Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90eb57f-ccf7-3768-8cf4-57c0e4d7266f.roa
File:                     d90eb57f-ccf7-3768-8cf4-57c0e4d7266f.roa (raw, json)
Hash identifier:          R7bWf+DdmSunQEEUAcP+E4P6+jRpicM8P0tcZYXm5VI=
Subject key identifier:   8C:98:9E:13:81:4D:BF:B7:FF:69:63:BB:36:C1:4B:84:3F:A8:D0:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DFBEF82E69148ECB96800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90eb57f-ccf7-3768-8cf4-57c0e4d7266f.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        70.90.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:fb:ef:82:e6:91:48:ec:b9:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=a9eaaed9-5a81-4bc2-8112-7b59a3732f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:5f:3a:17:e8:49:35:74:f1:86:d1:f6:c2:
                    53:14:42:a7:ab:cc:d6:47:df:aa:60:f3:e8:31:d8:
                    77:7e:3a:3d:4a:a9:37:c1:e6:6d:f5:aa:54:d1:bc:
                    7e:6a:a2:52:29:cb:fe:92:e6:e2:19:f8:1e:3c:65:
                    94:fc:9a:5b:f3:76:85:d3:18:de:c5:d3:1d:2c:3a:
                    7a:3e:2d:5f:7a:18:97:c0:1e:b9:b7:c7:22:aa:61:
                    77:51:f8:02:0b:61:b6:3e:f2:60:e7:56:9c:29:bc:
                    58:59:42:6f:c4:c5:5f:f9:c7:23:ee:b6:f7:e1:c5:
                    6b:0c:79:ac:d9:41:08:5f:80:18:ad:ea:cb:b5:bb:
                    56:51:c1:e6:e1:4b:d9:07:35:f0:3b:97:56:b6:b1:
                    dd:42:d0:9c:8e:c4:99:4e:6e:e5:43:78:e1:3f:fe:
                    e8:b4:a0:ae:d2:86:2e:8b:12:e8:e5:74:ba:d1:3b:
                    80:b6:77:3e:f6:60:f8:10:06:bb:06:ed:49:81:99:
                    3c:93:8c:b0:23:9b:ca:29:be:5f:37:64:e6:ac:bf:
                    7f:f3:70:70:e9:14:56:d0:d0:79:de:ea:8f:78:6f:
                    11:cb:a9:61:78:9c:02:10:30:b8:ea:95:4c:bf:e6:
                    15:2a:d6:a7:61:52:d2:bc:78:fc:09:df:de:ed:d3:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:9E:13:81:4D:BF:B7:FF:69:63:BB:36:C1:4B:84:3F:A8:D0:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90eb57f-ccf7-3768-8cf4-57c0e4d7266f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.90.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:cb:a1:8f:aa:9b:b0:77:8d:70:b3:82:ca:9d:a0:d1:56:d5:
         6d:07:a0:09:b1:6b:b7:af:03:49:51:59:ee:59:74:2d:4e:37:
         a2:12:70:a4:8c:a1:23:28:51:2b:e7:e4:b4:88:61:7f:f1:d0:
         0c:9c:d8:29:22:e7:bc:b3:56:57:7b:25:66:cc:f5:05:5d:7d:
         d5:cd:08:2a:93:5c:0d:03:68:d2:fe:ee:eb:0a:97:b5:d1:0e:
         b8:45:81:f5:48:6f:6b:5e:5c:5c:52:5d:0e:51:e4:89:7e:91:
         9b:65:fc:10:ae:29:2a:09:56:3b:49:9e:ff:ef:c0:86:7e:b3:
         7e:c5:6d:3e:d6:51:2c:03:79:c2:f1:e3:e6:ac:24:00:de:e9:
         fd:5f:88:1c:19:22:05:b0:3f:c6:fe:bc:63:0b:17:a6:34:55:
         04:15:54:d6:e8:bb:c6:da:4b:ca:53:4a:79:b2:46:ca:1c:3b:
         ee:f1:4d:f4:fa:e2:0a:78:44:a3:10:58:41:91:6c:76:e4:64:
         a2:b7:d7:6b:1a:ef:dd:dc:f7:ce:0d:16:41:57:b0:34:50:e1:
         4a:55:7d:69:2f:aa:94:ce:23:ca:22:27:66:9a:a4:52:b2:dc:
         38:65:c7:8a:8c:2c:43:cd:19:67:bf:b4:b8:8c:30:61:6c:11:
         ac:4d:b3:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebfvvguaRSOy5aAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YTllYWFlZDktNWE4MS00YmMyLTgxMTItN2I1OWEzNzMyZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz1fOhfoSTV08YbR9sJTFEKnq8zWR9+qYPPo
Mdh3fjo9Sqk3weZt9apU0bx+aqJSKcv+kubiGfgePGWU/Jpb83aF0xjexdMdLDp6
Pi1fehiXwB65t8ciqmF3UfgCC2G2PvJg51acKbxYWUJvxMVf+ccj7rb34cVrDHms
2UEIX4AYrerLtbtWUcHm4UvZBzXwO5dWtrHdQtCcjsSZTm7lQ3jhP/7otKCu0oYu
ixLo5XS60TuAtnc+9mD4EAa7Bu1JgZk8k4ywI5vKKb5fN2TmrL9/83Bw6RRW0NB5
3uqPeG8Ry6lheJwCEDC46pVMv+YVKtanYVLSvHj8Cd/e7dM7HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIyYnhOBTb+3/2ljuzbBS4Q/qNB+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwZWI1N2YtY2NmNy0z
NzY4LThjZjQtNTdjMGU0ZDcyNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlqUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMvLoY+qm7B3jXCzgsqdoNFW1W0HoAmxa7evA0lRWe5ZdC1ON6IScKSM
oSMoUSvn5LSIYX/x0Ayc2Cki57yzVld7JWbM9QVdfdXNCCqTXA0DaNL+7usKl7XR
DrhFgfVIb2teXFxSXQ5R5Il+kZtl/BCuKSoJVjtJnv/vwIZ+s37FbT7WUSwDecLx
4+asJADe6f1fiBwZIgWwP8b+vGMLF6Y0VQQVVNbou8baS8pTSnmyRsocO+7xTfT6
4gp4RKMQWEGRbHbkZKK312sa793c984NFkFXsDRQ4UpVfWkvqpTOI8oiJ2aapFKy
3Dhlx4qMLEPNGWe/tLiMMGFsEaxNsy0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:53 2025 by rpki-client