Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47ec9a8f-f2d5-3cb5-9479-c1ae067dd022.roa
File:                     47ec9a8f-f2d5-3cb5-9479-c1ae067dd022.roa (raw, json)
Hash identifier:          hDHMy0qd4PppBL8EZEpM6xiRy/YMxlWZbqTWGX4b0cQ=
Subject key identifier:   9B:31:F4:0B:F7:FD:63:75:78:9A:B8:A0:45:80:B2:C5:C6:47:86:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F9514821045780BA4C5640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47ec9a8f-f2d5-3cb5-9479-c1ae067dd022.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.30.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:51:48:21:04:57:80:ba:4c:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=2be47b57-2d51-42c7-ad42-b56e1e9a7671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:fd:db:bc:bc:47:c8:f2:e6:2c:49:54:e3:
                    43:d5:14:89:8c:fd:5a:d9:ca:35:96:ca:6a:da:5e:
                    22:dc:d2:5c:c3:a7:d8:b3:af:08:71:1b:4f:32:04:
                    fc:47:98:26:c7:11:33:41:b3:8d:fb:90:c6:1b:64:
                    96:84:42:6f:c6:db:7b:eb:4e:90:4d:f0:8e:15:c0:
                    9e:c2:76:71:d8:4d:04:04:dc:fb:33:9b:81:2e:50:
                    b9:6e:0b:c6:16:ea:cc:a3:49:ef:1a:d5:ef:55:92:
                    9b:d4:8e:2e:7e:f1:79:09:7b:7b:24:57:bf:9a:2f:
                    ec:fd:28:1b:23:9d:7a:01:6b:67:ef:1b:ce:31:bc:
                    fc:7e:da:c2:5a:8c:94:c0:ae:43:3d:63:6d:58:38:
                    d0:4b:0e:44:05:6f:1e:ed:5f:20:67:85:0d:96:fc:
                    b9:43:f4:25:db:0a:48:dc:15:78:88:9b:42:37:e2:
                    ea:ac:0d:bb:e6:8c:69:61:de:8b:d2:00:16:02:82:
                    c2:95:72:19:42:41:e9:ec:54:39:5c:c4:e6:61:76:
                    56:09:45:81:58:ee:21:ef:79:3c:2c:0f:80:a0:d8:
                    7f:d1:2d:a5:c2:6c:d4:08:c2:2f:d8:cf:d8:8f:2e:
                    0f:1e:aa:f9:88:11:91:08:4b:b1:e2:af:42:9b:a1:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:31:F4:0B:F7:FD:63:75:78:9A:B8:A0:45:80:B2:C5:C6:47:86:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47ec9a8f-f2d5-3cb5-9479-c1ae067dd022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:b8:f8:d9:90:b2:73:b3:f3:a2:60:d8:e0:20:d5:e8:25:
         8a:1a:0a:9d:03:74:01:24:82:b4:dd:bc:d9:e7:88:de:4f:f8:
         5c:10:dc:fb:77:bb:69:17:e3:3d:ba:12:11:ac:eb:94:45:89:
         50:02:8f:df:ca:d3:12:8d:aa:19:62:c4:ed:36:0c:a5:96:d8:
         09:d4:3d:66:cd:19:0d:d4:37:bf:5d:e9:e5:ae:39:9e:da:b6:
         6c:ea:e8:21:34:bf:45:6e:44:96:54:4b:03:1c:fc:26:1c:81:
         56:d2:ad:6b:86:84:07:13:cd:7d:cb:ce:13:2c:ad:19:28:b4:
         a0:4d:28:72:38:e2:90:9d:d6:e3:e7:28:be:24:af:5c:9f:13:
         40:e0:49:cb:11:00:5a:82:7b:ec:0b:fb:f0:75:15:ee:3c:6d:
         1b:99:d9:ec:57:e2:60:b2:06:5a:41:dc:91:7b:c3:91:a8:7c:
         33:41:c6:f6:9f:20:52:63:33:72:df:1c:11:4e:66:60:f9:b5:
         01:85:26:64:6b:95:19:02:d9:8f:f6:0d:68:04:f4:a9:ed:6d:
         45:39:05:39:96:43:6a:03:a7:ee:87:ca:09:5f:36:39:e7:de:
         9e:c9:98:2d:70:92:c5:a2:dd:bd:42:65:35:a7:2b:29:65:40:
         6b:10:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:23:12 2025 by rpki-client