Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74c0dd20-925b-3ff4-8dc5-fbe843ecd4a4.roa
File:                     74c0dd20-925b-3ff4-8dc5-fbe843ecd4a4.roa (raw, json)
Hash identifier:          Vycr1H5mx9Ha2gj5ObTBufDL2ZXzaHT1QlsYt4B+f6I=
Subject key identifier:   4B:36:D3:A3:A3:A6:55:BD:3F:89:3B:88:88:A1:FF:60:20:BC:1B:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1469B5A5B20CC2DF7EB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74c0dd20-925b-3ff4-8dc5-fbe843ecd4a4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        76.139.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:46:9b:5a:5b:20:cc:2d:f7:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2a1cb85c-44fc-42d2-bced-ce82b067d419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:af:75:88:2c:21:c5:de:22:1d:ed:95:2f:
                    e3:98:dd:95:20:2b:d0:80:36:6e:aa:8a:3f:6f:70:
                    92:80:51:8c:7d:2d:94:d5:97:97:44:02:36:80:13:
                    8e:5e:d7:bf:86:8f:bb:46:cb:98:ba:e0:30:29:c9:
                    f3:2b:da:3a:aa:35:51:b4:87:bd:0e:df:af:f4:9d:
                    22:73:a3:55:c1:8e:dd:d6:6b:0a:ed:03:76:84:12:
                    4b:b2:83:6a:36:04:44:7c:28:5f:55:54:04:70:2b:
                    f7:b7:ef:c1:2f:ea:45:ec:98:d2:c4:b5:7c:31:1a:
                    97:4c:72:35:e4:29:19:cc:8b:f6:2e:fc:95:7e:64:
                    d6:27:58:70:f8:39:30:48:05:ac:33:52:1f:d1:68:
                    68:ab:fb:70:26:9b:f1:80:7a:21:02:47:a1:c7:49:
                    08:cd:12:5e:d8:c2:c8:4d:d2:9a:77:6a:64:0d:57:
                    3d:f5:0e:20:9a:39:c4:4f:cb:3d:09:e5:58:48:32:
                    ca:71:32:e4:a6:cb:f2:0b:3d:56:d6:dc:13:74:e0:
                    d7:3d:69:18:0e:5f:71:1f:7e:6f:f1:05:82:dc:7e:
                    d0:82:97:30:fb:94:7f:4e:58:7b:82:3f:fe:14:7f:
                    b9:5d:4f:b7:b7:d3:2a:3e:73:0f:5b:f3:90:72:36:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:36:D3:A3:A3:A6:55:BD:3F:89:3B:88:88:A1:FF:60:20:BC:1B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74c0dd20-925b-3ff4-8dc5-fbe843ecd4a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:76:2e:df:72:35:d0:3f:bb:dc:7e:a4:25:47:73:75:5a:ef:
         08:c3:d9:17:93:fd:a0:3d:4e:f0:66:5d:63:e1:a2:34:81:be:
         ee:46:9b:0b:7e:87:06:18:8b:bc:3f:16:37:f0:78:7c:7e:34:
         9e:bb:e9:70:5f:9a:64:0a:47:39:9b:d5:d7:d9:22:f3:d6:1a:
         78:c3:3a:b0:e7:1e:68:e4:10:4c:f3:d6:2f:b3:99:3c:b9:59:
         eb:b7:26:af:81:41:f8:4f:6a:82:0c:ca:d9:94:e2:d3:16:19:
         7b:6f:28:9f:d7:22:25:7a:8e:c3:7b:45:ff:9a:26:7d:be:2c:
         3e:98:42:51:90:86:6c:33:85:a9:c3:8b:65:aa:3a:b2:8c:79:
         8d:5d:f4:4d:bf:44:05:ed:4f:5e:0c:52:c3:9b:d0:35:7d:30:
         6a:d9:c8:8d:5c:02:13:aa:01:6d:08:55:ff:23:4f:c6:31:d0:
         e4:00:80:97:63:e5:2d:68:c3:4a:56:65:fa:4e:0f:ee:09:e3:
         05:20:83:90:c3:d1:b3:d8:e7:5d:76:f4:85:bf:af:ef:0c:b1:
         59:c1:03:b4:8d:c1:30:89:e8:e6:ba:a6:b1:c5:d4:13:21:3e:
         29:99:2b:cb:61:f2:c6:ec:05:a5:b3:6a:6a:b0:d5:c0:61:e5:
         24:f9:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:26 2025 by rpki-client