Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f25c5f0-b0f1-374d-82a2-b8b653cbdbc5.roa
File:                     6f25c5f0-b0f1-374d-82a2-b8b653cbdbc5.roa (raw, json)
Hash identifier:          0LKoW1gvMXwbLs05Cjk2UV/+QJdKchlTsIw1ZNzOQeY=
Subject key identifier:   75:72:19:25:A4:4A:D3:7B:EE:D1:61:A5:37:24:11:C1:49:02:1A:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848AF2B8D719470FAF80BA45D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f25c5f0-b0f1-374d-82a2-b8b653cbdbc5.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     33661
IP address blocks:        70.90.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:8d:71:94:70:fa:f8:0b:a4:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=1a33b37d-8eb1-4470-856f-d464be70af73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:18:e6:d1:87:e6:0b:14:e0:ff:8e:e8:74:
                    5d:bf:62:49:99:51:04:70:0d:0b:67:ff:ae:18:d1:
                    b2:52:47:4a:1c:fb:16:95:0c:83:68:2a:7e:be:6b:
                    c9:5d:d9:47:55:2f:bb:44:c4:58:93:29:47:a2:3d:
                    d8:a5:76:ef:b4:7a:da:b6:57:fa:ad:95:26:b2:be:
                    ab:cf:5c:f9:d4:8b:36:fa:a6:0d:49:27:0d:2c:2a:
                    42:b9:71:f3:94:fb:32:db:83:dd:b3:7e:ee:1e:ba:
                    2e:12:a1:d2:8a:de:ba:f0:5c:9d:05:b4:ac:19:a2:
                    1c:98:60:6f:23:ce:79:e0:2d:e1:c3:62:e6:48:12:
                    3e:6a:c1:82:29:6a:a3:5f:57:12:16:f6:25:f5:52:
                    77:ae:28:48:ef:05:89:bf:87:f5:2f:64:8c:c1:2b:
                    dc:57:99:e5:33:a1:58:ff:69:36:56:e6:04:b9:ae:
                    e7:0a:7c:0a:b1:5e:6e:08:3d:79:5a:65:7b:e2:63:
                    fa:51:22:f5:7a:b0:f0:90:69:1a:55:5a:fe:c5:33:
                    77:72:0e:e8:ad:9d:13:64:db:ae:28:30:87:4f:53:
                    47:65:b9:a8:4b:30:3c:68:7f:ee:a9:1e:27:d9:7d:
                    ad:62:8a:e2:4f:6a:b1:87:41:46:a0:29:5a:c5:62:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:72:19:25:A4:4A:D3:7B:EE:D1:61:A5:37:24:11:C1:49:02:1A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f25c5f0-b0f1-374d-82a2-b8b653cbdbc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.90.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:44:82:f4:48:97:ba:57:12:16:22:00:f1:d6:cc:26:48:fd:
         d7:32:5f:0b:82:3c:7d:43:b9:dd:ba:a7:b8:6f:5b:a5:0c:fa:
         bc:a1:c1:29:be:af:31:2a:ce:36:1e:01:07:8f:c3:1a:7d:be:
         85:f1:68:5d:af:62:3e:0f:bb:23:d8:cf:fd:b7:d6:60:08:0d:
         99:cb:df:84:1d:a9:08:ad:1e:15:e2:c5:b9:c3:87:af:69:a3:
         2f:a4:0f:2d:ce:a5:fe:45:8b:ca:63:5d:5d:78:ca:91:a1:d4:
         d4:08:81:14:1c:44:17:ec:d7:09:c7:86:08:0c:8f:d4:35:f2:
         a3:83:e0:51:c2:2e:a7:13:be:a8:3c:4a:fa:12:91:cb:6a:d5:
         d7:87:03:de:af:58:5a:0a:ab:48:5f:c0:d5:8c:02:30:eb:e6:
         1e:1c:bb:78:ca:8e:44:38:e2:67:90:94:e9:e0:e6:05:c9:a1:
         39:1b:e6:5b:f0:7b:1c:3d:da:8b:70:8c:dd:28:8b:0c:75:26:
         75:55:86:98:61:13:ea:aa:df:5a:ec:58:d0:73:62:bb:6a:2c:
         4e:01:f9:f1:6a:bf:17:45:28:6c:71:a8:3b:36:5b:dd:1b:53:
         88:83:93:e6:e1:3c:f1:1e:38:fe:ab:78:7e:14:1b:da:64:fe:
         ef:72:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:02 2025 by rpki-client