-0364-3953-b202-bd4881c70254.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        24.7.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:d0:47:d4:74:22:fc:1d:cb:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=23c59168-96a6-42c0-9ee2-20532b3ccc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:89:37:f0:40:0d:c5:b5:46:50:10:e1:65:
                    38:f7:7f:29:6b:3f:75:72:99:a5:c2:da:6d:70:73:
                    0f:47:23:2a:16:ff:60:a0:d1:9c:77:b5:22:b5:cb:
                    67:3c:90:4d:bc:d7:f7:f5:f3:5e:c3:88:ad:14:58:
                    bf:4a:78:d0:91:e2:35:d6:2b:28:bd:8e:15:36:44:
                    f6:b2:3e:d6:c5:7f:83:6c:00:2b:90:bd:df:50:57:
                    ea:43:44:81:a4:3a:09:69:04:74:a0:dd:1c:f2:54:
                    d4:21:43:a8:7c:20:ee:63:2b:9e:25:6f:61:02:42:
                    95:e5:d0:81:c2:c1:b3:d4:ab:d0:5e:2c:ce:21:c9:
                    b7:68:76:8c:c6:93:0d:b1:af:ce:02:8a:bb:1a:d0:
                    d5:df:8f:a4:ad:d9:fc:ea:32:f9:27:f5:e4:10:11:
                    9b:33:d6:af:43:db:84:45:aa:39:22:9e:6e:99:7c:
                    cc:7f:8b:5e:0a:83:5d:5e:ef:2b:68:1b:38:d5:61:
                    41:d8:2a:f3:35:7e:60:c4:12:d5:d4:71:b1:2c:c1:
                    5d:ac:41:21:2f:22:24:93:15:9e:24:64:4a:57:5b:
                    70:eb:e2:91:74:61:03:53:9c:50:19:68:eb:f0:71:
                    91:32:01:20:78:c8:6d:61:66:5b:12:d8:83:8f:89:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:E2:66:DC:F8:77:C7:9B:86:8F:59:06:F0:89:5D:9E:A0:7C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b05e6c-0364-3953-b202-bd4881c70254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b4:7c:0a:c3:96:2e:c1:4d:15:12:9a:54:8c:1f:f0:4c:67:
         86:19:5c:e5:59:1d:66:c5:e4:1c:85:74:57:e0:13:0a:64:10:
         2d:35:b7:0b:26:c2:14:13:e0:c0:d0:66:7b:4e:de:c1:9f:6e:
         d0:4a:a1:3d:69:fd:6b:16:df:ef:a4:56:7e:31:21:e8:76:25:
         f9:2b:d9:ba:f3:14:3a:78:a7:53:1a:77:a5:59:0d:7a:91:53:
         07:d4:ba:ca:47:50:f2:a5:6c:9f:af:bb:a8:42:48:03:06:fb:
         3d:96:43:27:87:86:02:52:91:39:17:b8:82:59:4e:83:2f:62:
         8f:99:e3:0c:c0:7e:45:11:67:e5:ab:c9:0f:eb:a6:b8:f0:4c:
         3e:50:c7:58:34:2e:0a:51:89:a9:47:1f:2a:41:f8:9b:06:00:
         a3:63:14:24:1e:e4:e2:ef:4a:e1:e0:cf:e4:7f:8a:3b:5b:56:
         f9:0b:16:a0:84:65:41:d0:89:9b:97:a2:5e:2b:81:65:73:e7:
         6f:a6:1c:5c:7c:a3:77:65:08:64:d5:e8:04:e2:a4:eb:c1:ea:
         48:47:d0:51:64:38:ec:72:b1:27:84:82:53:f4:a0:3d:5e:41:
         dc:0d:73:fe:df:97:62:f2:d5:fe:ed:f2:62:7c:b5:0c:2f:b5:
         f2:c3:1e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:03:55 2025 by rpki-client