Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a87ee0a-76fa-315b-8d9d-11b49d08ecda.roa
File:                     9a87ee0a-76fa-315b-8d9d-11b49d08ecda.roa (raw, json)
Hash identifier:          EQJiXZYHzyK3ZTQHwr+nIYo7a8C66j/S1PY9PPdr12E=
Subject key identifier:   4A:CA:71:B2:DE:A1:C4:6B:91:01:7E:73:75:74:0F:9D:6F:1F:79:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C4E467E319549FE4FBE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a87ee0a-76fa-315b-8d9d-11b49d08ecda.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        75.65.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:4e:46:7e:31:95:49:fe:4f:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=dccd42ea-e911-483c-a396-9083756e4872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:7e:48:b3:28:e7:f8:39:c4:d5:aa:95:89:
                    f9:3a:60:55:3d:dd:49:7c:d7:1d:0c:3a:b9:60:2d:
                    0e:5a:49:1b:bc:0f:e7:cf:1a:43:cb:bb:e9:51:de:
                    3a:0d:32:51:60:26:e7:c2:37:14:b9:8f:0e:e4:d0:
                    d1:19:d0:39:1f:82:1f:2b:6d:f4:61:68:51:5b:31:
                    69:ad:59:96:37:af:43:45:90:f1:e8:a1:44:2e:c6:
                    b1:7d:6b:98:00:54:72:2b:dd:64:58:0b:b3:f2:04:
                    71:71:06:ef:6d:38:ed:19:02:ff:12:c5:fb:ea:84:
                    82:eb:35:21:34:1e:92:1a:4d:b5:d0:19:f9:c9:19:
                    26:ba:d6:cb:da:b8:13:cc:95:67:fa:1b:c9:63:2f:
                    55:55:07:54:69:a3:9e:d5:af:75:a5:15:a9:b6:37:
                    0b:c6:fb:5b:3e:97:cd:00:76:8d:56:68:89:cd:86:
                    ff:99:c2:49:77:2a:6b:3c:f0:61:80:98:65:02:7b:
                    64:0a:6e:2e:66:37:2a:a6:43:08:83:41:a8:73:9d:
                    00:91:e8:42:1f:be:25:6a:2f:15:43:e7:8a:8d:cb:
                    03:47:30:bd:d5:be:bd:0a:c2:13:74:b4:17:9b:2c:
                    b8:38:aa:1b:48:44:a9:6d:2b:dc:74:c9:6e:82:14:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CA:71:B2:DE:A1:C4:6B:91:01:7E:73:75:74:0F:9D:6F:1F:79:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a87ee0a-76fa-315b-8d9d-11b49d08ecda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:04:34:23:75:bb:00:9f:c9:40:2f:c1:53:ea:b2:79:ca:b0:
         3a:59:1b:6c:60:19:06:2d:0a:76:5c:af:af:48:be:03:81:f5:
         02:6d:90:d0:cd:22:c0:8e:24:3c:8d:77:ff:c7:d3:1b:f9:d2:
         a9:9e:81:c9:63:ad:9b:9a:6e:02:4f:42:89:c7:66:6b:c7:c4:
         c7:c0:d9:46:52:b7:7a:0a:b5:e8:f7:a1:96:da:58:ed:ba:56:
         30:ec:85:49:5a:0d:5d:94:99:66:5d:44:e8:2d:3a:40:71:83:
         8e:4f:d3:5a:83:c7:d2:ae:68:cb:87:97:25:a2:2c:9d:b4:ae:
         dc:ca:e4:37:23:ab:dc:0d:39:6b:5d:23:94:f2:f1:9d:1b:9c:
         de:68:9a:63:c4:09:8b:1f:33:91:e8:d5:d6:9d:92:93:08:f9:
         85:9e:93:19:44:d9:64:49:53:f7:8a:c2:48:c9:73:e2:18:5b:
         6b:4e:8f:7f:5c:29:06:40:28:f6:e9:24:42:2c:74:23:c5:a5:
         98:be:46:12:d1:9f:89:3f:78:e5:aa:78:8b:33:e6:37:14:fe:
         1c:d8:fc:e9:92:b2:f0:25:be:7d:b3:1c:be:27:59:40:32:6c:
         2b:04:f5:6c:ff:76:bf:9c:45:07:85:02:69:64:1f:88:0c:29:
         74:38:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:05:09 2025 by rpki-client