Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa
File:                     95820f3b-2efb-39bc-bdf4-69edf3a44951.roa (raw, json)
Hash identifier:          hoB95IxoutggSJ0rV0Snp9AzF9Pea9qjGp78HdTOoJ8=
Subject key identifier:   B1:67:BC:A6:3E:60:D0:22:6A:FF:11:00:BA:C0:5C:30:85:25:64:76
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F43285848ADC60BE0727844C26DBE29A0
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     210781
IP address blocks:        65.75.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:0b:e0:72:78:44:c2:6d:be:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=d1229a35-41d1-430e-bb59-9b6cf7687e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:65:87:59:5a:09:00:82:32:58:cb:16:8e:
                    60:f2:c0:d0:b9:33:ab:74:57:2d:b1:49:a5:99:55:
                    82:bb:00:71:7e:64:37:0d:4e:89:ec:2f:ed:4b:9c:
                    1c:54:c3:64:5f:bb:0b:f5:db:fb:ae:9a:2a:05:f7:
                    b0:bb:78:6b:72:ce:59:7e:b2:b7:4a:90:66:9d:7c:
                    92:da:42:11:0f:f2:92:90:55:81:45:c0:c9:67:fb:
                    0c:cc:ca:f0:6b:60:7a:13:29:82:27:d6:82:f8:09:
                    87:78:5e:b2:7e:6f:56:8e:b7:c7:7d:93:b0:d7:04:
                    b0:57:6a:61:91:b4:14:97:d5:a5:a1:39:e0:82:c6:
                    20:ac:a4:91:d6:fc:a5:d3:87:9b:62:2e:98:55:74:
                    25:8d:51:10:ee:57:3e:e4:10:d6:22:5b:7f:2c:c9:
                    1d:be:98:23:b1:da:8e:4e:9b:05:48:db:b8:06:5f:
                    97:ce:5b:1b:a8:34:96:6f:b5:d6:a3:86:23:b7:d6:
                    b5:b7:72:31:a3:dc:9f:b2:43:4e:51:76:bc:1d:48:
                    a8:79:d3:14:a2:c6:35:fe:99:6d:49:22:3b:33:90:
                    72:28:40:a3:79:ef:47:f4:30:8a:05:18:60:22:9b:
                    90:e2:55:13:c1:b2:54:e8:14:93:4f:cd:9a:20:52:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:67:BC:A6:3E:60:D0:22:6A:FF:11:00:BA:C0:5C:30:85:25:64:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:06:5b:8f:ff:45:32:f0:88:53:fe:ba:8b:45:d1:47:13:ea:
         7c:05:16:99:3a:41:13:03:cb:42:71:4b:73:2c:b7:43:bb:7b:
         d3:a3:08:ee:19:d3:85:28:b2:09:36:73:f1:b8:1e:ed:a9:6a:
         09:78:e4:ce:d7:6a:ea:fe:67:ac:c6:31:15:a7:5c:ba:ca:2c:
         bb:66:a0:c4:6d:30:7f:4c:4f:ba:07:11:04:85:33:47:d8:2a:
         2c:f5:ca:d3:85:22:44:c6:bc:9a:0e:e3:e0:3b:1d:5e:76:a7:
         f9:a6:c3:fb:67:7f:44:5c:02:f2:0c:dd:47:b0:60:64:80:c4:
         58:8c:83:76:e0:df:e7:1a:21:ae:d3:00:8d:83:57:a1:64:a1:
         fa:9e:c4:6e:97:33:82:02:3f:ef:75:f6:02:7e:95:23:3c:62:
         64:68:1a:eb:f1:a1:45:f5:a0:8e:0b:c0:b9:1e:05:1d:36:ff:
         5a:5e:d4:51:f9:71:d4:44:a1:25:3e:f5:a3:b1:78:d9:b8:45:
         40:82:11:20:7a:00:d3:5f:fd:ca:02:b9:5f:da:ab:5f:ed:db:
         27:ac:51:08:42:fc:e9:15:8c:3e:c5:fb:87:c9:b3:b1:e4:70:
         30:e3:03:70:a2:05:9b:40:81:80:75:1f:24:c5:6b:a5:18:d3:
         26:71:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:35 2025 by rpki-client