Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e092707-1110-33c6-955c-4c9c48a8cbbe.roa
File:                     4e092707-1110-33c6-955c-4c9c48a8cbbe.roa (raw, json)
Hash identifier:          SjhcPHmI3FFJY3mLJzJLy+O8afrqVt4wx1Q2bTs7agM=
Subject key identifier:   12:34:B3:94:69:72:93:D3:34:91:AE:DE:5E:D9:1A:8F:87:0F:55:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8C48FEC2D0CFC2E373700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e092707-1110-33c6-955c-4c9c48a8cbbe.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        76.24.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:c4:8f:ec:2d:0c:fc:2e:37:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=1df818ad-f2b2-4ac4-86c1-7b29f8c6135e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:ad:64:fa:59:9e:f1:21:fe:c2:6b:35:ef:
                    d1:22:44:e4:e9:27:0d:cb:e0:25:a4:79:01:cd:23:
                    36:b7:22:6b:2f:d6:ae:66:37:97:e6:09:a3:7d:b2:
                    a7:f0:fc:7f:b0:ba:24:0a:4d:f0:7e:23:62:14:1f:
                    21:00:bd:82:bc:2b:64:04:ef:4e:49:26:fe:0e:f5:
                    fa:c0:04:84:fa:0d:7c:7e:ad:9b:3f:0c:ff:ce:42:
                    b8:20:03:5e:13:0b:3b:f9:54:8b:b3:9b:01:8e:b5:
                    be:ae:61:ea:30:31:d5:e8:10:9e:e9:a0:b1:aa:50:
                    fc:59:43:78:a1:ce:2d:12:01:35:45:85:cb:25:76:
                    69:48:83:31:e2:4e:c1:a2:9c:2f:ee:78:7c:fa:b0:
                    08:33:c4:51:5b:32:e7:06:18:f2:60:45:98:cd:ac:
                    b4:f6:ce:b6:ef:45:44:78:9a:7d:18:d5:c8:6b:22:
                    bc:62:23:06:83:43:80:f1:7c:76:58:46:b3:eb:42:
                    fe:7b:53:86:31:18:f5:1d:18:dc:6d:bd:a9:6e:3e:
                    79:8f:27:04:48:0c:c6:a1:70:84:8c:ed:b4:37:43:
                    f3:ac:47:a8:9b:2f:d6:46:7b:b1:03:6b:7a:43:3c:
                    c7:fe:3d:f6:81:0f:2d:42:fa:52:52:b1:18:d5:3f:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:B3:94:69:72:93:D3:34:91:AE:DE:5E:D9:1A:8F:87:0F:55:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e092707-1110-33c6-955c-4c9c48a8cbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.24.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:7e:64:90:42:0b:b2:df:87:75:f2:d2:fa:7a:e5:92:0d:
         fa:0a:be:95:71:ac:7f:ef:a1:a4:eb:d4:69:a4:f1:53:29:57:
         76:99:34:8f:57:03:d4:9a:f0:0c:88:58:ba:70:b7:0b:2a:1f:
         0a:c4:d3:cb:d4:e1:e3:0c:97:50:9d:0c:2b:12:41:0f:df:34:
         fb:63:38:d7:58:de:81:e6:33:07:e0:1e:45:61:c3:a1:57:28:
         6f:5b:72:77:fb:b6:f9:4b:ca:41:e6:b3:34:7b:bb:eb:fb:11:
         0c:d5:a5:f5:44:a2:52:6c:57:85:53:a8:04:4e:fa:55:c3:c0:
         47:68:c7:9b:02:11:d4:99:e9:f9:6a:5e:fa:9f:91:ec:bc:71:
         44:10:25:c8:8e:bf:63:67:50:b2:de:9b:49:8c:8a:c4:b6:b4:
         e2:4b:b3:33:3c:10:e6:44:dd:57:77:f1:6c:1c:c8:ea:d7:0b:
         5c:4b:3c:77:35:b7:37:45:b4:9a:ec:3d:ed:0f:64:8b:d0:d6:
         72:e2:ee:df:ed:57:82:5a:a1:fb:0a:72:cc:1c:f6:31:8d:8c:
         da:c6:59:31:26:42:f2:2f:ce:cc:d0:fb:75:3b:83:d6:56:47:
         61:90:74:3b:0f:04:c5:4b:a3:0d:64:91:d8:4e:62:4c:7d:82:
         7c:c9:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:22 2025 by rpki-client