Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5919996-a0b1-341a-8079-dcd2be5f2dde.roa
File:                     e5919996-a0b1-341a-8079-dcd2be5f2dde.roa (raw, json)
Hash identifier:          omI/tp8IQIv2dd54LzR4vlGjIRZstDV3RhALcavwoWU=
Subject key identifier:   9B:DF:2E:DD:2B:9A:59:86:4F:07:CA:89:EF:6B:A0:ED:1E:19:69:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDCA23881D3E036C7AB300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5919996-a0b1-341a-8079-dcd2be5f2dde.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        71.24.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:ca:23:88:1d:3e:03:6c:7a:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ea9e4638-79ed-43aa-97b0-7889a7d32cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:b7:38:80:0d:99:90:77:18:3c:e0:7e:7d:
                    6d:f8:39:96:a7:1b:24:96:ba:5a:d1:8a:db:c1:b7:
                    5a:07:16:fe:8f:1d:f4:51:0c:2c:3c:2c:b2:4d:f1:
                    99:c4:89:2d:f3:27:c7:e8:35:60:84:50:54:1b:1d:
                    40:93:b5:93:bd:56:61:98:13:d3:72:93:0a:fc:c0:
                    95:62:fb:a7:5f:8b:76:93:1e:85:10:c0:5f:5f:e1:
                    a2:d5:9c:83:ab:af:c2:07:e1:11:cb:b8:58:a7:bb:
                    05:74:30:63:36:90:ec:8f:e1:fe:11:ea:2a:13:62:
                    7a:2b:30:78:c2:ee:f3:b6:e8:3e:4d:bc:57:d8:00:
                    ed:c0:5e:42:5c:60:6f:8e:49:e0:ac:2c:24:b2:79:
                    54:c7:25:66:6d:be:9d:b7:dc:68:5a:a2:f5:09:4a:
                    52:1a:3f:d6:c6:3b:57:02:7c:71:30:15:52:7b:de:
                    7c:c6:43:99:f1:72:34:fc:20:c9:c4:33:14:c6:35:
                    d2:63:03:5d:7a:3f:c4:6d:b9:28:2b:82:c5:4a:05:
                    5e:3b:32:7f:6c:7e:ee:ba:a5:f2:68:04:3a:30:fc:
                    54:06:ef:a1:fd:0e:cc:47:f8:15:e9:8a:5d:95:46:
                    31:df:79:c5:3f:d4:1e:af:28:71:3f:12:56:3a:21:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:2E:DD:2B:9A:59:86:4F:07:CA:89:EF:6B:A0:ED:1E:19:69:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5919996-a0b1-341a-8079-dcd2be5f2dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.24.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:07:b1:ac:82:65:bc:3c:3c:5a:8c:7c:7e:2d:d4:e7:86:57:
         0e:64:40:65:11:58:99:82:e4:6c:40:93:ca:bf:1c:55:03:78:
         1a:63:23:2f:16:3e:51:09:08:32:b5:0d:46:52:4d:2a:14:6e:
         b9:29:46:37:02:0c:16:e9:21:7d:ac:7c:46:d4:60:24:10:c3:
         f4:04:26:67:e0:4b:a8:74:8e:73:41:32:22:31:37:1d:04:98:
         46:1e:2a:5e:c8:94:51:c8:8a:a0:a2:01:1b:83:cd:d0:e8:ea:
         dc:4c:8f:fd:12:32:1f:57:35:8d:b2:f0:fa:4c:03:24:62:e1:
         ec:bf:9e:e5:e3:0e:fd:0c:09:51:13:9b:1e:fc:5b:bc:f7:8f:
         e9:34:e1:0d:70:cd:0c:2e:f9:3c:47:52:68:1f:6e:c1:1a:e6:
         e9:96:8d:02:92:66:45:63:f9:80:6a:68:a7:23:29:ad:7c:e2:
         4a:75:62:16:06:c7:83:68:c3:b4:97:69:0d:f5:99:ac:54:52:
         b8:06:4e:cd:60:6d:d2:70:71:a5:fa:ea:6b:e5:73:23:5d:1e:
         4c:58:44:24:0a:36:9b:45:eb:73:92:3d:63:bd:e7:49:5f:3f:
         27:d2:55:e3:49:de:fd:96:e2:0e:61:f8:27:93:06:55:c1:b2:
         35:1a:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:06:05 2025 by rpki-client