Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55463757-dbaa-3b92-8863-a0b25c7c7681.roa
File:                     55463757-dbaa-3b92-8863-a0b25c7c7681.roa (raw, json)
Hash identifier:          TJp5XLcyjKIz7sDn4+bgyfKd1B86bXTSayYfw1+dJmM=
Subject key identifier:   E9:1F:BF:95:64:4D:62:5C:83:47:A8:06:DE:B3:AA:47:CE:9B:EA:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C985B157191AD67FD0AE8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55463757-dbaa-3b92-8863-a0b25c7c7681.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        70.88.176.120/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:98:5b:15:71:91:ad:67:fd:0a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=280dce69-db3b-4fc0-b192-1774beb7b615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:73:44:c7:09:b3:f7:5e:27:43:a3:64:e0:
                    6b:79:7b:bf:ec:96:f8:79:36:ff:c9:42:fe:e9:95:
                    a2:2f:58:00:fc:da:74:8d:0e:8d:32:65:3b:78:bb:
                    c4:5d:6f:64:e1:19:67:8d:50:d4:37:fe:a3:15:b9:
                    c9:03:2a:1b:96:d0:fd:01:3e:8e:f1:6e:89:c7:6d:
                    e9:20:4a:bb:36:53:a9:70:3e:e2:96:66:91:67:5f:
                    42:c1:45:f3:33:7c:95:60:15:9e:2a:5d:f3:d1:5d:
                    e5:29:4f:6a:a8:b0:39:36:4f:75:69:f9:b2:89:cc:
                    28:66:06:99:c6:0b:82:11:f2:1b:c2:ae:92:0e:3a:
                    82:65:66:d7:3c:f0:47:2a:53:16:5f:3a:a0:ea:9a:
                    3d:aa:7d:55:0a:34:5b:8a:42:a0:13:61:34:9d:92:
                    20:9c:ba:1f:66:4e:89:83:bf:87:2a:78:56:fd:a1:
                    9e:c9:2e:da:92:2a:a8:10:9b:3a:c9:1b:6b:49:97:
                    35:b8:97:72:34:38:07:fb:59:4e:d6:bf:54:e8:07:
                    5f:58:7b:88:4c:44:55:ce:83:ad:65:ec:94:c3:3a:
                    8e:78:d9:76:af:e1:92:47:b9:38:7d:2f:00:59:af:
                    49:32:12:83:9c:8a:e7:a9:a2:2d:66:4a:5d:62:15:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:BF:95:64:4D:62:5C:83:47:A8:06:DE:B3:AA:47:CE:9B:EA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55463757-dbaa-3b92-8863-a0b25c7c7681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.176.120/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:6f:b5:79:b1:33:e8:ae:02:b7:26:0a:1c:03:bd:34:d2:
         bd:3e:90:f5:15:1d:24:3b:cc:62:d3:11:76:d0:7b:15:86:80:
         4d:97:13:ca:92:f3:0b:34:c6:10:bc:7d:e7:c2:18:72:ff:7f:
         55:3d:46:de:cb:b3:e7:f5:30:5f:40:46:6d:7c:09:07:cb:3c:
         90:a0:cd:9e:f2:54:67:e1:6e:8b:9e:23:1a:71:29:57:e5:f3:
         9c:fe:ca:7b:9a:1b:6e:f5:c4:3c:fd:60:ec:d9:47:76:a4:90:
         88:5b:6a:a0:5b:e5:80:80:e2:f0:17:28:fb:a1:d3:2b:16:6e:
         f5:cd:20:43:35:3b:c6:0d:a0:9d:8a:10:c6:fd:4c:0f:ca:23:
         4d:99:d4:a8:de:ba:83:23:07:67:fb:b4:4f:ad:c1:38:84:9e:
         d4:20:db:5f:d8:3d:83:3b:ef:4d:67:05:e4:9e:f1:7a:a8:f2:
         93:e9:e2:9b:15:6f:6c:6c:6d:58:f4:41:c3:c1:63:11:ec:f8:
         db:60:a6:02:6d:a2:36:69:b0:d9:dc:a3:95:09:da:5b:7f:b1:
         d1:85:92:76:86:c7:30:c8:f3:2d:3f:a6:ed:28:b1:52:6c:3b:
         73:42:37:9c:2d:5c:dd:0a:d4:c7:b6:34:92:ad:68:9a:8b:96:
         aa:51:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:03 2025 by rpki-client