Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bb55bc3-c25d-376c-a89a-b7d7eef0eecd.roa
File:                     6bb55bc3-c25d-376c-a89a-b7d7eef0eecd.roa (raw, json)
Hash identifier:          Byt0yxwtO4fOp3Na503jzqCi+hSqQ9d1y6tdrwpvJJM=
Subject key identifier:   B1:89:16:73:30:92:DF:4B:1F:9E:D3:7E:CC:22:6B:C3:75:75:67:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D5CB0701207FF520B4900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bb55bc3-c25d-376c-a89a-b7d7eef0eecd.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33650
IP address blocks:        74.92.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:5c:b0:70:12:07:ff:52:0b:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=28bd4a09-0400-4df0-873f-e1fd617bab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:75:83:26:6e:3e:5e:41:7a:f4:8e:70:3a:
                    04:2d:09:77:da:1c:cd:e5:14:90:30:72:fd:3d:04:
                    d7:21:d7:ad:e5:52:9f:5e:19:16:c7:bf:8a:56:9e:
                    23:b9:82:64:83:5e:4e:fa:94:6d:7e:b7:f9:aa:57:
                    aa:49:82:30:d6:19:ee:6a:8f:ff:0f:b6:6a:30:c7:
                    7d:03:fc:68:61:1f:60:11:7a:2c:b7:19:68:9f:15:
                    97:97:99:c5:39:e4:93:fc:fd:24:61:8f:34:26:f0:
                    34:16:91:76:82:35:52:2f:cc:40:f0:75:5e:ce:fc:
                    e3:0b:27:ae:e8:9b:ec:10:9b:25:0b:6f:49:05:c0:
                    0c:32:52:61:6d:0f:30:d4:01:d2:a6:be:c0:13:37:
                    b2:b8:45:a6:6b:ec:f0:ab:76:c0:44:72:06:92:bb:
                    14:86:79:e2:67:fa:a9:8a:67:1b:61:61:70:0f:e6:
                    04:de:2b:ff:90:b4:7d:66:d9:2e:9c:33:05:c7:e0:
                    32:e2:5a:ed:c5:ca:e2:0d:b2:8a:54:f4:8e:6e:18:
                    27:c4:e6:c1:01:26:88:f6:54:d3:0b:38:9b:3d:47:
                    46:30:55:31:41:bc:1f:17:ba:3c:09:ab:e5:81:e3:
                    c0:eb:94:98:f2:0b:be:88:2c:ca:0a:c8:78:60:f0:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:16:73:30:92:DF:4B:1F:9E:D3:7E:CC:22:6B:C3:75:75:67:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bb55bc3-c25d-376c-a89a-b7d7eef0eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.92.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:7a:32:27:da:49:73:f6:25:91:5c:4a:5c:e0:02:ad:c3:
         b9:4f:a7:27:2f:35:e5:24:22:8b:c7:a8:61:85:a0:1a:de:20:
         a0:6c:8a:98:e2:b0:45:80:9f:f0:eb:d8:6b:b1:bc:52:80:6a:
         76:f6:47:06:9e:37:6f:5c:c8:e3:f5:14:5c:59:91:22:25:7d:
         e6:ad:b5:f4:ea:8e:74:d2:1b:5c:e5:cd:f5:0a:ff:4a:3d:f3:
         f8:b2:16:de:a8:6b:c2:84:a0:55:7f:41:ea:cc:5f:66:03:90:
         5a:f8:58:9f:26:92:fa:9b:3c:ee:a4:e4:70:d3:60:6c:27:fb:
         a4:50:24:c6:00:61:ae:70:a6:d1:20:82:b9:79:7a:b1:45:27:
         84:dc:62:b4:5a:91:8e:03:aa:df:01:c6:1f:01:40:96:81:81:
         c8:78:43:36:3e:0e:13:90:dd:58:48:10:f3:46:7b:dc:73:bd:
         f8:3e:57:7c:8a:ef:66:ce:2b:ba:44:46:e6:ff:3e:c2:cc:4a:
         f7:a1:b6:5e:2e:60:32:d0:4e:ce:e0:21:59:54:6b:73:dc:67:
         95:26:85:81:89:22:40:5d:60:69:52:be:93:c7:f0:f5:92:2e:
         e1:41:7b:ca:37:f7:1f:5a:82:38:c0:f8:28:5f:20:4f:20:56:
         de:a9:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:37:09 2025 by rpki-client