Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a3542df-e1c5-3170-84df-4c73da9ba638.roa
File:                     3a3542df-e1c5-3170-84df-4c73da9ba638.roa (raw, json)
Hash identifier:          i+nlfg+onZko0Z5quOI10C8Pzu58LrkZJb+orv4nug0=
Subject key identifier:   BE:03:84:11:81:62:65:C1:3C:3C:01:71:5C:1B:7D:D8:A7:7A:76:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F884F78D32691613961D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a3542df-e1c5-3170-84df-4c73da9ba638.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.167.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:84:f7:8d:32:69:16:13:96:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=51dbf07f-898e-4281-91fa-d8a661c95b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:ee:60:aa:d9:3f:fe:b5:cb:7e:8a:a1:10:
                    c6:d1:23:a2:f4:2d:e0:69:9f:cb:5a:d2:b0:b0:41:
                    26:a0:e2:44:0f:76:fe:ec:cf:66:ff:40:e5:19:a6:
                    97:d3:17:f2:66:ba:b5:ff:c2:66:a5:06:7b:cc:3e:
                    a5:52:a9:19:77:4c:d9:9a:44:f7:33:88:88:80:9c:
                    b0:52:18:50:3c:bd:80:82:97:86:a2:42:af:0c:7c:
                    22:2f:c0:a1:fd:49:d0:78:9c:60:89:d6:59:f8:7f:
                    32:fa:db:b4:1e:4a:23:95:e4:17:76:e0:6d:56:eb:
                    8d:3a:60:42:10:9b:84:15:da:4a:b3:1e:28:d8:33:
                    45:56:30:cd:26:65:09:32:8b:67:bb:54:ab:84:f1:
                    ee:79:94:f3:73:e8:10:3c:ea:54:e1:62:3a:aa:83:
                    fa:5a:ed:40:cc:96:9a:e6:64:b1:3b:10:d9:94:f0:
                    8f:3d:1d:fd:e6:da:63:86:37:27:e4:cf:81:b2:3b:
                    b1:cc:f8:b3:19:b6:64:51:39:71:5c:ae:4c:13:fc:
                    84:e3:8c:c6:38:e5:65:b9:59:0b:2c:1d:b8:b7:9f:
                    51:75:47:da:00:da:d7:7f:4c:44:28:51:f3:3a:e7:
                    87:94:a5:01:64:82:85:99:9d:a5:97:39:10:72:ef:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:84:11:81:62:65:C1:3C:3C:01:71:5C:1B:7D:D8:A7:7A:76:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a3542df-e1c5-3170-84df-4c73da9ba638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.167.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:12:fa:4b:73:37:0f:77:3e:92:d5:f5:01:fd:21:3f:bd:
         e4:b5:f7:ea:c4:70:e7:33:0c:77:76:66:a5:d5:9b:6a:a3:e2:
         74:ab:38:4f:16:61:d2:b8:91:2b:ec:60:9f:f4:5c:61:b1:24:
         b4:69:21:c0:7f:86:75:bf:c5:03:d9:ca:44:d3:1d:58:83:82:
         06:e3:c6:08:97:40:6f:19:e6:99:9c:65:60:a5:99:7d:e3:88:
         c3:f8:65:0e:ae:a4:99:3c:57:a4:04:63:cf:47:c3:81:c5:0e:
         02:88:70:b6:ab:b3:09:86:ef:0e:d1:34:5d:6c:bc:a7:0f:3a:
         10:8d:cf:3b:7f:ba:dd:07:82:f7:65:c4:a2:e5:2c:05:1c:ea:
         69:91:a7:8c:e2:3d:11:f3:82:2d:16:c9:d6:60:50:eb:9b:a0:
         5c:f2:0f:fb:4b:37:0a:0b:80:5c:60:e7:ee:fc:79:9d:dc:8b:
         f6:15:9e:49:20:3d:6d:b8:dc:a1:2b:40:b0:04:c3:a9:5f:35:
         a9:05:4b:28:ed:14:51:ea:32:52:f2:51:3e:12:e4:b0:f2:fa:
         89:ce:3c:b1:a4:0b:14:43:5d:e2:e7:00:ce:03:1a:60:3d:3c:
         1a:c6:c9:9a:25:7c:f7:16:81:8e:30:d6:f3:a3:16:a8:17:95:
         ad:64:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:10 2025 by rpki-client