Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69025263-5245-3c74-96aa-7af8be9d641f.roa
File:                     69025263-5245-3c74-96aa-7af8be9d641f.roa (raw, json)
Hash identifier:          gLcKo2XJqKl8x+meg9vchMxIOPSbyWYPYoM55u22qxk=
Subject key identifier:   CD:08:C4:F9:4A:7F:43:98:9E:64:25:6C:05:09:00:08:03:C3:70:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F767797AAFFE1DE6802E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69025263-5245-3c74-96aa-7af8be9d641f.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        76.24.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:67:79:7a:af:fe:1d:e6:80:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e67f1a86-c433-4117-aa44-c2118eaab510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:36:77:4b:cd:e8:cd:61:e1:0b:93:af:16:aa:
                    70:55:b0:47:76:32:7d:df:f6:4f:36:cb:67:c9:e3:
                    14:1b:e3:70:14:f9:5b:5a:c3:2e:d0:8b:41:11:7f:
                    17:b9:85:30:17:a1:20:62:eb:bc:eb:01:26:ee:6d:
                    6a:26:84:b5:39:03:ed:b8:15:7d:ac:84:d1:fe:09:
                    34:8b:2d:98:60:3d:a5:80:32:cd:57:82:1e:fc:1b:
                    5e:cc:ed:ec:d9:3c:19:9a:4b:ff:c3:e2:ca:22:ac:
                    22:a6:b5:9c:53:d3:0f:83:ab:69:25:02:35:d2:ba:
                    0c:ef:04:48:db:ad:18:7d:4e:ee:38:7e:cb:67:a5:
                    7d:ad:76:92:c1:e5:43:19:0e:c5:de:49:3d:54:b5:
                    14:ea:ef:30:96:13:43:c1:70:f9:0b:8a:02:dc:0b:
                    53:e1:1a:dc:ea:96:a4:68:b3:16:5e:ba:fc:06:a5:
                    ab:0b:6c:15:f1:15:d4:19:7a:69:e7:dd:d9:43:e1:
                    d6:14:bc:d8:a3:a7:2e:48:b8:a1:13:fc:1d:0d:a0:
                    6c:71:2f:95:cd:36:07:e6:6d:16:dc:19:dc:65:c3:
                    38:86:05:5b:9f:92:3a:e9:7e:ca:e5:3d:99:cc:a7:
                    25:37:d3:fb:f8:82:9b:0d:83:ee:fa:2d:27:a2:8d:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:C4:F9:4A:7F:43:98:9E:64:25:6C:05:09:00:08:03:C3:70:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69025263-5245-3c74-96aa-7af8be9d641f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.24.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:45:f1:8e:42:fc:e2:42:6f:c6:f0:8b:0b:b2:75:ea:bd:
         fa:58:d8:0a:21:e9:fb:2c:d6:69:13:a8:95:23:59:ce:dc:ea:
         37:d1:5a:40:e3:09:06:bf:8e:47:04:f0:32:f7:c5:e2:05:a9:
         fe:d5:b5:d8:7e:0c:e9:b2:ca:3e:ea:85:90:dc:a5:91:64:42:
         13:b9:e8:3e:1b:34:11:3f:fa:84:d4:5d:b8:a9:47:a7:3d:ff:
         08:eb:b7:7a:f0:cf:dd:1e:12:fd:76:3d:77:a6:d2:c0:88:0b:
         eb:97:d5:8b:26:66:e2:fc:0e:9d:d4:2e:e0:ac:26:58:e9:d7:
         d8:53:bd:56:03:c4:26:c1:47:d1:57:03:91:51:3c:4a:07:ec:
         af:12:4d:a4:58:3d:ab:07:2e:57:ed:4d:0c:16:45:45:80:6d:
         3b:c6:64:20:e4:22:d5:32:16:b9:8a:e6:0d:85:c9:7c:93:32:
         78:d4:9f:ad:fb:c1:26:d5:92:3d:d2:08:b8:e2:10:47:e1:18:
         2a:29:2c:0b:3d:ac:67:79:06:cc:3e:f4:15:38:b3:5a:80:84:
         80:e9:0a:4f:94:0f:86:19:a2:27:6e:44:7d:3c:26:05:98:76:
         b6:ee:3d:14:26:b1:b6:17:54:53:0d:4b:77:e8:be:69:bc:60:
         f8:69:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:21 2025 by rpki-client