Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b60f08-a017-3579-883f-7488034e4ebf.roa
File:                     e7b60f08-a017-3579-883f-7488034e4ebf.roa (raw, json)
Hash identifier:          5q/HU8xLENW8/ztbZ2PK14oXC046sS6RHuQp1JFozSA=
Subject key identifier:   59:B6:A1:DD:7B:66:94:88:18:FB:B2:6F:E4:0B:F8:4F:30:64:CC:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F3A174012F5ABC1DBB600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b60f08-a017-3579-883f-7488034e4ebf.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        96.112.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:3a:17:40:12:f5:ab:c1:db:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=73f02719-9f3f-4a28-a5d6-f0cba3b6daf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:2e:b1:70:7d:1a:e1:9e:37:d9:21:14:3e:
                    b4:94:ca:39:d6:32:bf:9a:4e:68:84:63:d5:cd:02:
                    e5:38:54:50:df:c6:dd:d0:0a:c1:e1:49:9d:ca:af:
                    2c:5c:0f:34:49:dc:2e:6e:d8:ee:76:12:3c:3b:43:
                    0b:57:0f:c6:7b:8a:b7:e1:c1:69:96:bf:eb:6d:bb:
                    c2:84:c0:df:de:a9:9b:62:bc:05:99:cd:60:c2:56:
                    3d:8b:f5:37:a7:60:c6:f9:c6:48:d9:c7:da:58:60:
                    ba:86:5e:b4:a8:fd:f0:4e:fc:56:fb:7d:ad:ce:27:
                    77:77:ec:1e:ae:c4:75:cc:92:5b:ff:88:bb:52:4d:
                    a7:37:07:cf:a7:25:0e:28:bb:ce:cd:37:3d:d5:0c:
                    87:fe:ce:42:96:23:ea:c9:c8:a7:df:bf:78:07:f0:
                    39:c8:c5:f1:c3:64:ce:2d:a5:58:b8:15:2f:7e:8a:
                    08:f0:9e:d4:56:68:bf:41:42:98:c9:2d:aa:fc:ba:
                    7b:ab:64:60:79:b6:ea:d4:29:94:de:66:16:24:a8:
                    ac:88:9d:f9:ae:7a:d3:37:6a:bb:f2:fb:6c:d7:3a:
                    98:9a:1f:0e:49:e5:3a:9f:f3:69:ba:8b:00:48:e8:
                    8f:19:5b:31:e6:db:4b:85:76:62:52:44:c2:29:e9:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:A1:DD:7B:66:94:88:18:FB:B2:6F:E4:0B:F8:4F:30:64:CC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b60f08-a017-3579-883f-7488034e4ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.112.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:8e:c0:da:4e:13:13:a7:41:66:6c:e6:d8:29:8a:a4:8c:
         fe:c3:e9:13:28:63:cb:85:0a:b6:8c:7d:52:e6:0a:e9:c3:b1:
         a1:f4:d5:4f:75:16:13:50:35:98:f3:6f:46:cc:42:bd:d6:f1:
         e2:51:ba:21:27:71:0c:7a:78:dd:c2:85:80:7c:50:e1:bf:5d:
         67:05:53:87:51:8a:dc:5a:11:31:80:be:36:31:9f:cb:34:b6:
         77:fe:bc:cb:d2:33:79:33:c4:19:fa:06:46:12:f9:8c:0a:cd:
         0d:d8:f3:72:6c:e1:92:7b:27:93:0d:94:6f:91:8c:23:c9:74:
         c7:f6:8e:4b:2b:b9:88:59:fe:b8:d8:f4:41:ca:90:6c:7a:0d:
         66:92:12:98:c9:52:79:b6:2d:21:0e:91:30:85:48:69:03:66:
         54:ce:d6:e0:90:38:33:07:81:5c:1e:a5:34:61:eb:a2:0f:93:
         5a:5b:03:1d:cd:5b:d9:c2:7c:a4:3c:24:ed:13:a6:c4:77:48:
         4f:28:2f:2b:04:22:d9:f8:1a:f6:1c:aa:c9:f7:cf:a9:97:2d:
         5b:8b:c6:01:5b:3d:c3:7a:4f:9f:0e:48:a6:8f:03:ca:b0:60:
         6f:6e:dc:c3:13:f9:e5:d4:ee:e4:fd:3d:5b:67:79:69:73:e4:
         2b:16:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:48:21 2025 by rpki-client