Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/072aee53-fc4d-3cc8-b53a-9cb39ea42ac1.roa
File:                     072aee53-fc4d-3cc8-b53a-9cb39ea42ac1.roa (raw, json)
Hash identifier:          eza6ybC4XFJavSgAfXMh/zg1KvM4hNLdG2KZUxQrw7Q=
Subject key identifier:   F3:5A:02:57:E1:92:B3:B7:ED:18:24:84:0C:34:72:A0:54:42:1E:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C5CEABE8229B608F59F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/072aee53-fc4d-3cc8-b53a-9cb39ea42ac1.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        75.72.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:5c:ea:be:82:29:b6:08:f5:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=21b2f240-4dc0-4ea9-ac01-cd186c06b408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:86:0f:6f:31:c0:26:f2:58:68:13:49:b4:
                    ce:60:0e:21:0d:ed:c7:45:fa:6c:da:13:06:35:85:
                    39:d5:2d:93:34:86:bf:1f:1c:67:da:5f:27:33:a1:
                    c0:65:52:60:ee:1f:9f:f6:e6:e3:80:80:ba:d2:21:
                    37:67:63:d2:36:1d:96:5b:ac:70:23:66:41:d1:8e:
                    88:6d:35:95:79:14:4a:a2:63:2f:7f:e5:75:ec:df:
                    63:bd:4c:7d:0a:cc:44:5c:bf:e7:20:e5:82:59:cc:
                    b5:1b:f7:ef:b8:77:11:ec:e9:8f:2b:85:a2:eb:7e:
                    73:36:86:77:30:b0:65:3b:9e:81:03:c1:55:8b:96:
                    c9:39:05:5e:cd:a4:95:20:f2:7f:a6:3f:2f:13:b8:
                    8a:17:16:a9:87:ed:b1:db:f6:45:6a:ae:15:ff:b0:
                    d9:c1:1f:f9:2d:40:23:48:ad:7e:bc:c8:b3:3b:83:
                    8e:ed:39:72:38:ea:6a:bc:92:d6:03:ac:95:73:fa:
                    a1:45:ae:4f:3d:f1:30:94:0c:82:0f:d6:56:ce:de:
                    1a:89:22:1a:99:38:97:9c:36:ad:ea:54:6f:19:69:
                    12:b2:1c:2d:4c:07:3e:4f:f3:fc:db:35:01:9a:ce:
                    db:ba:16:f8:79:39:5e:bf:a3:e0:98:4c:8e:74:e2:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5A:02:57:E1:92:B3:B7:ED:18:24:84:0C:34:72:A0:54:42:1E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/072aee53-fc4d-3cc8-b53a-9cb39ea42ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:47:ee:ab:26:6c:a3:94:eb:2d:3d:6d:74:c9:72:04:db:41:
         38:82:18:93:56:dd:f2:f5:ed:9a:71:39:53:58:f8:40:79:e6:
         79:a0:7e:c7:3e:e6:70:94:a7:12:66:cd:a7:24:e4:10:63:58:
         8c:fb:dd:73:13:e9:3d:d7:4e:b7:9a:d0:db:79:b1:61:59:8a:
         e8:90:bf:aa:62:66:54:c6:1c:ba:1c:f2:70:f3:1c:44:76:7b:
         bd:d4:a6:be:03:89:4a:8e:37:ca:08:c3:70:e3:dd:f5:78:f9:
         00:56:ce:96:58:c7:43:02:28:b5:ef:0c:60:49:15:64:5b:d2:
         30:d1:a1:90:15:71:70:10:13:c4:81:79:da:b7:77:f1:d8:cc:
         7b:3a:76:a2:62:d4:f8:97:94:bd:5b:94:c4:4c:11:5e:82:f5:
         06:a6:b6:d6:8f:3c:7e:02:ac:c7:bd:b8:72:95:93:ae:85:71:
         90:c6:71:43:0a:4a:d7:8a:ac:cf:91:76:e6:a1:37:c6:97:74:
         3f:45:f3:dd:0c:f5:81:5a:fd:fd:6c:06:9a:05:47:0a:c1:77:
         4e:d5:9c:db:f9:40:d0:e7:9e:ba:22:25:24:f1:9e:da:bb:4b:
         7a:e4:2f:f5:53:a0:65:5a:e0:1e:88:8e:86:5c:f6:9f:0b:da:
         dd:59:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:11 2025 by rpki-client