Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c62a38bf-683f-32f0-b45c-20add78baf54.roa
File:                     c62a38bf-683f-32f0-b45c-20add78baf54.roa (raw, json)
Hash identifier:          TuSncMrn6Biu9YECOjRXhFBQ1533EXu1kpcWJyMDicM=
Subject key identifier:   1D:BD:99:02:A5:98:30:2F:1D:5F:FD:CE:63:C9:39:CF:81:50:15:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6216D12CF120728AAC7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c62a38bf-683f-32f0-b45c-20add78baf54.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33489
IP address blocks:        96.65.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:21:6d:12:cf:12:07:28:aa:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=060510d1-8773-4342-870f-a931c5d4f5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:d3:18:39:e8:3a:3e:02:9e:72:5c:aa:fd:
                    0c:84:6c:9b:f1:b7:90:52:da:ab:6f:34:99:95:99:
                    d1:c8:0e:4d:42:52:3a:44:9b:20:1f:00:bf:05:8e:
                    0c:2c:99:d8:ae:78:a2:2d:0e:a3:62:04:0e:bf:a9:
                    a1:44:17:5d:ca:ba:18:0e:c8:70:42:55:44:6e:03:
                    b7:f4:6b:e2:04:94:28:e1:aa:45:5a:4f:1d:3d:a0:
                    00:d1:09:aa:16:f6:f9:b4:68:f6:bf:45:d8:7f:db:
                    24:a4:d0:39:bb:ef:94:f5:bb:ae:37:1d:5f:bf:9e:
                    74:8e:58:71:cc:77:7f:80:1b:c8:36:93:fc:2c:d6:
                    1c:94:f1:cf:d2:ce:b8:c0:8f:3a:f8:7f:f1:a1:6c:
                    83:4d:d0:05:eb:28:51:07:e0:5c:43:8f:16:81:04:
                    df:6a:55:5f:0e:62:ca:2f:1b:5f:34:a1:1c:26:da:
                    cc:fd:66:af:2e:08:73:3b:ae:4e:31:8c:e3:3c:5a:
                    8f:62:5c:ed:87:1c:fe:b4:df:d3:ca:0d:97:26:49:
                    c4:43:87:b2:87:b7:7f:9b:09:7a:85:41:d6:7d:5b:
                    48:c7:e6:61:79:5f:ba:97:2e:a9:61:4e:50:27:86:
                    68:cd:ad:d6:1b:4b:40:d2:51:b5:e0:59:da:c1:9c:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:99:02:A5:98:30:2F:1D:5F:FD:CE:63:C9:39:CF:81:50:15:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c62a38bf-683f-32f0-b45c-20add78baf54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.65.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:64:dc:68:31:77:53:e8:75:13:d9:86:fa:d6:db:2e:08:00:
         e5:a5:ee:4a:25:04:80:57:78:cd:ca:df:cd:f4:76:6d:58:60:
         3f:02:e2:7a:e5:40:b6:79:cc:9b:49:56:79:08:f3:09:a5:61:
         dc:4b:ad:f1:41:e0:6d:93:96:ce:fa:77:c7:cf:b6:bd:11:33:
         52:57:c0:9a:b8:34:8d:1c:cf:c4:b2:6c:54:df:3a:6c:a7:a5:
         69:40:c6:64:fa:a8:4c:0f:fc:b5:f3:27:74:2f:8b:cf:43:3a:
         95:1d:6a:1d:5c:9c:60:f4:70:5e:2a:10:68:d6:8d:c6:4a:eb:
         e6:75:b9:e9:68:ce:39:36:83:55:f2:99:90:ac:19:b7:66:0e:
         aa:4b:d9:0a:a7:8b:19:93:3c:c8:b9:21:06:fa:a1:56:ce:77:
         35:fe:a1:44:0e:40:ee:87:99:18:22:69:16:d9:0b:30:87:f3:
         09:c0:1e:fa:17:bb:8f:9b:0a:33:78:fd:9c:68:dd:6f:47:c3:
         7e:a3:f0:11:61:08:e1:78:70:52:46:40:bf:f4:9c:99:d8:a3:
         5e:27:33:26:15:30:0d:ac:58:31:7b:e1:c6:48:65:48:17:ff:
         e2:70:17:19:08:b7:17:08:97:cb:3d:1d:76:04:ab:bc:b3:c1:
         08:fe:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:08 2025 by rpki-client