Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e49523-1912-3830-b44c-731c31a74c63.roa
File:                     90e49523-1912-3830-b44c-731c31a74c63.roa (raw, json)
Hash identifier:          MII45KQ+JW1xe2IxSY5Mtgz/Z1dyDIges7+ys7jdBXY=
Subject key identifier:   C7:87:85:AC:13:94:E0:68:97:AD:5F:AE:EE:16:F5:79:C1:41:E3:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C9F7B42FEC08E4107A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e49523-1912-3830-b44c-731c31a74c63.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.122.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:9f:7b:42:fe:c0:8e:41:07:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=d41b7222-a381-46ad-82df-9d5b32436675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:c4:90:60:83:cb:f4:e3:80:72:95:15:91:
                    88:26:53:9c:ea:67:cb:33:93:9a:c8:65:12:b7:bd:
                    45:ac:56:32:8c:b8:f4:5b:49:f0:f5:24:c3:c0:7a:
                    59:88:f4:7b:7f:49:64:dc:e2:3d:20:dd:8d:9a:c4:
                    18:f1:bb:b9:04:db:64:d1:96:d2:32:e7:27:9d:17:
                    ac:2b:40:ec:f8:d9:2b:bc:42:df:c2:84:5f:3b:e1:
                    eb:c4:7f:b3:d0:13:72:02:c0:9e:66:94:71:c0:75:
                    7e:40:0b:c4:be:30:f3:32:48:96:6a:5f:c0:4c:b5:
                    4a:66:b0:44:19:e8:ad:9e:97:59:4b:50:1d:2f:54:
                    c1:33:60:21:d6:ab:c5:c8:32:ab:c9:38:48:a8:09:
                    ee:1a:a8:f8:15:cb:6a:1d:4b:c7:f2:79:b4:5e:c9:
                    1e:d9:3f:f6:97:fb:19:bf:01:bb:b2:68:53:8e:79:
                    53:19:ce:01:95:59:43:44:42:01:55:08:d9:1a:21:
                    a1:8f:38:d7:12:4f:12:d4:25:2e:91:1c:04:1b:c1:
                    2b:0e:ac:45:a3:8c:a6:d4:e2:76:f0:7e:fe:16:1a:
                    b3:a1:66:d7:0b:aa:7d:92:e5:8f:70:c4:58:48:ef:
                    98:03:ad:fd:b2:6e:bc:9d:4e:4c:0e:da:0e:00:cc:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:87:85:AC:13:94:E0:68:97:AD:5F:AE:EE:16:F5:79:C1:41:E3:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90e49523-1912-3830-b44c-731c31a74c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.122.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:27:50:54:cf:85:bc:44:5a:89:80:89:d1:3b:b8:76:57:12:
         8a:fb:8b:c4:ba:88:41:63:df:20:c0:e1:03:68:91:c5:9c:4c:
         51:83:4c:91:74:d4:55:40:51:93:b4:b8:9f:c8:af:82:34:1f:
         ab:c6:68:cf:8e:f8:9a:16:b0:a5:d9:15:08:bd:02:60:84:90:
         45:58:11:6f:83:0f:39:3c:b0:b8:c4:62:6a:42:fa:4d:8e:b1:
         76:ea:1d:df:7d:f4:7c:d0:9d:78:e7:44:c3:74:a0:b4:67:e6:
         1b:70:b9:96:c5:60:f0:a2:b8:ad:a0:92:20:78:19:09:4b:ba:
         99:65:15:13:68:7d:d4:b3:7c:69:a0:cd:3d:93:2c:c0:43:13:
         22:89:79:1f:88:18:4b:d6:c7:80:ac:ec:69:d4:64:db:e6:a5:
         24:38:ab:12:b5:73:07:cc:c6:0a:ee:54:25:31:05:0f:15:f9:
         d7:29:f9:b2:6c:05:d4:c7:93:db:94:9b:4a:16:0e:3a:6b:70:
         60:43:7d:87:b7:c3:82:98:e8:c8:44:94:fe:39:cc:e3:32:78:
         2b:76:2a:9f:f4:95:ca:39:6f:10:b7:84:ac:06:c2:14:60:11:
         cd:c0:1a:50:57:45:45:06:fc:57:21:3e:a0:bf:13:cb:bc:71:
         eb:6c:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:52:22 2025 by rpki-client