Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91ac0a00-1619-3dd6-8657-f0149c2610b3.roa
File:                     91ac0a00-1619-3dd6-8657-f0149c2610b3.roa (raw, json)
Hash identifier:          KLLCYMPNyLzK55IlZpj5wkBVGjDbXOTb6dqcfOhkOKo=
Subject key identifier:   B9:93:65:91:41:2B:D5:23:26:68:0D:19:12:FA:06:73:7E:FE:00:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C4C361D79F34D7E615F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91ac0a00-1619-3dd6-8657-f0149c2610b3.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        69.180.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:4c:36:1d:79:f3:4d:7e:61:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=c4b181d6-dacf-4c1f-8c82-b635a8c80169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:2b:5d:c4:7d:b3:36:bb:b1:e5:c5:86:4c:
                    06:52:78:bd:41:10:63:72:e3:ad:a6:44:40:4d:84:
                    da:6d:18:b6:54:14:60:47:d1:43:00:f7:b7:04:82:
                    b3:c4:84:b1:c5:20:27:ee:60:85:7b:92:d5:8b:8a:
                    c0:23:9d:bf:36:86:7c:36:2a:02:56:17:72:05:38:
                    c0:a2:db:c1:5c:7d:0d:c1:f5:78:8c:0e:15:4e:1a:
                    ce:0c:a1:a2:3e:35:fd:b1:3d:c1:8b:86:ec:62:b9:
                    f9:33:e0:16:e4:be:38:d1:0a:16:29:e2:f8:67:d4:
                    47:93:cc:43:47:38:92:b5:69:fd:dc:99:83:62:52:
                    9a:b3:17:c1:43:dd:cd:69:bc:39:27:f7:f6:ba:91:
                    05:f6:7f:90:b7:97:61:46:9e:f8:cf:33:b8:fa:50:
                    0c:15:8f:5b:40:d1:3c:b1:77:ca:70:81:25:97:6b:
                    c7:84:57:ce:5d:47:ff:00:fb:c1:4a:13:32:e9:96:
                    05:c3:73:db:83:05:a3:fa:b6:6e:3e:02:87:1e:44:
                    52:b6:1a:b2:41:d2:b6:03:1e:b6:80:dc:9e:0e:08:
                    15:8d:b7:08:f1:e9:74:ad:11:e1:c7:53:9f:36:da:
                    43:a8:ad:21:80:b0:5f:cb:01:bc:ce:4f:f9:1d:59:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:65:91:41:2B:D5:23:26:68:0D:19:12:FA:06:73:7E:FE:00:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91ac0a00-1619-3dd6-8657-f0149c2610b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.180.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:c7:2e:7e:66:a0:57:e7:b5:96:79:ac:88:03:36:73:1e:
         cb:03:5d:61:ab:28:6c:95:0c:ee:ef:29:b8:a5:5c:b8:42:34:
         cf:49:1c:25:3b:41:51:f1:f1:7c:2b:4b:c9:51:a0:a2:da:d7:
         4b:b9:e1:e2:6a:ab:15:a9:81:b6:77:eb:93:cb:36:ed:16:a4:
         aa:74:2a:a9:f7:f0:1f:84:30:77:c3:77:7b:09:51:fc:1a:93:
         92:11:58:17:8d:7c:c1:79:b6:65:2a:49:56:64:7c:83:4d:6b:
         51:5e:8c:f7:22:dd:05:a3:2c:84:b5:31:a6:13:c6:5b:4f:95:
         d0:1e:fd:e8:a1:e5:2f:f0:44:20:f6:da:4d:b4:f1:8c:2a:bb:
         71:54:a9:7c:d9:d8:9c:09:3f:b5:03:2a:00:b5:05:ce:6f:06:
         d8:87:58:31:6a:8b:a0:ba:69:6b:b1:a9:8d:9c:6d:ed:14:e1:
         da:73:d1:04:35:e1:04:b0:d5:47:38:bd:fa:73:91:29:1a:94:
         73:03:ca:67:37:a6:cc:16:58:1b:36:ea:4a:d4:10:39:15:47:
         88:9a:e1:38:c6:ea:18:b6:30:3b:d7:4a:eb:02:c3:b6:24:f5:
         8d:26:5f:79:59:30:03:23:a9:b5:7d:65:71:42:24:17:c5:4c:
         03:42:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:31:37 2025 by rpki-client