Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f26454-61bc-3ee6-a8db-e7f829629c36.roa
File:                     35f26454-61bc-3ee6-a8db-e7f829629c36.roa (raw, json)
Hash identifier:          OoDXggCgEDX8xPVdYzvIIanZeZAhkGT5p0Jm5Qic868=
Subject key identifier:   D3:0D:09:06:0A:2D:64:CC:29:74:F2:FD:32:C9:8C:03:F8:B9:28:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF752EB50C237CF3D182AD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f26454-61bc-3ee6-a8db-e7f829629c36.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        24.99.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:2e:b5:0c:23:7c:f3:d1:82:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=ee959b73-8752-46bd-87c8-84358cc57a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:5f:97:b8:b3:2c:33:e8:cc:3f:12:81:74:
                    8d:1f:af:35:cc:83:bd:e9:1f:c2:d1:0a:12:a5:af:
                    ba:19:7d:0f:af:a0:70:e5:f2:b3:80:9c:a8:98:96:
                    d2:5e:00:82:99:9f:bc:d2:36:3d:63:35:9a:c5:f3:
                    78:a0:07:e9:e7:4a:9c:3a:16:cf:f6:3f:25:cb:5a:
                    85:f1:a1:63:23:8b:cb:82:5a:a8:6d:f2:e7:c5:60:
                    f0:7a:13:ae:b8:60:15:43:d4:5e:c6:be:28:92:cc:
                    d7:6d:78:1f:b3:ba:b4:56:0e:79:b5:e5:16:bc:16:
                    84:ae:a9:ff:2e:11:b8:af:23:e3:b9:ce:d5:77:1b:
                    ae:6b:6a:38:c7:c5:b5:32:b5:6b:bf:58:a3:ae:ba:
                    1f:b5:10:0a:67:88:d0:5a:29:e4:a3:6c:ba:07:4e:
                    1c:3f:f1:4a:81:81:20:ad:e3:e9:e6:50:28:6c:bd:
                    e7:0f:cf:0a:5c:d7:a3:51:9f:64:68:09:18:ad:a0:
                    86:1b:e7:fd:03:d3:a3:49:e6:36:e4:18:d4:2a:93:
                    05:f4:6f:51:02:71:8e:f9:2b:3e:78:e0:7a:5d:5f:
                    ed:b5:d2:e5:ac:95:ef:05:30:d1:6c:25:bf:91:17:
                    85:fd:3e:a3:ae:9b:15:c7:4f:eb:92:64:97:b2:bd:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:09:06:0A:2D:64:CC:29:74:F2:FD:32:C9:8C:03:F8:B9:28:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f26454-61bc-3ee6-a8db-e7f829629c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1c:8c:ef:90:16:02:71:52:f4:3e:1f:00:10:58:cb:24:69:
         8e:3a:5b:a5:a1:ea:50:f3:42:ca:57:80:8d:0c:e3:1f:f0:2b:
         a7:99:2c:e8:31:79:56:b5:b5:b1:48:17:d2:12:ec:9a:e6:17:
         1c:f9:51:f6:19:3d:06:65:59:1a:4d:a6:97:9d:0c:f0:c2:22:
         72:01:2c:88:80:c9:4e:7a:0e:15:56:b5:52:f5:53:05:85:1f:
         71:dc:7b:61:9a:5e:02:e5:c6:bc:56:16:a6:48:76:50:7d:65:
         6c:ef:d9:1c:72:d8:c2:5d:bf:23:cd:ce:67:73:c8:84:d2:59:
         56:b1:24:54:5f:7a:97:42:1a:50:00:94:a3:9e:3e:8f:98:40:
         22:ea:d5:09:84:08:08:c2:66:db:46:eb:d7:d2:ae:b2:e5:0d:
         4b:a1:d2:8d:df:5e:8d:8b:cf:10:70:fa:cc:56:4c:a5:78:af:
         99:3f:f8:3e:b4:18:58:43:9b:ff:d3:72:f8:fd:dd:b4:28:77:
         03:d7:b7:55:80:9d:f9:c2:14:8a:9a:76:67:bb:a3:72:35:a9:
         1a:ff:7b:87:ba:3a:40:81:a5:49:93:1f:df:98:4c:52:43:a7:
         8b:e7:32:41:2c:e5:98:26:ed:e1:ee:40:9d:32:7d:07:7e:87:
         99:3e:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:34:54 2025 by rpki-client