Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f481f71-2d98-3429-9554-443b994424c7.roa
File:                     8f481f71-2d98-3429-9554-443b994424c7.roa (raw, json)
Hash identifier:          viTXtTQMqPX0ghtsb5DW5KS9okjMtV66qJzlTWWl3kE=
Subject key identifier:   51:4E:1F:7F:C1:32:5F:7B:04:B3:DB:25:9E:85:C0:57:D7:96:0C:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBA76196FACFE064B4C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f481f71-2d98-3429-9554-443b994424c7.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33489
IP address blocks:        70.88.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:a7:61:96:fa:cf:e0:64:b4:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=c95780ed-bf7b-452f-8f92-3cc907ba680b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:22:87:84:b0:85:6f:d7:0a:c2:20:a1:a3:
                    66:a7:a5:51:53:67:53:d6:3d:6d:a2:c5:fe:55:1e:
                    1f:65:71:4b:12:cb:fa:81:d5:9b:ce:0e:d2:bb:0d:
                    f3:95:d6:62:4c:e9:03:34:df:80:3f:3d:29:bb:3a:
                    6c:78:b2:bd:22:67:06:05:39:c0:8d:2c:45:db:51:
                    4f:8e:7d:f6:eb:e7:fb:cd:96:ec:17:12:c1:16:c2:
                    38:3c:9c:0c:b5:57:70:c5:b4:ad:fd:e6:df:54:da:
                    e7:f1:23:9b:88:c2:a0:43:25:6f:e6:35:5d:56:06:
                    e6:18:b5:15:78:fe:ac:a1:15:f3:2b:77:bc:1f:e1:
                    a7:2e:9b:05:74:3e:f8:70:bd:7c:40:9d:52:08:66:
                    27:d0:41:d1:18:f1:d5:98:c9:74:87:86:a0:77:41:
                    2f:b3:e6:8e:9e:6e:22:97:a3:b8:78:a5:fd:f0:02:
                    c8:0d:97:36:a2:9d:a4:ed:33:53:0e:d3:ed:03:a9:
                    4b:68:36:8f:ed:09:00:9b:be:59:f8:2d:63:39:a9:
                    3a:c3:97:32:e5:11:d2:b2:f2:4b:e1:60:77:40:05:
                    d5:2a:23:b7:ad:d6:69:9a:b6:96:6a:1a:c2:4c:1f:
                    33:cb:3b:6f:ea:61:11:3a:b0:d4:3f:36:ac:e4:55:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:1F:7F:C1:32:5F:7B:04:B3:DB:25:9E:85:C0:57:D7:96:0C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f481f71-2d98-3429-9554-443b994424c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:ec:ec:aa:59:72:b4:06:bc:cc:02:ea:d4:0b:d4:cb:51:96:
         de:5c:44:92:0f:82:53:99:16:66:50:e7:c5:a8:b2:0d:80:70:
         46:81:a6:eb:55:2a:63:a7:e7:10:71:fb:80:bd:4a:56:5e:f5:
         3d:e6:4e:c6:f2:0c:95:4d:ff:87:d5:5a:62:13:f6:e3:70:66:
         c2:32:30:5c:b0:cf:5c:fa:6f:93:b2:d5:5c:98:ab:03:65:04:
         a0:bf:e8:8a:20:c4:1d:41:e0:c1:78:e6:15:ce:36:b3:b0:44:
         cb:5c:3c:05:2a:d7:0f:a7:40:be:47:16:c6:ce:cc:dd:4f:f1:
         31:59:f0:c1:ec:b7:6a:89:1b:5e:55:4a:54:13:37:25:3b:bf:
         3f:60:61:75:d1:74:27:8a:c3:37:af:fc:dc:96:ed:23:1a:94:
         57:f0:3c:46:9c:69:c6:c3:21:d2:b5:59:24:27:4f:d8:3c:24:
         6f:41:c3:82:54:69:5d:c7:b5:10:08:bb:21:97:2e:b7:69:a5:
         83:43:90:a6:b3:f1:80:d8:80:d9:70:1d:e8:f0:a5:18:d0:39:
         99:51:94:fb:89:cd:a6:a5:a1:37:ac:ca:c2:e5:72:5c:0c:dd:
         4b:4e:5a:3b:8e:49:48:2f:20:6e:8b:67:c8:3b:96:e0:ed:93:
         4f:01:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:09:07 2025 by rpki-client