Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a9f8920-be40-31f8-a7cb-2fdf40390bf9.roa
File:                     3a9f8920-be40-31f8-a7cb-2fdf40390bf9.roa (raw, json)
Hash identifier:          rjXY+rlZdOBmQ8Y/4+AiKcOi3a7inb1tdWMJsdcr6ss=
Subject key identifier:   E4:E5:5B:56:95:AA:EC:DE:E3:6E:48:D3:34:60:A2:83:C7:71:F5:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C544B294D0302221DBB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a9f8920-be40-31f8-a7cb-2fdf40390bf9.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     13367
IP address blocks:        75.72.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:54:4b:29:4d:03:02:22:1d:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=389b5166-be8d-4f5d-9fdd-c7fe8e4f583f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:19:b7:ec:73:ac:94:3a:99:48:71:84:1f:
                    03:d6:aa:e2:af:03:f6:b7:42:bb:b1:9a:5f:ec:4e:
                    7d:b6:93:69:61:d9:f9:83:5f:46:ba:c6:2d:f1:3b:
                    51:4d:01:0b:c4:ce:11:77:49:8a:35:5e:96:dd:4f:
                    11:87:26:76:c1:85:e8:0f:e7:aa:cf:1c:cc:ba:81:
                    a5:37:af:25:38:9f:10:e7:b0:b9:15:51:a8:b7:3f:
                    d8:11:e0:34:49:b6:71:60:2b:ad:9c:ed:a5:d8:2d:
                    4b:3d:1f:78:3c:36:c0:19:b1:71:4c:61:40:95:44:
                    02:02:81:ab:db:cf:e9:39:cc:8d:18:9a:a6:d5:5b:
                    3f:18:1a:10:e4:f1:3f:58:7b:11:36:6e:b5:6c:55:
                    14:f0:a5:2a:bb:48:63:32:16:f2:74:2b:b1:52:c4:
                    2f:ef:b1:be:69:3c:de:ba:6b:1f:2d:d2:50:db:65:
                    9d:cb:33:72:eb:80:59:1c:1e:44:7c:ad:bf:40:97:
                    df:d6:10:2e:7e:8d:38:62:63:1a:8f:79:f6:eb:f0:
                    7f:28:ea:b7:39:a9:52:09:5a:dc:e8:b1:60:a3:ab:
                    9d:be:f8:76:91:3e:69:d4:63:04:0e:97:58:41:ce:
                    5a:8d:f3:eb:fb:f2:37:97:df:24:d7:57:55:20:8f:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:5B:56:95:AA:EC:DE:E3:6E:48:D3:34:60:A2:83:C7:71:F5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a9f8920-be40-31f8-a7cb-2fdf40390bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ea:97:a5:5a:62:cd:b7:9d:79:55:39:ca:b9:c1:e0:93:7d:
         f7:ca:26:7b:ac:24:11:27:7a:82:3a:77:cf:d6:cc:a4:4f:e9:
         d1:89:06:9d:de:bb:68:8d:1c:4e:31:ac:61:83:18:7d:ef:80:
         49:bb:39:e6:2c:7d:40:47:91:67:0a:5f:a2:c1:3a:0c:27:1d:
         49:6a:1a:e0:40:54:d1:b6:af:5e:34:be:2b:6e:43:77:52:6a:
         eb:e0:b6:03:a1:2f:9a:dc:31:b0:cc:c0:7c:cb:7e:58:30:af:
         53:9c:73:6a:d0:6a:c3:41:1f:38:a2:6c:2a:c5:20:c8:46:84:
         d4:a2:3b:3d:03:d4:21:65:4a:3e:6a:39:6b:e1:40:4e:94:03:
         a4:a8:8a:b5:1b:b5:26:a8:d3:44:51:fa:ea:64:6f:5b:b8:51:
         42:eb:d6:a7:c6:1e:ca:cb:65:10:44:76:d5:cf:77:18:35:ff:
         98:a7:f9:65:c7:e6:66:92:10:a3:07:37:67:b5:5c:18:6b:db:
         d9:0d:9c:81:26:43:71:ee:9f:c2:ab:99:fb:0e:1b:32:f6:e4:
         23:54:c5:ce:17:1b:64:e5:8e:1a:df:b0:87:97:1e:5a:cf:6c:
         ae:47:89:27:92:a0:ae:ee:82:80:f1:a6:70:63:75:8b:7f:d7:
         d0:1f:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:16:59 2025 by rpki-client