Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33eefaa-bcd2-31de-82b0-3a9dddcc0d37.roa
File:                     b33eefaa-bcd2-31de-82b0-3a9dddcc0d37.roa (raw, json)
Hash identifier:          qCW9AntQpYaLDuVU0205xPfRFhgN2gLxYN8PdhHaI58=
Subject key identifier:   9A:2D:DA:52:F8:98:08:02:49:82:79:FA:1D:D0:2C:AC:D3:D4:A4:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1B1424A1D15EAF896FE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33eefaa-bcd2-31de-82b0-3a9dddcc0d37.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        76.102.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:b1:42:4a:1d:15:ea:f8:96:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=bb1e47a1-0fbb-4d24-bb64-9ccb5d2d04c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8e:48:fb:62:7d:3f:70:00:25:e9:ea:1d:ec:
                    1d:26:77:19:7d:b5:98:7f:4d:72:ed:09:dd:6e:c3:
                    19:a6:53:6b:32:75:26:38:0d:48:7b:51:72:59:ff:
                    92:c1:56:a3:f5:89:a9:9a:7f:4e:f3:b8:70:6a:9b:
                    38:bc:b5:0f:ef:f5:03:0d:2b:54:72:24:2f:d2:f1:
                    ff:3d:64:a1:03:4a:b3:1b:7c:42:8e:66:c2:b0:44:
                    6c:fd:50:2c:7e:df:e3:30:ce:6a:e3:ba:8c:28:8f:
                    f2:97:9d:fd:3d:af:ef:69:52:0f:da:af:ac:3e:e2:
                    cb:74:96:2a:1f:d8:31:7e:b2:03:91:55:01:36:26:
                    2d:05:16:11:74:22:dd:3f:53:9a:08:97:15:9d:d7:
                    50:59:ce:03:ab:80:ce:58:0d:19:14:b9:eb:6a:39:
                    26:eb:78:f8:8b:d2:c0:8e:89:1a:66:fe:6a:de:bd:
                    97:97:0c:3e:d2:5c:c6:39:79:02:5d:0f:63:de:f7:
                    0b:1b:c8:a4:2a:bb:38:62:d0:1b:bd:e5:14:57:be:
                    09:7b:5c:d3:72:e8:10:e2:3b:9b:1f:6f:11:33:f5:
                    d9:c2:6c:9b:a1:60:7f:89:ba:b3:15:7b:e0:ee:0e:
                    df:18:89:35:ad:bc:3d:57:e1:4b:cf:8a:20:52:03:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:DA:52:F8:98:08:02:49:82:79:FA:1D:D0:2C:AC:D3:D4:A4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b33eefaa-bcd2-31de-82b0-3a9dddcc0d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:db:95:73:0f:5d:ec:91:1f:dc:5c:69:2a:ec:dc:77:f9:30:
         5f:5e:a8:f6:c9:a4:eb:fc:21:67:68:a3:d1:2d:c5:fc:6c:1f:
         a1:a1:68:3f:32:52:dc:f9:7c:84:64:39:35:81:ba:29:48:cd:
         b1:31:41:b6:f2:c2:6e:a9:f8:68:95:7e:7f:13:01:de:56:b6:
         67:8a:91:0c:e7:74:b5:0c:96:36:8c:a5:da:e6:43:17:81:8b:
         63:d0:d2:a1:f5:27:e4:dd:27:05:45:0f:68:c8:09:78:7b:f8:
         42:53:08:73:54:19:15:77:70:f5:a2:a4:b2:7d:c0:6d:37:67:
         48:e2:f6:57:1a:0f:55:82:6b:81:58:89:f8:54:2b:83:0a:04:
         8f:20:ba:bb:7c:b1:e6:9b:c1:dd:a0:bd:de:b2:2e:09:81:a8:
         f4:a5:8c:e8:9d:4e:89:52:45:21:3d:5e:70:98:11:4f:ca:14:
         21:2a:71:cc:0d:94:09:86:c9:97:e6:1d:df:27:3f:c4:7c:6d:
         7a:ba:5d:72:7e:03:52:f5:f9:15:2b:d4:37:99:16:f6:62:96:
         09:58:84:09:75:60:c2:84:43:51:90:0c:09:87:60:07:7f:b8:
         b9:f1:17:a6:2b:c7:a3:2d:60:33:70:fe:06:7a:c5:6c:6c:81:
         9c:49:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:12 2025 by rpki-client