Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0bbdbc3-6e59-3809-9445-e1c05cc67aab.roa
File:                     b0bbdbc3-6e59-3809-9445-e1c05cc67aab.roa (raw, json)
Hash identifier:          Oj5mhF5eGuQXUE9OGZYcfP+WhH10Tsizv1qZlcYTMw8=
Subject key identifier:   DE:73:46:97:E7:BA:C5:3C:C2:BE:73:2F:53:D5:3D:D5:48:AB:18:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F86CC4F4AEF3DF4CE68780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0bbdbc3-6e59-3809-9445-e1c05cc67aab.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        71.234.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:6c:c4:f4:ae:f3:df:4c:e6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=66d49837-a12e-4c74-92b3-0999c977145d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:03:cb:e1:1c:8b:c3:1d:47:cb:db:18:78:
                    34:38:9a:e2:d1:e3:a8:3a:e2:3f:cf:af:18:aa:aa:
                    1c:e7:44:95:22:9a:82:9d:2c:78:10:5b:54:28:02:
                    1b:ac:ad:3d:15:9c:c3:7a:cc:64:fb:93:f4:7a:30:
                    73:01:6f:2b:f3:64:b8:10:44:59:0c:82:5d:a5:05:
                    5c:2b:7d:fe:62:85:fd:49:ad:ff:6c:a2:20:e3:59:
                    1b:d0:da:01:87:88:1b:44:07:c7:db:90:6a:34:1d:
                    23:08:59:14:af:9c:93:8f:9f:73:60:5a:09:da:72:
                    14:b7:a0:29:14:01:93:00:8b:63:88:e4:20:d1:26:
                    5f:12:cb:aa:74:9f:af:c9:dd:92:ff:ca:4c:7d:60:
                    73:8a:5a:95:e3:3a:48:8b:1b:ff:44:d2:6a:96:59:
                    05:e6:d1:b7:1a:dd:3e:08:00:ab:b7:05:03:c5:2a:
                    01:1d:c2:af:32:19:e9:d3:9a:b3:cc:c0:20:6a:12:
                    16:ab:8c:99:f5:bb:9a:69:2f:18:7e:43:c0:d1:57:
                    2a:32:4a:1b:49:54:57:b0:3c:89:87:da:15:c8:d2:
                    7f:79:6e:59:a7:79:d3:40:07:e5:ca:b9:e4:f3:b8:
                    45:1d:85:5d:65:8d:ff:a7:d5:10:5f:7a:91:5c:ae:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:46:97:E7:BA:C5:3C:C2:BE:73:2F:53:D5:3D:D5:48:AB:18:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0bbdbc3-6e59-3809-9445-e1c05cc67aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:62:93:1f:9b:1e:7b:9e:c7:7a:52:e0:e0:a9:b0:ad:d2:6a:
         19:d3:60:c2:9e:d0:15:7c:1d:8a:97:36:aa:91:0e:d2:dd:27:
         b9:01:43:26:fa:c2:60:2b:6b:fc:8a:f4:8d:80:a2:60:2a:67:
         8f:5e:91:0b:5a:f2:99:39:79:53:7d:e3:33:6a:2e:5a:66:15:
         7c:5a:21:20:7e:0f:f3:96:ba:f4:d4:b9:33:72:7e:04:5b:f6:
         02:d9:e5:73:1a:fb:2a:aa:af:ac:18:49:cd:f2:3e:2d:9d:00:
         d7:6a:cb:35:13:c5:b5:81:25:e3:69:14:f3:70:a0:5f:07:6c:
         83:65:ec:2c:92:9c:f2:ab:e6:31:32:92:f0:19:07:9c:bf:ab:
         3b:a3:93:c3:32:b2:09:d4:77:97:47:47:6c:05:00:26:1d:d0:
         ef:74:25:21:52:b9:28:e7:d8:c4:00:79:4b:ae:f8:a0:7e:1f:
         2c:1a:e1:b4:54:b5:60:9e:66:e0:35:8c:40:e2:e0:22:55:18:
         6f:b3:5d:d0:cc:b2:27:6d:ac:be:cf:e0:12:f6:d5:f6:91:b3:
         78:d9:00:15:1c:79:d2:9d:b2:39:f9:83:9b:17:b8:aa:57:ab:
         32:27:35:40:cd:1f:7f:73:77:24:ab:20:55:c1:04:db:6a:af:
         c2:f4:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:34 2025 by rpki-client