Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2fcaee4-641d-303b-9eb4-4af831f30954.roa
File:                     a2fcaee4-641d-303b-9eb4-4af831f30954.roa (raw, json)
Hash identifier:          pOTo9BowFb2Ti6Gy4KTMlVwjsbg3f/lGjnPITJbXUyg=
Subject key identifier:   B1:19:0A:3F:96:C6:4D:B9:FD:14:22:D4:F2:4F:4D:76:47:C7:DE:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858498E649644F1E48AFBA1E78E30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2fcaee4-641d-303b-9eb4-4af831f30954.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        96.208.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:96:44:f1:e4:8a:fb:a1:e7:8e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=fc604a4b-4702-4b79-95ed-bfb911770ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:a2:42:ef:38:cc:f9:6f:8a:f8:9a:3a:d4:
                    83:48:e5:8d:6d:21:45:de:bf:ae:4a:be:ee:c2:b4:
                    b5:72:de:27:54:93:07:80:b7:47:14:19:c1:d7:9d:
                    30:26:18:7c:01:79:11:13:66:71:58:52:9b:c4:d6:
                    f5:e3:4a:c8:c3:11:0e:45:0f:2f:0c:3c:24:b3:7b:
                    2b:b2:4d:d7:df:ac:bb:0e:29:74:f6:1b:3b:12:31:
                    e8:0f:4c:7f:8e:c8:cd:bb:b2:eb:4e:31:f5:ae:9f:
                    0c:ed:0a:7f:32:03:e2:59:e0:a6:79:75:91:c8:41:
                    7f:d8:f6:1f:64:a9:40:1f:8a:8f:bc:17:10:cd:c2:
                    a8:a8:5e:dd:37:f6:4d:43:ee:f0:ad:81:81:74:66:
                    8f:41:a8:18:86:57:bb:71:60:fc:de:92:5e:9e:79:
                    36:97:57:05:b2:c2:12:50:c6:b0:e2:08:57:82:32:
                    e0:09:ad:ae:66:4e:4e:7c:a6:cc:00:6c:73:6c:02:
                    93:dd:7d:9a:0e:3e:6f:7f:59:48:ca:87:d6:ac:77:
                    b0:ec:66:fe:26:42:13:07:c2:b4:d7:e7:22:55:af:
                    5f:3e:40:29:73:4e:56:12:e9:68:f8:90:8e:f9:e7:
                    c3:e4:2d:28:12:a8:1c:8f:7a:06:72:48:ef:ad:0b:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:19:0A:3F:96:C6:4D:B9:FD:14:22:D4:F2:4F:4D:76:47:C7:DE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2fcaee4-641d-303b-9eb4-4af831f30954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.208.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:39:84:fe:b6:e0:dd:2b:dd:10:e6:aa:18:2f:70:77:80:
         75:25:2e:b1:62:c3:9f:c3:b4:8d:cc:8e:a3:d5:74:b9:7d:ba:
         95:0a:3d:10:de:04:81:f4:33:b2:73:34:4b:5d:17:b2:91:b7:
         1a:23:e9:f9:79:9c:ff:c7:81:32:c1:c1:3d:1a:b3:73:10:d5:
         40:70:71:1d:a0:3e:c3:e6:55:55:7b:47:5a:a5:74:94:1a:e5:
         d4:69:84:a5:f9:4e:15:d3:97:6c:e4:0b:84:1d:0b:8b:6f:69:
         6c:4e:34:21:b9:3a:10:8d:ae:a9:a9:86:64:80:82:35:54:3e:
         b4:66:31:c5:c3:8d:ac:f0:a2:b7:2a:b2:60:8c:e3:31:88:69:
         02:6f:04:a0:ef:2f:7b:94:3b:ea:38:df:71:b2:9b:4c:ae:67:
         94:2e:53:f8:80:d4:3a:a0:d2:0d:50:0a:f2:7b:e9:41:ed:c9:
         d6:bd:f6:13:de:62:4e:46:47:91:b4:f4:4a:b8:35:2d:13:f0:
         c5:d5:68:24:41:93:e0:2a:fd:a1:e7:be:a2:a3:ab:6c:1f:62:
         83:47:db:04:2b:91:f4:a8:51:ab:80:2b:fd:40:3a:7b:82:97:
         40:57:17:00:62:ba:f3:62:87:4f:77:c8:35:3e:6a:ed:3d:be:
         a7:11:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:48:39 2025 by rpki-client