Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac6051f6-ee29-3abd-a32e-b3526d0fae33.roa
File:                     ac6051f6-ee29-3abd-a32e-b3526d0fae33.roa (raw, json)
Hash identifier:          rM3nzxAWYiHMFs7wU8/g+qsPjOrDFU7QC+4myCEdqAs=
Subject key identifier:   11:DB:92:28:36:94:57:B3:29:F4:94:5B:31:53:04:73:27:15:4A:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4B4981965D2851FFA9F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac6051f6-ee29-3abd-a32e-b3526d0fae33.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        96.124.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:b4:98:19:65:d2:85:1f:fa:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=740938a0-3a44-47be-b537-17871a09e04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:c1:9f:60:ea:12:69:a1:06:c9:75:a7:43:
                    b6:cf:6e:30:9f:5b:da:a3:36:3e:27:32:19:56:6d:
                    b8:8b:41:60:dd:a3:18:a3:21:8a:96:96:a5:8e:01:
                    5e:9c:05:d2:37:99:45:3f:dd:71:a0:18:6f:34:0e:
                    8e:77:d3:e7:33:79:d5:12:9d:1c:4a:95:13:e6:9b:
                    1d:af:f6:6b:ff:8a:70:c9:48:93:65:8e:b2:52:6d:
                    e9:f8:9c:c6:23:16:37:dc:18:be:86:20:c0:b3:40:
                    54:fb:e6:d5:a0:41:5b:f6:55:ac:cc:18:95:96:3b:
                    02:1b:f0:52:b2:15:7a:85:d7:f3:9f:96:41:7e:c8:
                    ca:e4:31:0e:54:4b:66:02:ec:1b:1f:5c:13:60:ba:
                    1d:68:9a:8d:68:a1:42:8b:83:69:5f:9c:75:af:d4:
                    44:f5:db:42:d8:30:bc:32:8d:03:1c:95:a2:08:e7:
                    a7:f2:89:2c:b8:20:6f:07:01:54:4e:3d:a8:57:2e:
                    61:a2:ab:84:56:b0:ac:b7:eb:60:30:d0:1e:ba:73:
                    bf:b6:40:a7:27:12:69:1c:63:8d:2f:81:f2:77:93:
                    f3:19:0f:e9:cd:cf:e4:f7:c6:3a:c7:70:e9:d5:58:
                    be:bb:00:d9:ab:44:bc:c2:b2:98:95:b9:46:93:7c:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DB:92:28:36:94:57:B3:29:F4:94:5B:31:53:04:73:27:15:4A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac6051f6-ee29-3abd-a32e-b3526d0fae33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.124.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:41:b4:43:34:e8:9d:64:01:23:7c:ad:15:80:f0:74:16:77:
         75:46:69:09:e9:d3:a6:35:a9:50:f0:a6:42:cd:7e:21:21:af:
         6f:b8:4d:24:45:ac:8b:2d:e1:81:aa:9c:6a:8b:fc:4c:77:d9:
         73:f8:6a:53:47:fa:d1:78:c1:5f:2c:e9:dc:aa:e6:ba:25:2e:
         0b:82:b4:05:f7:f8:fc:cf:ac:d3:6b:d3:b5:96:2c:ac:8b:16:
         cc:c4:77:b2:4a:16:c4:ff:68:30:be:51:43:62:02:4d:16:aa:
         ca:49:fe:51:74:07:6f:f4:67:94:75:01:9f:0c:02:44:45:58:
         e3:c4:6c:b6:cd:20:01:90:75:6a:e3:1d:bb:ed:8d:24:47:a6:
         35:9b:b6:6a:f3:94:23:23:47:7b:b5:42:02:72:9f:ec:20:bd:
         be:41:85:41:ab:5a:49:28:5f:13:3a:72:93:69:2e:34:2a:a9:
         7d:55:cd:50:bf:2e:08:d2:7c:7f:90:fa:6c:9d:61:68:13:98:
         33:4a:1e:85:58:b8:0d:14:95:73:9e:26:b3:ed:d8:a1:c5:b9:
         09:2a:05:77:5d:a3:83:16:64:b0:7f:2c:dd:8c:f9:f1:1e:e2:
         6d:11:2e:72:5b:a1:e2:59:74:1f:13:3f:b1:41:b5:70:0e:40:
         24:c7:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:48 2025 by rpki-client