Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6087ace4-e9ce-33a4-ad6e-c42323abc40f.roa
File:                     6087ace4-e9ce-33a4-ad6e-c42323abc40f.roa (raw, json)
Hash identifier:          xCzy3tcinv0Y6ON0R6QxIHni1KLDwZfJFX4wtnKDR8g=
Subject key identifier:   33:3E:D7:53:9C:94:B9:02:9C:98:37:D6:33:56:9D:7F:16:07:39:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C063DC2C428E52CD519EB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6087ace4-e9ce-33a4-ad6e-c42323abc40f.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        69.246.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:3d:c2:c4:28:e5:2c:d5:19:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8c61a99d-c5e7-4040-8513-a0138a34c0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:9b:73:2b:0d:17:d0:58:5f:a0:74:1e:8e:
                    3b:2b:55:70:41:e3:a8:7a:d6:a9:6b:83:49:90:3e:
                    30:b4:26:8f:e5:24:a7:d3:3f:dc:40:81:d5:b9:06:
                    a1:cb:45:a3:81:04:2d:f7:a0:3a:34:d5:62:63:00:
                    44:7c:0d:80:ea:50:b6:1f:ce:13:1d:20:19:99:11:
                    4c:d9:51:42:f0:3f:e4:c2:e7:f7:94:e7:27:91:cb:
                    1f:6b:a0:63:96:9f:d9:02:22:ac:b7:4d:54:ea:e9:
                    01:27:3c:7c:ed:78:05:2d:0c:0e:94:39:56:e1:da:
                    2a:86:0c:58:6f:ba:3f:a7:8f:04:0e:48:ff:64:5f:
                    2b:98:68:7e:73:42:41:86:e5:44:d3:e2:fb:20:4b:
                    07:ac:c6:41:06:e6:ca:ee:00:73:df:75:e1:f2:7b:
                    d8:bf:0f:24:6c:56:bd:cf:a2:70:1b:a7:37:42:0f:
                    5a:8f:7b:21:0c:5f:d5:db:86:33:63:4b:9b:8b:60:
                    91:e7:4c:77:f3:6c:b9:33:2a:2a:fd:6d:87:b9:63:
                    d8:84:9c:7d:18:a9:53:2f:e0:cd:dd:a0:aa:0d:71:
                    4f:97:3e:a0:5a:ef:64:d5:9c:1b:5b:28:cd:31:db:
                    35:cc:b7:7f:75:20:b7:f6:62:4c:0f:9c:be:83:0f:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3E:D7:53:9C:94:B9:02:9C:98:37:D6:33:56:9D:7F:16:07:39:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6087ace4-e9ce-33a4-ad6e-c42323abc40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c8:35:03:66:56:07:11:09:b0:c3:50:b6:5b:e7:16:31:2a:
         2b:92:58:98:f0:2c:35:09:49:60:5a:8d:18:ed:4a:57:d0:dd:
         be:7b:97:53:16:b2:ef:c3:02:7a:06:a9:8c:13:29:a4:db:19:
         4d:5a:f2:7c:7f:63:83:79:19:04:59:d5:f4:b7:8c:34:ea:fb:
         23:56:5f:8b:2f:de:16:1e:bb:64:bb:af:f1:73:e2:4d:ef:8c:
         67:d1:54:0b:92:91:c3:5f:87:f9:19:b8:f0:59:33:1e:2e:54:
         61:ef:be:f4:19:51:5b:bd:db:7a:47:1f:78:7b:2c:97:9d:54:
         f5:a8:8f:03:c5:9e:a9:f2:b4:bb:81:16:1b:25:2f:08:e6:60:
         3a:55:ac:09:0b:f2:14:55:f0:2d:93:bf:aa:08:e0:e5:eb:49:
         8f:2f:ee:0a:e9:e4:46:54:ea:80:10:0c:57:03:f6:91:61:ef:
         b3:a7:20:b0:c1:4b:7a:07:4e:ae:07:3b:09:ec:df:79:f8:21:
         6c:76:da:b3:0c:38:dc:68:65:b1:5a:2e:9c:03:6d:46:68:02:
         c5:9d:10:58:1c:6d:55:e8:b4:e6:22:34:dc:79:bd:60:b0:e5:
         ca:42:1b:d8:91:dc:32:fa:b7:97:ff:1a:b4:c6:94:9c:4b:77:
         74:86:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:49:54 2025 by rpki-client