Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7524931-1165-3918-8408-8f220416c98f.roa
File:                     c7524931-1165-3918-8408-8f220416c98f.roa (raw, json)
Hash identifier:          U3KowHWyH6pdDQIBZGU1ZdyfOQQ8yV1ZJMhiBU3CsHU=
Subject key identifier:   23:2A:A0:AF:16:97:02:93:8D:09:A8:61:01:44:36:E9:02:52:01:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC58D8ECC2E2A302C83E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7524931-1165-3918-8408-8f220416c98f.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        70.90.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:58:d8:ec:c2:e2:a3:02:c8:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=b4ab813b-db83-452c-be92-f6a8036d5a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:e8:48:58:4a:d4:dc:23:c8:3a:97:d5:b1:
                    f9:bd:80:bc:30:31:ac:36:3b:f2:47:3e:c6:40:ee:
                    5b:b9:8a:34:8c:31:a8:d1:79:2e:f7:ab:3d:cf:cd:
                    ea:dc:ab:3f:0c:06:61:bf:83:e9:84:bf:51:e7:23:
                    90:e2:47:f5:cb:31:7f:1d:25:57:4e:e6:32:7d:d7:
                    ce:05:20:fd:9e:d9:61:1a:d0:05:ce:2f:3d:99:18:
                    1d:34:d8:80:ea:df:c9:c9:0e:32:e9:4e:70:a5:dc:
                    6b:de:81:3a:54:69:ea:e6:72:e3:e4:04:53:7e:c8:
                    d0:a0:10:3f:d6:6c:49:cb:a0:ab:1c:0f:28:c3:44:
                    b3:e9:bf:50:89:3b:f6:5f:57:8a:ab:d2:44:a8:c4:
                    7e:71:2b:8b:b7:a6:19:35:d3:42:c6:0f:16:ae:10:
                    a7:f0:30:99:f3:b1:bf:d7:cc:0f:f2:9e:7d:c9:d9:
                    e6:eb:5a:92:f6:fb:d9:ca:61:7d:a2:d7:a9:f1:5b:
                    98:da:90:5a:93:e5:b8:0c:22:6f:9f:77:a7:23:c9:
                    c2:55:bf:fa:6c:68:e8:08:b5:8d:6f:cc:50:79:bb:
                    0a:03:9b:9a:c8:6f:dd:17:0e:02:10:ef:3c:91:b7:
                    94:cd:12:a6:79:a4:72:11:a5:95:06:b1:6a:71:ea:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2A:A0:AF:16:97:02:93:8D:09:A8:61:01:44:36:E9:02:52:01:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7524931-1165-3918-8408-8f220416c98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.90.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:0a:db:d6:7c:db:ac:8e:8b:5d:18:b0:6c:65:6f:0b:20:
         16:5d:cb:8e:df:32:aa:4f:b2:91:f9:69:89:34:c6:7b:07:99:
         1a:c5:97:e7:fa:32:3a:ae:19:39:81:66:c9:0b:26:98:f5:0b:
         62:22:c3:51:a5:ed:35:54:32:11:70:09:32:b2:f1:98:59:7f:
         1a:ce:29:69:3c:8b:6d:db:22:cb:f4:a2:e3:e8:24:19:3b:20:
         43:b6:f1:e8:3d:82:8c:df:7e:3b:46:03:e2:a4:ca:da:6c:3e:
         7c:04:64:23:0f:1f:54:5c:4c:e5:2f:6f:97:5d:95:86:31:9b:
         10:56:db:e7:3f:6d:4a:82:26:48:e1:0b:74:46:18:4f:12:65:
         6c:b3:12:54:b8:c9:da:dc:ef:17:44:da:54:7c:bb:67:c9:55:
         37:cd:8d:b8:a6:52:f9:0d:ad:94:26:cb:53:ad:ce:aa:f3:33:
         5e:26:23:98:79:a6:bb:42:67:b0:4f:63:d9:c2:6a:db:08:9c:
         5d:5f:d0:2c:65:59:c1:3f:4e:c7:4c:57:03:c5:cc:44:15:04:
         f7:8f:8b:df:5d:1b:03:25:60:e5:95:55:ee:08:ac:ec:34:06:
         95:00:bb:18:8c:4f:93:67:43:9a:46:67:cf:24:88:46:f5:f4:
         ce:52:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:40:29 2025 by rpki-client