Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55b72a2c-5546-3a70-af0f-c45926c96c87.roa
File:                     55b72a2c-5546-3a70-af0f-c45926c96c87.roa (raw, json)
Hash identifier:          ZGzfd6k2CQJOu1oO5/a2VPlVPdD15N/S+QAj6kgqZXM=
Subject key identifier:   1D:37:08:90:FC:9E:A4:9D:B4:CC:6E:AB:5C:7A:89:B0:F0:61:D5:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB17AD8700930909EB86100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55b72a2c-5546-3a70-af0f-c45926c96c87.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        67.188.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:7a:d8:70:09:30:90:9e:b8:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=d775bbab-561c-4840-8bb8-debbeb12fefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:ae:e3:ed:d6:1e:2b:aa:f3:75:83:b9:ca:
                    02:d2:6d:a6:50:37:05:24:45:69:44:30:b2:16:2e:
                    76:3e:50:d3:ba:43:e0:fd:b6:a6:66:98:14:7e:11:
                    fa:d2:9e:0f:ba:7f:31:f2:50:e8:0c:a9:6f:c0:8f:
                    cd:30:54:11:f6:17:58:bc:b6:1c:0f:de:56:33:3d:
                    84:bf:6d:f2:82:48:5b:e1:20:1e:b2:51:91:cc:ce:
                    11:88:9c:60:6e:32:8d:ce:62:84:79:d6:a9:e4:78:
                    ac:8f:0c:8c:56:48:28:19:bf:a4:e2:9e:be:c8:35:
                    1a:cd:7a:6a:42:cb:a8:e9:ef:61:79:2c:ef:d5:66:
                    3e:57:82:5f:b6:4c:bc:b8:ad:f6:6b:27:6e:d7:f4:
                    e8:b1:14:91:36:2f:28:70:a4:8f:25:9d:97:aa:58:
                    bb:ba:f5:01:7c:3e:b0:2c:bd:d2:67:17:f8:2f:0a:
                    a0:73:4d:8c:c5:28:65:99:f9:b2:ea:ac:ee:47:71:
                    f6:4e:1d:d9:8b:64:f9:98:c4:21:a9:6b:48:d7:d4:
                    be:9d:2b:cf:85:9c:3e:64:e1:a4:37:37:f8:3d:05:
                    3e:1a:0c:26:0b:e0:d0:b2:26:07:e9:fc:89:16:80:
                    df:64:45:d7:f7:86:f2:4f:0c:a0:33:05:c6:26:c9:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:08:90:FC:9E:A4:9D:B4:CC:6E:AB:5C:7A:89:B0:F0:61:D5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55b72a2c-5546-3a70-af0f-c45926c96c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:93:01:db:1e:d1:ff:b3:ca:32:06:9d:1e:8e:9c:d1:7d:8d:
         14:d0:44:23:aa:52:0e:0a:30:a9:61:93:cc:9d:f0:ac:8f:cd:
         f4:dd:f8:65:b4:31:e1:e4:35:95:96:59:53:34:d2:36:09:7a:
         b3:41:7f:49:8a:e2:d6:cf:43:3e:68:2b:8b:2a:7b:b8:6d:52:
         9d:5a:21:16:97:24:dc:ca:07:7c:db:1e:4d:cb:21:ba:09:ed:
         a7:ee:8c:ed:be:0c:6b:c2:13:50:f2:f6:44:d9:13:15:f1:5f:
         3e:89:94:3d:e3:56:f5:3f:1d:04:38:56:8a:30:e3:b7:52:06:
         e7:ad:38:d2:c7:12:9c:36:b8:c2:fa:d8:73:e2:9b:52:e6:8e:
         b3:b2:ed:43:00:fc:d6:c1:4d:26:8b:43:48:c7:d8:a2:3e:80:
         6f:2a:54:bf:41:7c:c9:67:50:cd:13:50:78:76:bb:c3:de:f6:
         66:a0:97:2f:2f:1c:1c:cb:6f:65:b4:13:20:2d:81:83:72:d5:
         ca:a0:58:43:d7:36:0c:c7:42:4c:a0:93:ce:bc:23:03:7f:36:
         98:b1:e1:d2:32:75:ae:58:74:08:a0:a4:6c:f0:cf:d4:80:29:
         db:26:be:96:f4:98:30:61:8e:8a:03:b0:c9:92:07:1a:a7:85:
         e7:3c:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:04 2025 by rpki-client