Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fb8c170-106a-385b-961e-1e5e174bddfd.roa
File:                     8fb8c170-106a-385b-961e-1e5e174bddfd.roa (raw, json)
Hash identifier:          g4JIeL4SPVoLI+6uccfUR8/60yNqwuW4RBwMpKLLH3I=
Subject key identifier:   2F:3C:F6:71:6D:54:51:C8:8E:3C:9B:A1:28:D4:E7:30:70:26:F3:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C50AFF467FFCBEB511E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fb8c170-106a-385b-961e-1e5e174bddfd.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        75.66.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:50:af:f4:67:ff:cb:eb:51:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=49019738-a344-4d89-9bca-f6f93dad41af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:ae:b1:7b:a3:9f:48:17:cf:5a:3f:66:c2:
                    10:09:3c:79:3b:b4:8d:89:4e:7d:c5:55:64:28:d7:
                    93:af:d6:7e:53:c9:6f:9e:d8:d5:1b:16:ad:91:8e:
                    e8:f1:d9:04:2a:90:3e:b2:41:11:e5:ed:ec:ee:90:
                    44:09:28:9b:8e:4c:9e:fd:46:e3:ef:63:1f:03:8c:
                    9a:8c:f9:90:a4:6e:76:bd:a1:33:61:af:0f:bb:25:
                    76:4f:96:74:71:9b:d3:84:d3:ff:b3:f6:33:fb:38:
                    d3:14:c2:ea:59:1e:a7:75:4c:6f:3b:1f:04:ce:77:
                    5b:e9:38:1c:c6:50:65:ca:d0:95:fe:87:49:a1:d9:
                    d2:71:7f:18:12:c5:1f:7e:03:b4:e4:51:d7:06:a8:
                    45:0f:dd:d6:ee:fc:c1:e8:ea:99:1d:38:71:0e:01:
                    bb:f4:b1:e2:af:1f:4e:aa:d5:d0:e7:ef:2c:63:76:
                    c0:da:d9:9b:f1:53:d4:49:1f:f1:7e:d0:6c:3e:d9:
                    f3:37:89:55:da:64:d3:61:0f:99:4a:80:06:70:55:
                    45:69:b4:7b:bc:f8:2c:93:7a:28:3f:b7:a9:ad:b5:
                    1c:bc:45:20:30:23:31:98:02:b3:35:9d:c6:ce:5b:
                    01:aa:64:d9:cd:4e:c9:0b:3a:80:f8:e3:a4:2a:63:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:F6:71:6D:54:51:C8:8E:3C:9B:A1:28:D4:E7:30:70:26:F3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fb8c170-106a-385b-961e-1e5e174bddfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:52:7a:3c:9a:9c:b1:62:50:40:24:25:f4:7e:02:14:35:2f:
         89:72:6b:d1:ba:14:31:bf:2f:94:b0:f0:7e:15:af:c4:36:7b:
         cd:3c:fe:dc:08:19:c8:e8:b6:78:38:cc:20:6b:7b:67:91:24:
         a8:26:5f:f5:dc:f2:22:cd:93:87:a2:88:89:20:d5:4b:81:86:
         b9:c8:1f:a6:66:d5:d6:24:87:6d:ef:70:45:47:05:32:aa:6f:
         9b:e5:34:4c:82:2c:92:cc:df:c3:99:63:ac:1d:71:cd:7c:9a:
         84:ce:89:5f:a3:c9:42:59:33:b5:f7:f3:02:db:e9:9f:50:c7:
         fe:a9:dc:f8:ff:36:d6:7d:b7:0c:1c:91:b2:2f:e8:ef:b0:5b:
         1d:cf:47:76:ea:23:76:51:35:ad:54:ca:80:d6:07:81:7e:cb:
         da:e3:6e:ed:dc:35:5b:9b:d9:ef:11:7e:24:6a:77:9c:24:37:
         0d:9e:8c:91:21:f0:8c:ab:64:ff:af:df:d4:92:b4:54:78:40:
         c9:81:06:2f:ed:ca:69:4f:d3:f8:4a:fd:e0:4b:5c:42:11:90:
         04:0a:28:ce:8f:30:5c:8a:5b:72:9e:95:86:cf:f4:c0:d3:b1:
         ae:47:44:c5:cf:38:d5:81:c2:fc:da:74:5d:94:4e:fb:21:00:
         e9:92:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:00 2025 by rpki-client