Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47023390-6938-3d05-a175-5e2f95dabce8.roa
File:                     47023390-6938-3d05-a175-5e2f95dabce8.roa (raw, json)
Hash identifier:          KILYKfHf/Ze4gswglRdLELg1RYcPiFy5j9pPJ4FPy2Q=
Subject key identifier:   90:32:93:2A:DF:58:D1:E8:E5:C8:E8:58:D3:34:69:33:1F:17:A1:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203CC9F7774B415609810600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47023390-6938-3d05-a175-5e2f95dabce8.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     33659
IP address blocks:        69.248.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:c9:f7:77:4b:41:56:09:81:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=9deee926-7a44-4093-bbdd-45cb24284bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:f7:66:af:ba:8e:de:42:c3:6b:4b:34:80:
                    12:a5:af:fe:bd:02:fa:7f:67:38:9d:3a:a2:e7:29:
                    83:98:02:b3:07:82:33:f2:6b:45:76:0f:cc:ae:47:
                    42:0a:f1:4b:10:59:aa:d9:90:2d:2c:13:b7:2f:8f:
                    e8:06:08:cd:2f:01:df:ce:38:e4:d9:e2:8e:cf:cd:
                    5e:35:69:83:aa:66:0f:dc:23:d1:fb:c0:e4:65:fa:
                    20:0c:7b:9c:06:b0:2e:ac:69:cd:df:42:be:d5:31:
                    1c:2d:68:81:b3:2c:83:17:58:c2:ca:21:40:9d:4d:
                    91:86:b1:61:dd:36:bc:a2:13:84:b6:33:ce:3b:bf:
                    c1:15:63:de:62:fc:3d:2b:c1:43:b0:4c:d0:ec:24:
                    d1:00:42:b0:be:b0:8c:11:cf:cc:13:b7:3a:eb:46:
                    21:5b:64:3d:df:93:fa:37:31:13:4a:b2:10:f1:61:
                    c2:e9:90:cf:8a:df:db:b0:cf:de:fc:7b:06:cd:d6:
                    98:f5:01:83:ef:d8:07:96:f9:e0:05:bf:d1:7a:47:
                    50:d0:91:ef:b9:92:47:7c:20:78:a2:39:74:ae:a2:
                    00:ad:eb:57:e4:a6:42:90:c1:4c:5a:04:8b:08:55:
                    80:f8:58:9d:8a:3e:26:3f:f7:51:51:59:d1:41:f8:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:32:93:2A:DF:58:D1:E8:E5:C8:E8:58:D3:34:69:33:1F:17:A1:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47023390-6938-3d05-a175-5e2f95dabce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:92:5f:20:a7:13:78:f5:4b:2d:78:1e:19:62:db:87:54:
         14:4f:f4:56:77:f8:c8:21:b7:55:29:f2:59:41:6d:3b:7f:1c:
         41:c3:76:ed:af:c9:5d:f8:d6:57:01:18:1e:37:2f:bd:25:5c:
         76:b3:d1:1c:82:a6:d9:01:48:ca:bf:40:d1:c5:e1:84:56:a2:
         a1:d7:68:4f:24:83:73:ce:0f:2f:62:dc:78:5e:ca:10:48:2e:
         40:ad:1b:0d:59:15:77:6d:ae:ad:f6:2c:ee:82:49:77:b6:e5:
         3f:c5:31:58:2c:18:7d:91:ed:4c:a5:ca:27:d7:cd:a3:97:67:
         53:73:6b:68:c6:55:35:39:4e:c6:0e:87:15:12:2b:13:a6:2f:
         a9:40:0d:20:ed:dc:a3:58:f2:c1:68:f2:0a:30:2d:ba:42:d1:
         1b:23:47:cc:14:dd:ff:b0:2a:95:91:4c:98:83:ec:20:ba:2c:
         74:38:df:56:a5:54:fd:f8:8c:16:e7:5d:77:13:df:f6:01:af:
         60:e0:df:08:f8:5c:09:73:89:60:bd:5e:c8:f9:c4:76:80:1c:
         6b:1b:25:9d:6d:a7:e4:73:6e:5d:2c:05:72:31:fb:42:07:a8:
         4d:8a:85:0b:46:9f:c0:43:14:11:89:ae:7b:a6:85:58:5d:45:
         6c:8d:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:56 2025 by rpki-client