Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58dac78e-6743-3ab0-83aa-6cab9967ab8d.roa
File:                     58dac78e-6743-3ab0-83aa-6cab9967ab8d.roa (raw, json)
Hash identifier:          STZGli4+4auACRgtX41nd0IxyaG2T9nexVUi7WwGp/o=
Subject key identifier:   DC:87:C8:2F:70:D6:78:53:E2:3E:9E:37:99:B5:96:E4:75:37:10:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F74377088C9A93FA9C2000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58dac78e-6743-3ab0-83aa-6cab9967ab8d.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.238.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:43:77:08:8c:9a:93:fa:9c:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=677ea402-ff20-4538-91ae-57f6e4f741cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:af:59:8d:1a:9d:5a:7d:b8:1a:ce:c4:9c:
                    d0:a1:e7:ed:24:3f:25:57:b6:8f:72:2d:8b:c8:2f:
                    6a:80:c5:23:e8:f9:b7:5b:cf:dd:62:2f:ae:c7:ec:
                    42:5d:38:63:85:c1:7f:23:1e:d3:4b:c5:41:a3:37:
                    0c:fd:85:93:c1:2b:f4:70:1d:9f:bf:46:dc:0f:1f:
                    01:d4:cf:ad:af:3b:7a:d3:2f:b7:fc:b7:46:90:61:
                    8c:d1:7b:dd:1d:eb:be:0d:ab:51:12:6d:2a:1b:74:
                    6d:13:28:cc:e0:44:c3:5f:b7:f0:7b:f4:b4:28:c3:
                    68:1f:11:e9:bc:da:11:49:d1:29:33:2c:df:4a:c2:
                    a5:be:7e:c8:51:d9:37:c9:f7:9a:c9:c8:d2:19:a6:
                    1c:0c:45:a2:26:dd:91:b2:4d:c4:49:b5:85:f8:5f:
                    37:41:14:00:4d:fe:ea:8f:b4:75:aa:bc:75:d0:5d:
                    41:de:71:71:c9:f2:46:73:74:ed:d7:e7:46:ee:03:
                    63:fb:7b:54:94:59:6f:6b:7c:8c:70:72:a7:e9:da:
                    72:96:18:32:ca:1f:0f:df:b8:e8:24:14:f7:e2:11:
                    01:07:db:48:7d:58:fe:57:d9:36:39:0e:57:07:17:
                    a0:74:e3:50:b9:bd:c5:b4:aa:de:88:84:31:81:eb:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:C8:2F:70:D6:78:53:E2:3E:9E:37:99:B5:96:E4:75:37:10:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58dac78e-6743-3ab0-83aa-6cab9967ab8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.238.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:50:84:ad:9f:3a:84:3f:1e:cc:3e:38:a5:98:44:f5:f7:
         55:75:07:d6:46:34:fd:d1:f7:16:b5:b8:20:84:40:bb:db:3d:
         40:ff:16:01:f4:25:5d:77:2e:48:58:47:58:27:d4:86:1c:44:
         93:71:6d:95:d0:68:45:7d:27:9f:76:0b:5f:c3:02:68:15:c4:
         66:be:56:f7:ee:5c:3f:5c:1e:10:86:52:b0:4c:96:61:27:6f:
         e7:19:4a:e5:db:50:17:8b:b0:fd:c8:76:a3:ef:15:c5:be:28:
         91:8b:09:4f:e1:2d:be:0b:50:35:0e:2b:da:26:5f:33:5e:72:
         a7:bf:6b:ba:d5:80:03:c8:66:13:85:5c:ab:91:36:15:5d:4a:
         9b:34:c5:3e:67:2b:73:25:ce:19:d3:29:17:91:3b:f2:46:0d:
         ea:18:d9:61:f7:09:3b:9a:74:9c:6d:c1:c7:a5:8e:fd:57:e5:
         1d:6f:ca:f6:ed:bf:9b:30:ae:eb:44:72:09:e6:3a:ba:b7:0b:
         f8:72:bb:af:a7:97:02:53:de:27:cb:ae:1c:35:73:69:29:4c:
         c5:4c:0b:0c:e7:c1:6f:3a:5d:d6:47:a3:ad:19:08:72:be:53:
         9e:fe:c5:15:a5:52:92:b8:a0:52:48:1c:13:d4:80:76:ac:c6:
         2c:d0:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:29:16 2025 by rpki-client