Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825cd932-0a48-352c-9c90-85286196c27d.roa
File:                     825cd932-0a48-352c-9c90-85286196c27d.roa (raw, json)
Hash identifier:          MZ/9HoTS4LFZO2AzHzM2sqMTJvm8P6rYDV0iY+h6Y/I=
Subject key identifier:   7B:D9:75:BE:CF:D5:33:E0:BB:A0:08:26:B1:73:49:59:7A:7E:58:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4317D411D398B79F1085E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825cd932-0a48-352c-9c90-85286196c27d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        71.235.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:7d:41:1d:39:8b:79:f1:08:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=54247590-3e8c-404e-a868-8f4ce54afbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:ab:9e:77:00:d8:f3:77:2e:48:85:60:95:
                    2f:fc:3d:81:10:72:1c:3c:a4:f1:b2:96:84:9b:03:
                    91:91:d6:3b:44:75:12:9e:97:a9:64:72:be:1b:b1:
                    a8:83:69:ca:b3:c5:2a:ff:da:5a:d7:c8:c0:3a:52:
                    41:ab:60:9d:8a:a8:0d:5f:b8:ec:3f:aa:45:ad:1f:
                    5a:a5:df:13:4e:07:5f:07:1f:9c:49:d5:c5:7a:5e:
                    26:fd:ca:c7:28:c5:27:cd:41:db:6f:fc:fd:ed:53:
                    6c:5b:92:48:5f:a5:fa:6c:ae:1f:cb:37:3e:a9:32:
                    f4:6f:3c:5c:ed:d4:f2:a5:29:c9:af:c8:b4:f6:85:
                    e5:a6:30:82:0c:09:de:17:16:76:14:c7:cc:58:06:
                    c8:4d:eb:1a:10:e3:02:f0:8f:4e:1b:e3:1f:fc:e2:
                    42:5c:87:05:25:4d:81:fd:16:85:98:c1:41:e4:c0:
                    e7:42:d8:e9:99:8d:1f:82:4e:8e:6d:83:88:e9:6a:
                    e9:5b:ec:07:53:4f:67:eb:16:0d:05:1a:13:3f:dd:
                    48:a0:e1:40:bb:a1:09:4b:00:40:86:81:98:8b:4e:
                    f4:c9:06:6e:ed:e3:6f:9e:1e:80:46:06:1b:8f:81:
                    83:07:c2:e5:c7:42:3f:a7:9d:5d:d6:9e:fb:e0:45:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D9:75:BE:CF:D5:33:E0:BB:A0:08:26:B1:73:49:59:7A:7E:58:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825cd932-0a48-352c-9c90-85286196c27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.235.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:67:84:64:9b:f6:da:ec:13:65:39:9c:9a:33:71:ab:86:c9:
         54:08:d1:97:0f:d6:c1:c5:21:e3:96:ab:85:5a:c9:70:65:e4:
         c2:13:cc:b0:87:02:ca:cb:99:27:eb:0e:f2:89:f9:42:12:5d:
         df:99:25:41:4f:46:d4:0c:b3:3b:15:c1:34:ea:47:2f:33:9c:
         7b:e2:59:0b:46:25:dd:c7:84:a3:4e:20:eb:f8:a9:95:3c:5a:
         c1:00:b3:06:88:31:3c:8e:13:53:6e:3e:1e:0c:d8:3d:20:54:
         25:7a:c4:13:59:97:3c:3e:f2:46:24:e0:63:d0:7a:4d:b0:95:
         7c:1c:0f:95:41:e7:a8:17:78:ab:15:5c:cc:05:a1:bd:64:81:
         6b:b2:c1:f2:67:5a:23:16:ba:61:64:f5:28:d3:2c:7e:2e:ab:
         f9:1b:1e:d7:7f:37:ae:b2:8c:e8:e0:64:5b:19:7d:93:03:b4:
         f3:ea:96:a0:6a:61:7c:3e:13:9f:55:a3:1b:41:f3:ba:4d:0e:
         c7:fc:1d:21:b0:d0:35:58:23:1c:05:33:18:ec:31:25:d5:77:
         83:da:46:4d:99:d4:a4:3b:2e:d9:bc:b2:62:bb:64:98:17:13:
         d1:1f:b1:c3:14:6a:08:d8:ea:75:d5:2b:ca:58:6d:30:31:45:
         6e:64:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:53:37 2025 by rpki-client