Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aab93ae-ba97-3a7e-bcfe-5c578c1e818b.roa
File:                     0aab93ae-ba97-3a7e-bcfe-5c578c1e818b.roa (raw, json)
Hash identifier:          MuE6Dq58oouGj0MoilINLFzFf4YURgBC4eMf2xi/bDI=
Subject key identifier:   77:BA:8E:B2:69:68:8C:3B:56:9D:26:58:19:C4:DB:97:70:B4:C6:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D046A670041472311E780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aab93ae-ba97-3a7e-bcfe-5c578c1e818b.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        76.123.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:04:6a:67:00:41:47:23:11:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=58ddeefe-7a7a-480b-8d50-5488cae5f003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:4f:68:68:ae:4e:06:b4:93:3c:ff:d3:f6:
                    be:e6:1f:ac:75:3a:ca:54:b4:ac:78:7b:da:50:f1:
                    ea:00:58:d2:42:7c:54:5c:be:76:a7:2a:f8:37:dc:
                    2a:5e:65:73:e5:7a:08:9d:eb:cc:2b:24:67:2a:39:
                    fb:da:a6:1c:72:6d:d6:ee:1a:dc:8e:df:de:31:2a:
                    b6:01:c8:2b:cb:59:40:de:23:a3:84:04:01:59:88:
                    94:cd:76:64:cd:83:29:00:7a:43:37:bf:d1:f8:aa:
                    1d:bc:ca:af:a5:37:b9:7a:25:c1:0e:2a:94:d3:0a:
                    37:f8:91:e3:99:8b:da:02:a9:8a:bf:74:58:34:76:
                    0c:ee:10:cc:3b:4e:43:d3:6a:53:33:b2:f9:b4:8d:
                    77:e0:e2:cd:d0:24:ec:0f:7a:2c:61:77:70:09:e0:
                    d3:29:b1:d4:6b:ae:c7:73:08:a5:d4:7d:d5:85:7d:
                    3f:80:0e:0d:cc:42:1a:c6:5c:64:b5:eb:06:ef:d0:
                    6a:5a:6c:5c:a4:d5:73:76:43:34:c0:3f:e6:b8:75:
                    fb:65:7d:78:eb:13:df:b4:d4:24:ea:79:6c:0d:12:
                    c0:62:5e:c7:0f:f4:10:31:40:99:bf:fa:a9:20:2d:
                    66:59:0e:f0:5e:e8:aa:ca:15:be:16:c9:99:5a:b0:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BA:8E:B2:69:68:8C:3B:56:9D:26:58:19:C4:DB:97:70:B4:C6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aab93ae-ba97-3a7e-bcfe-5c578c1e818b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.123.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:4d:d0:9e:fc:e3:ab:40:c6:8f:d0:e0:b4:ff:e5:ad:ff:28:
         f6:93:2d:b5:6a:71:66:7e:55:f4:64:dc:5d:5c:5c:01:6f:dc:
         43:ba:03:7c:24:c3:d0:90:78:c7:b7:ac:2d:e8:dd:44:fc:34:
         08:35:c6:88:78:90:9f:c4:df:23:63:3c:77:7b:2e:a4:08:6c:
         c2:d2:25:41:20:a2:a5:cc:a0:f6:a8:82:0f:b0:06:4d:70:c7:
         3c:58:19:78:ee:b6:12:4a:14:e0:31:0a:60:82:d5:62:a3:67:
         42:ea:f5:ea:0f:7d:51:f8:81:e7:13:50:90:0c:9f:ed:7d:ee:
         6e:3a:8a:e2:65:09:8c:6c:e8:d8:6d:8d:28:01:b9:f9:aa:86:
         fc:d1:4b:72:d8:10:8e:25:b8:fc:d5:cb:0b:7d:ee:1c:3e:85:
         5a:9d:91:db:01:8e:0b:5b:0a:63:1a:24:98:af:70:c1:be:bf:
         ea:69:b1:72:eb:85:d1:d1:a1:e5:6c:a4:d0:f1:00:88:82:10:
         db:4a:81:d2:50:15:c2:d3:b0:0b:ae:24:35:15:1d:b9:bd:73:
         7c:24:16:64:98:48:5d:b9:33:7f:17:f6:5f:5a:58:6e:f7:c9:
         d0:26:e5:3a:2f:31:ba:ed:f6:72:70:3a:d8:24:3f:2b:ec:43:
         87:9b:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:28 2025 by rpki-client