Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa
File:                     d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa (raw, json)
Hash identifier:          t35FvfpHAldKbg0kTGW7xxCgKtSGd8VNVCy0pnwqA0E=
Subject key identifier:   62:3C:6F:39:CE:AE:96:55:64:1F:25:9E:20:A0:92:7A:43:A8:8A:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA54AD9F45347C3B0D4F480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        107.4.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:4a:d9:f4:53:47:c3:b0:d4:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4711a7cf-240a-4a4c-9889-507f3a178379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:f2:b8:1b:26:48:90:45:ad:fe:54:76:5d:
                    fe:91:a5:a1:55:5b:0e:f1:7d:35:fb:17:e0:41:63:
                    b9:c5:9d:8c:e2:f9:cb:38:8c:14:f3:cd:09:d2:7c:
                    a4:ae:67:4f:39:48:45:04:35:18:e1:23:d0:a1:13:
                    96:2a:a6:1b:0a:b3:01:ec:b1:9c:12:17:0e:36:3b:
                    34:56:64:95:ed:17:7e:43:59:af:d4:d6:5d:a8:a4:
                    47:60:95:74:ea:20:ca:66:aa:05:7a:43:e4:5a:e3:
                    d2:65:c0:2d:ad:95:b7:a6:9e:3b:2e:7f:bc:89:92:
                    55:6e:b0:6d:e3:97:82:2f:0e:11:c7:2c:78:55:65:
                    97:ea:ed:e2:24:14:23:f9:b4:a3:92:b8:61:d7:01:
                    13:b2:3c:70:c3:94:a1:17:cb:d3:e8:e2:19:9e:cb:
                    35:93:82:da:89:88:33:15:4a:79:c2:36:6c:eb:9a:
                    ca:25:dd:3f:df:c3:af:c9:c4:b5:5f:6d:47:79:79:
                    e0:ad:04:65:1f:e5:79:06:de:39:9e:1b:58:91:0a:
                    d2:86:10:60:00:1c:e4:00:ca:93:60:f7:70:b6:04:
                    ae:c1:10:30:c5:58:2d:b0:02:bb:e7:e6:b0:35:33:
                    1f:ad:5a:88:ce:a7:ae:0b:85:60:4b:70:e6:52:c8:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3C:6F:39:CE:AE:96:55:64:1F:25:9E:20:A0:92:7A:43:A8:8A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4d4db1b-2d63-3f49-9796-a3140af53b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:51:59:1b:08:6a:44:a9:5b:66:a2:d0:4f:a9:67:ff:61:36:
         b4:7a:e0:4f:cb:76:d1:10:cb:d9:fb:a5:b8:7e:7c:73:25:37:
         25:67:e5:85:58:ac:ef:4f:65:d6:21:f4:4c:31:e8:54:78:97:
         df:57:0f:6d:60:d6:d8:93:39:6f:e0:99:ca:80:73:93:6d:d3:
         36:c7:5e:d8:9c:e7:20:0f:90:fc:d3:d7:05:48:29:46:e5:ad:
         d9:f6:c0:0b:e7:c0:88:cb:89:3d:70:6a:99:ac:d4:33:5b:97:
         82:76:46:31:98:0f:40:c5:e2:1d:65:18:ed:22:12:a1:21:f1:
         eb:32:71:45:b8:b9:e8:a0:88:b3:c9:47:0f:e5:eb:da:3e:ae:
         de:47:67:79:3a:fc:3b:cf:61:df:6f:48:93:90:29:82:31:79:
         d2:ac:90:a0:80:a1:da:16:74:33:5f:19:bd:b3:3a:a7:b3:9d:
         0d:47:20:a0:f0:b3:63:29:18:95:55:ab:44:ac:6c:fd:dd:45:
         c0:10:51:e8:43:15:70:6a:65:58:bc:5f:3a:4e:57:20:6e:9b:
         ae:d2:6b:63:43:bf:3b:df:7b:e3:7e:7e:c4:96:b3:df:1c:60:
         1c:38:e0:ca:84:57:a8:54:ca:53:40:41:71:b0:49:9d:bb:b3:
         55:73:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:42 2025 by rpki-client