Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8199c5ea-51b1-308a-af62-115a28fbd0b5.roa
File:                     8199c5ea-51b1-308a-af62-115a28fbd0b5.roa (raw, json)
Hash identifier:          PCdFfr+R9ghd9VMumBn2hYlbCQ3VK4YJ177sM9fMKQQ=
Subject key identifier:   96:E2:9F:7F:1C:B6:EA:83:9C:AD:BB:13:37:22:FA:61:DB:16:C9:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDA4C9717E120F6CE35880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8199c5ea-51b1-308a-af62-115a28fbd0b5.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        69.139.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:a4:c9:71:7e:12:0f:6c:e3:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ff75b157-c6e5-4562-9bf1-7654f3971dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:78:35:dd:a7:36:10:e6:84:d3:bc:d3:f2:
                    a9:e7:ad:db:ee:91:86:a0:e2:b9:84:cb:fc:7b:47:
                    63:60:3a:8e:31:59:45:3d:9d:3d:b6:8b:00:e7:16:
                    8a:2a:18:25:72:ab:76:fc:eb:8e:22:f5:ee:fb:ad:
                    26:f3:e6:9a:ae:ed:b0:16:6e:9f:61:9b:1c:56:ef:
                    af:8f:83:51:ba:61:0e:4f:82:23:24:02:46:97:7c:
                    eb:c4:6d:6a:a3:ce:77:23:73:11:cd:66:5a:4b:d6:
                    8a:cd:23:d5:97:09:af:df:ca:2c:5a:c3:f3:c3:35:
                    ea:ef:96:bd:b0:08:46:c7:61:11:83:ea:2d:c4:96:
                    39:9b:b3:81:e4:6b:d5:bd:c3:ce:20:bf:ad:0c:d4:
                    a2:8b:cc:c7:00:7c:8a:c5:b2:e2:26:82:02:cf:ee:
                    ae:99:3b:28:d9:de:dc:97:3c:90:36:cc:f6:6e:ca:
                    2e:d5:6f:6a:ba:7f:e8:ab:52:a0:25:7e:18:0e:1a:
                    8f:d5:d5:4e:69:40:61:72:8b:cd:8f:c2:43:d0:7c:
                    b9:da:1f:d8:13:e7:c4:7b:4f:6d:e7:af:49:6a:b0:
                    b5:43:3f:b1:9b:6d:da:d3:24:d9:33:9b:95:ff:ac:
                    0d:33:9d:2c:f7:53:42:60:5c:c2:ab:af:d8:c6:9d:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E2:9F:7F:1C:B6:EA:83:9C:AD:BB:13:37:22:FA:61:DB:16:C9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8199c5ea-51b1-308a-af62-115a28fbd0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:b3:a5:ef:ad:2d:a1:49:85:3c:56:bc:b8:03:76:1b:dc:85:
         ad:c6:18:ea:bb:21:6f:16:83:41:2c:35:56:d8:d9:a6:e4:2b:
         ae:d6:be:a0:d5:ef:80:03:2a:22:aa:3f:92:09:35:0b:46:3d:
         76:f7:b7:b7:b3:56:67:db:1f:00:81:d0:c8:cb:91:60:08:a3:
         f4:70:91:85:3a:f2:81:d4:87:06:88:ca:78:7d:e7:17:95:e5:
         c8:23:83:d8:0d:ab:87:53:35:46:d6:89:de:62:2e:6c:96:15:
         c5:f8:a8:c1:4a:5b:34:e1:29:e3:08:0e:0f:b2:16:13:83:94:
         33:26:16:81:36:cb:a4:a8:1d:4c:d4:a7:77:12:11:56:19:a5:
         3e:3e:ab:94:6b:e5:3f:73:f3:c8:67:90:13:6a:48:a0:9c:c0:
         5c:bb:e0:56:64:10:18:68:1c:85:f4:26:d7:99:9a:8d:2f:3e:
         d6:47:47:13:5a:23:7e:23:2c:d7:a3:41:89:53:b9:5b:86:fa:
         0a:1d:d3:9e:8d:00:56:8a:32:0b:57:35:0e:5e:74:54:4e:0b:
         f6:c5:93:f8:b7:25:2e:de:1c:a8:40:90:96:82:af:05:40:8d:
         84:61:43:22:26:e0:e9:8c:91:72:5b:f4:80:ca:a2:36:f7:f9:
         be:ff:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:32 2025 by rpki-client