Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9449e26-93d6-3eef-ab88-09026c024f16.roa
File:                     d9449e26-93d6-3eef-ab88-09026c024f16.roa (raw, json)
Hash identifier:          F1ZN90uqW9qaj/IbpAXR6o6wODeDogmu4DjUa50EWv8=
Subject key identifier:   FA:B6:B1:09:0B:D2:03:A1:91:26:EF:94:2A:D3:33:BC:FD:AF:15:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7C81422561542D7D74B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9449e26-93d6-3eef-ab88-09026c024f16.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        76.139.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:c8:14:22:56:15:42:d7:d7:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=bd42d349-5da8-4b3b-ade4-2a7610745075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:f5:c2:35:c2:6d:57:23:16:37:74:a6:36:
                    3d:53:fd:4a:64:70:4e:82:7a:8c:04:83:ef:ef:b5:
                    bd:d7:74:e1:36:1f:37:3b:01:01:8d:b2:4d:0a:fe:
                    e0:2b:7b:07:69:95:57:f5:f8:3e:2d:b5:f7:fb:1c:
                    d3:76:a0:a3:99:cc:20:4b:9f:83:ad:25:62:0f:f5:
                    e3:da:68:5f:ff:a3:83:d8:d5:84:e7:f8:8f:8f:e1:
                    b7:ac:18:3e:46:21:f9:77:c0:06:a2:90:82:05:78:
                    65:7e:51:f3:3a:cf:96:7f:4b:a7:b1:04:6c:91:bb:
                    61:d2:9c:cf:72:76:10:72:6b:c1:83:08:83:17:b0:
                    5a:c2:9c:cf:d8:c3:ec:c5:1e:3d:91:17:6c:50:0f:
                    82:87:7b:d7:a4:30:56:52:fa:31:3f:99:0a:7c:cf:
                    27:bc:d4:9f:97:74:0f:53:06:ca:8b:fc:f1:e7:11:
                    aa:0d:a9:82:65:65:1f:48:83:5a:07:a8:b4:da:fd:
                    5d:b5:ab:c0:6b:04:e4:57:7c:a6:b3:8c:77:43:47:
                    14:b6:e1:58:93:9a:5d:d9:ab:8f:06:41:a8:95:09:
                    66:cc:5c:b2:85:11:3a:c3:64:66:31:20:26:4d:ab:
                    30:01:b4:d9:04:34:42:e9:c8:5f:6e:63:ba:41:51:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B6:B1:09:0B:D2:03:A1:91:26:EF:94:2A:D3:33:BC:FD:AF:15:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9449e26-93d6-3eef-ab88-09026c024f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:98:1c:ba:55:40:59:08:7f:a4:72:ed:eb:e8:3d:b5:3e:
         04:52:61:3d:64:e7:22:d5:31:62:37:72:41:73:85:d9:04:50:
         dc:e8:bb:df:83:68:70:86:66:82:8c:e8:18:1f:98:c1:a4:19:
         ec:4a:6e:b2:fe:00:74:9c:f0:94:3a:5d:0f:08:d4:0a:95:d9:
         79:ff:7e:8a:0e:6a:ec:24:5f:43:ad:1e:2d:6a:56:55:55:e9:
         e2:4c:37:ef:21:34:ff:6c:10:a0:5d:81:ca:84:13:39:27:a4:
         e3:09:15:78:cf:37:be:4e:ea:48:04:63:19:4c:41:ec:ec:c3:
         8a:e6:e6:6f:1d:1e:70:e4:a0:aa:44:ec:43:d4:2a:c5:8e:20:
         22:78:36:d4:14:71:9a:b3:7c:2c:84:7c:ce:75:a6:74:fb:d7:
         a5:a3:d3:7c:5b:d8:bd:2f:66:6f:c7:82:e2:b2:ff:6a:e5:3f:
         15:71:5f:d5:a5:e3:d5:41:30:de:a8:b2:a5:78:29:3c:40:81:
         b9:20:26:48:1e:78:75:bd:84:90:28:9d:45:79:b2:04:40:c2:
         91:fe:0c:09:0d:e7:5f:f4:af:12:07:b1:54:76:58:a1:41:be:
         38:3f:6b:07:a5:46:5a:d5:2f:1f:29:3a:8d:48:fa:b6:29:28:
         78:d3:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:40 2025 by rpki-client