Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e6db6e7-d18f-3be1-a6f3-b16b014295bd.roa
File:                     4e6db6e7-d18f-3be1-a6f3-b16b014295bd.roa (raw, json)
Hash identifier:          3gMI7d4B9Rqg9wBZu/5ewawZCTLKSHPgR3YADdP5S44=
Subject key identifier:   96:AB:D5:5D:E8:C4:5C:49:A6:22:4D:BF:1E:BA:11:2C:4A:C9:7E:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992948F4225A087CBD135F040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e6db6e7-d18f-3be1-a6f3-b16b014295bd.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        71.198.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:8f:42:25:a0:87:cb:d1:35:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=220edaaa-5d5e-4455-976f-8f9f5161b912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:57:92:b7:15:4a:0f:7b:45:b1:b2:27:3b:
                    26:8e:f1:9f:08:8d:7c:92:ac:93:27:53:67:32:7e:
                    87:5d:93:58:75:45:07:9f:f8:6f:7e:90:af:4e:11:
                    2a:b8:41:3e:f4:45:31:b9:02:87:c4:b9:d8:7f:05:
                    67:bf:aa:39:4d:41:37:08:9c:86:53:33:0a:5a:0e:
                    b5:c2:92:0d:ab:4e:11:91:55:70:7d:e8:15:18:be:
                    6c:55:49:84:09:b9:a9:75:0f:87:4a:fd:4b:2e:7a:
                    9a:8b:0c:4d:a7:69:68:c7:6d:cd:67:79:17:ed:37:
                    b7:d0:55:89:7b:ac:12:bf:3d:9e:ba:e8:6c:a6:a9:
                    17:c3:bf:c8:68:4a:7c:a2:05:23:cd:d2:dc:2a:91:
                    c8:fc:fb:c2:77:dd:32:10:3a:a3:b5:f6:5d:55:2b:
                    0e:ec:62:df:98:33:3c:37:5d:43:84:35:38:2f:de:
                    49:ec:2c:b1:4a:34:42:e9:72:14:6d:23:3a:e2:86:
                    fe:b6:39:47:93:b8:53:e6:28:9c:7c:39:45:be:51:
                    92:b3:41:27:52:26:39:e2:06:09:96:63:0c:d8:05:
                    e2:dc:9a:fe:77:51:5f:c6:8a:8d:b3:31:4d:27:03:
                    6e:23:1c:19:5c:96:59:4f:fb:f9:c1:41:37:c3:6d:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:D5:5D:E8:C4:5C:49:A6:22:4D:BF:1E:BA:11:2C:4A:C9:7E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e6db6e7-d18f-3be1-a6f3-b16b014295bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.198.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:fb:c8:da:55:67:ec:17:c0:a6:9d:d2:34:f2:b5:1c:87:
         3a:e5:81:71:ec:1d:34:02:95:ed:24:62:0f:6a:af:70:80:39:
         d1:05:ef:e4:11:f2:c9:b5:95:77:3a:e8:68:6a:fb:24:e6:c9:
         dc:52:cf:4d:be:9d:9c:35:6e:38:e2:ef:54:ff:ea:55:c6:a7:
         0c:94:6b:7d:b3:67:94:4b:09:cc:45:39:0e:69:f4:23:a8:38:
         1f:31:8c:ae:b7:ae:61:a9:11:40:8b:3e:6a:a5:f7:d1:59:83:
         73:c4:48:66:9a:e9:b4:97:8f:0f:35:72:fa:0b:d0:75:35:f7:
         4b:9a:bc:de:5a:a3:4e:af:05:c8:6a:ce:11:1e:3f:ce:97:71:
         a0:72:9b:ec:7d:30:e1:08:2a:02:cd:b4:1c:c5:73:e5:d5:bc:
         af:45:e8:28:f2:3e:ff:21:27:0d:6f:34:f4:08:04:50:98:22:
         99:e3:66:1b:92:2f:cd:82:f7:bf:97:4f:06:30:59:23:cd:7b:
         2e:2e:19:1f:ee:69:fd:58:0b:78:11:b4:fc:61:7e:62:9f:6f:
         42:3f:43:4a:57:ba:94:f6:c0:c0:46:18:ff:14:12:c1:ae:c4:
         74:88:cc:f4:c7:3d:ba:90:75:d8:3a:f4:71:d1:3a:89:9f:b2:
         d6:1d:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:49:12 2025 by rpki-client