Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/203d5324-6baa-36a9-920f-7bfde0801ca7.roa
File:                     203d5324-6baa-36a9-920f-7bfde0801ca7.roa (raw, json)
Hash identifier:          1ygut8oOv0L9xs5dZNDJ8xXGwOourI71BFlvqPVyQbM=
Subject key identifier:   F2:B8:2D:8D:59:9C:23:A9:46:2E:CF:CC:00:F9:12:BB:13:AC:6C:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8A837E67808C8576EAB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/203d5324-6baa-36a9-920f-7bfde0801ca7.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.38.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:a8:37:e6:78:08:c8:57:6e:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=0caffc00-58a4-4870-bbe5-a139af9b76ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:e5:8d:19:90:0d:ac:0c:e0:3d:3f:0b:22:
                    12:85:11:d0:c2:5c:0f:b4:75:4d:c5:99:15:17:54:
                    9b:07:08:39:4b:d2:49:65:5f:ba:78:dc:d5:08:76:
                    5f:6f:34:1b:10:81:5f:52:3f:36:fc:e0:86:f9:aa:
                    ec:f4:c9:7a:d3:66:ab:d1:84:26:47:19:f1:a3:51:
                    7b:b3:47:06:48:0a:90:fc:64:51:a7:89:8b:ae:e3:
                    b3:56:de:33:9c:64:1b:0c:74:0f:a6:29:9d:00:93:
                    03:1a:80:69:0b:07:20:bf:b7:d0:06:46:16:52:17:
                    44:a4:3c:af:1c:bc:f0:ee:64:33:2e:dd:69:43:5f:
                    da:28:e2:7c:a1:3d:ca:79:5e:a3:1c:00:c8:99:54:
                    25:78:19:f5:71:cd:f3:86:bb:94:1d:d9:25:ba:c4:
                    80:3c:c1:e9:bb:b0:1f:b9:6a:df:8c:15:8f:28:2c:
                    35:ec:19:f3:54:e8:e5:3f:84:3e:e7:81:e1:dd:82:
                    0d:dc:ef:6a:32:94:18:5f:bf:98:41:7a:54:85:2e:
                    93:44:e6:46:8e:d8:4e:06:43:e5:97:35:6f:94:a1:
                    93:cf:4f:c2:7c:f7:68:aa:ed:d6:63:60:53:1e:54:
                    bb:67:45:12:45:8d:eb:8e:89:8f:6b:1b:6b:c8:da:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:2D:8D:59:9C:23:A9:46:2E:CF:CC:00:F9:12:BB:13:AC:6C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/203d5324-6baa-36a9-920f-7bfde0801ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:67:bd:ad:79:f3:57:86:58:71:dc:f2:ab:95:1b:ab:80:77:
         73:87:f9:9f:00:f4:0d:64:2d:75:f3:55:96:ae:7e:bd:8d:7b:
         44:a5:5f:44:e2:cb:5b:6f:05:31:53:0e:65:4b:bd:d7:48:ba:
         46:b0:cc:94:21:44:f7:6f:86:ec:f3:2c:dd:33:12:0b:f9:99:
         da:93:e0:42:a2:1c:88:83:2c:3b:d1:ee:1d:0a:fc:79:ef:58:
         25:8c:6a:81:7f:88:8b:56:b4:7f:66:0a:46:70:b7:85:6f:46:
         e9:9a:62:54:e2:99:e4:e4:af:d7:0e:fb:7c:27:ce:d1:8d:0b:
         16:1b:cd:cb:4e:ee:ac:e6:1c:9a:c7:79:bc:21:57:ca:d8:b5:
         76:44:64:7f:00:68:f0:27:fd:6d:f2:ad:b9:fa:f5:07:9f:54:
         ad:6b:60:72:e4:4e:d4:4f:bf:96:f2:f9:df:b8:fc:24:1b:20:
         f5:cf:6a:74:04:56:ef:ea:ba:53:08:69:32:ae:af:84:a1:79:
         e0:e8:a8:1c:f2:70:3e:77:95:ef:2a:e8:44:a2:90:a0:49:a1:
         56:21:05:40:ae:b8:ce:75:40:47:b1:36:00:34:e7:5c:0f:5f:
         dd:95:5d:33:05:de:80:0f:0c:df:c7:a4:4b:bc:bf:2d:94:08:
         d8:90:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:32 2025 by rpki-client