Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1410e7f-f8c5-3686-b3be-5cae4e926b73.roa
File:                     e1410e7f-f8c5-3686-b3be-5cae4e926b73.roa (raw, json)
Hash identifier:          BeLyj85WhPhfOGVXW+/NzzhFgVyNRw/ZxBjLBBQB1no=
Subject key identifier:   A3:83:04:A5:12:99:EE:EE:FD:E5:46:B9:7F:91:26:69:17:F5:2A:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5D1BA947E44B26F1C0080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1410e7f-f8c5-3686-b3be-5cae4e926b73.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        71.203.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:d1:ba:94:7e:44:b2:6f:1c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=80d8ce84-9ab4-432e-a922-05341eb8e9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:67:57:84:ac:c6:07:36:73:a7:55:38:d0:
                    20:f7:a7:59:3c:6d:d5:f5:bf:45:ec:95:4e:cc:31:
                    89:cc:e5:f2:af:b1:13:69:d3:c6:c9:99:82:f8:c6:
                    d0:e3:b4:06:23:6b:17:fa:60:8d:4d:d7:58:83:85:
                    14:4a:2a:19:c3:39:6e:3e:58:42:5d:c2:ab:c9:6c:
                    ba:f2:5d:1b:d6:a7:09:05:42:22:c1:d4:79:ea:8b:
                    76:f7:91:17:ce:df:68:cc:1f:e7:e5:d1:29:1f:77:
                    0c:96:0c:14:53:3a:d7:d7:91:5c:01:41:92:75:58:
                    95:3f:7e:89:eb:88:1f:f5:ab:f5:38:f3:66:3f:7e:
                    99:22:55:c8:32:64:67:af:a2:92:0f:ac:78:10:6f:
                    61:50:35:80:5f:ee:b1:7d:68:7c:85:11:dc:d8:27:
                    5b:44:6b:c1:70:20:2b:03:e7:76:0b:ce:7d:6a:8b:
                    6b:fb:c0:20:b6:31:80:81:e7:06:c9:d6:9a:f1:48:
                    02:12:ee:63:44:93:43:33:56:53:ab:56:af:75:81:
                    4e:be:86:41:a4:35:fa:20:bc:b9:8c:89:42:2a:7d:
                    12:24:7a:6d:03:0b:e5:65:01:df:ac:f9:cb:38:6e:
                    17:d9:76:8f:ee:c7:9b:39:2b:5b:0f:c4:3e:b8:65:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:83:04:A5:12:99:EE:EE:FD:E5:46:B9:7F:91:26:69:17:F5:2A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1410e7f-f8c5-3686-b3be-5cae4e926b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.203.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:3d:53:2b:75:53:dc:ba:b6:aa:7d:13:38:7b:d1:ef:f6:e9:
         f9:46:08:96:38:16:93:1a:d6:b2:47:dc:e9:30:d3:ff:f8:ac:
         44:6c:2a:00:a6:12:d5:41:ac:9d:9c:71:c4:50:c9:cf:2a:26:
         30:9f:3c:19:0a:8c:b2:f0:36:e3:a9:a8:c4:33:d4:71:9f:5c:
         fe:f2:1c:fa:0b:1a:85:ef:ec:cc:87:e4:af:a7:e2:52:ab:ee:
         db:86:c6:08:34:4b:2a:2c:10:4b:65:1e:0c:66:99:fb:5f:98:
         f7:75:a2:3c:20:44:23:7a:b0:c1:c6:da:1f:ae:50:d2:54:bd:
         2a:de:5d:06:e9:b4:52:ab:7c:d9:dc:26:37:25:48:6b:95:49:
         c4:61:06:80:6b:e4:a9:c3:3b:9e:bf:98:60:60:76:c7:32:a4:
         3c:f5:b5:0e:9f:05:c1:61:8d:b7:8a:8f:39:73:7e:d6:bf:bb:
         95:14:f1:ff:a5:58:ac:1f:61:44:da:e2:e3:b3:a5:46:0f:7f:
         54:40:25:df:be:ee:e5:81:65:9b:ea:be:f1:61:bf:eb:4d:50:
         4b:af:3f:96:57:a5:ce:b4:33:97:34:2d:0a:d6:8f:08:0f:75:
         6f:7e:85:14:7e:63:ba:4f:59:8d:77:a0:0a:95:c5:d5:c0:5f:
         d1:9e:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:02:57 2025 by rpki-client