Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3046389e-c76b-3e40-8682-e630fe5e50ca.roa
File:                     3046389e-c76b-3e40-8682-e630fe5e50ca.roa (raw, json)
Hash identifier:          VT7+aNW2i6ZCgcPNTIeAXxBrUnU85yObgoQsDPs428g=
Subject key identifier:   09:9F:33:36:78:9D:68:04:CF:43:72:D4:49:CD:78:43:FF:4B:9E:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB77B3A829D6AB6FBCE480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3046389e-c76b-3e40-8682-e630fe5e50ca.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        24.2.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:77:b3:a8:29:d6:ab:6f:bc:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1e533589-4399-4b85-a0f6-46a21307afc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:f6:e2:20:fb:00:26:7c:21:51:45:89:93:
                    d2:2e:53:79:32:15:da:27:62:b7:bb:9c:b2:77:71:
                    5b:25:17:11:3a:23:51:79:fd:6f:be:b3:d4:10:bb:
                    a9:fe:8d:71:48:85:16:5d:8c:ca:f2:8b:53:bd:aa:
                    db:04:e6:c5:79:6b:b8:67:f3:d5:74:4f:6d:1d:07:
                    f0:20:ea:d9:a6:dd:f1:91:10:c7:1d:f5:67:dd:68:
                    ce:50:5a:cd:ae:6f:49:f3:fa:23:31:0e:2b:31:33:
                    05:43:ce:b3:d8:54:4d:73:bf:a8:98:20:df:e2:5d:
                    e0:f3:7e:9e:cc:08:e9:65:6e:fb:b2:24:32:c6:0d:
                    d8:d3:57:66:32:63:81:56:2b:23:17:1a:b1:22:19:
                    b6:d6:5a:67:6e:a3:a8:7e:8f:50:76:97:c0:c0:c7:
                    e4:68:b6:dc:bc:61:82:3d:95:fb:ee:84:13:54:a6:
                    8f:e5:0e:60:98:4e:97:28:4b:b5:98:a0:d5:f4:d4:
                    44:c4:75:19:b6:d5:96:05:e6:89:c6:c3:f6:7e:60:
                    73:97:21:b7:c6:75:47:14:bf:89:c6:6a:e5:b1:07:
                    5d:ef:23:41:d4:02:fa:b1:1a:c7:a5:a0:83:8d:57:
                    6b:98:2a:3e:ca:31:49:99:3d:b2:57:da:c0:59:0e:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9F:33:36:78:9D:68:04:CF:43:72:D4:49:CD:78:43:FF:4B:9E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3046389e-c76b-3e40-8682-e630fe5e50ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:08:23:41:31:10:8c:5a:2c:15:47:1c:80:8a:91:0f:66:
         5b:ca:6e:2f:45:92:6f:bc:a3:c8:de:16:cd:10:53:55:73:34:
         a1:b3:2f:2f:54:39:19:b9:59:d0:ea:7b:c9:55:d1:1a:c6:e5:
         ad:c4:64:0c:d0:79:38:a8:59:17:09:fa:3c:8d:27:60:89:6f:
         d6:ff:d4:f7:a8:bf:29:eb:2d:6d:9b:18:b3:4d:fd:fc:b8:f0:
         3f:11:e8:d8:3e:d8:5a:b1:1e:ca:54:81:71:a6:b1:c7:8f:f6:
         6c:80:c4:ec:77:29:24:de:86:e8:41:17:34:41:f4:73:7b:fc:
         aa:00:52:39:45:34:3b:fc:7c:42:69:55:56:6b:86:5d:9d:60:
         7f:8d:61:84:77:bd:79:5a:b2:22:2a:b4:82:1b:1f:d6:ce:65:
         f5:01:d9:06:6b:12:fc:33:b3:75:af:fc:0b:72:e4:2e:1e:24:
         ba:55:8f:e6:7b:1e:f1:48:d1:c8:c6:36:ef:d8:14:2f:84:06:
         b5:fc:57:4b:d8:2e:07:15:34:99:ef:b1:4d:c6:4c:0a:c5:f5:
         0b:36:95:b0:ad:6f:ff:67:f3:b5:c0:cb:73:8f:09:0f:11:82:
         f3:3d:ce:2c:cf:ad:28:2a:38:9f:8b:42:2e:64:44:a5:ab:95:
         c6:fb:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:10:18 2025 by rpki-client