Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa
File:                     dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa (raw, json)
Hash identifier:          T8P9wkx2AXQ+BeWEaIbPoqkM5bDsM4eO6pNs4//bOrk=
Subject key identifier:   06:A7:4E:2E:30:4F:B0:8A:61:7D:6A:81:66:F6:AF:EA:DD:90:9D:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BD2AF74B0FDBB5E549340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     20214
IP address blocks:        76.137.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:d2:af:74:b0:fd:bb:5e:54:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=72313f56-a753-4ba0-8a04-685ca0dc6507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:c4:64:80:d2:db:62:03:49:8e:18:3a:f6:
                    4a:81:5b:08:78:07:c4:ca:8b:3d:3d:96:64:8d:e7:
                    05:f1:b5:4b:79:63:32:82:68:07:f4:52:d2:c3:cc:
                    9c:9d:e8:8a:30:ac:66:8b:b2:87:96:ae:dd:55:be:
                    b0:e7:93:2a:bf:83:27:76:2d:f6:c9:ae:19:c7:cc:
                    e2:39:8a:bf:7b:81:39:b2:0f:92:5b:2a:f5:fd:57:
                    71:64:68:51:54:1b:a8:9b:9e:2a:dd:b9:35:3a:b9:
                    2e:9b:ec:1f:43:70:44:21:52:c3:6c:64:fa:20:91:
                    c1:22:6a:30:42:52:32:f2:dc:f2:1b:cb:3a:b4:87:
                    ad:3f:63:06:78:a0:af:24:51:0a:76:e6:cd:b5:7e:
                    f0:2b:d6:21:7f:de:22:d1:bb:47:53:b8:72:69:23:
                    8b:62:d1:b2:24:6a:9b:cc:d1:4b:f8:5c:7e:42:44:
                    ba:cd:32:b1:e5:c9:da:db:8e:ac:c5:c7:e5:93:40:
                    d6:96:dc:06:2b:bc:86:3e:b1:59:23:d9:cc:5f:9a:
                    28:1e:e4:ff:59:51:a0:c6:f3:e1:cb:f4:f4:3f:6a:
                    6b:35:d6:4e:0c:7c:e7:fa:1e:73:44:cc:62:ea:24:
                    9e:ae:cf:81:0b:74:39:74:c5:37:46:a0:6d:b8:97:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:4E:2E:30:4F:B0:8A:61:7D:6A:81:66:F6:AF:EA:DD:90:9D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.137.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:53:c8:dc:9f:51:11:e2:c8:e2:14:2d:84:89:3b:d2:78:de:
         6b:06:7c:96:59:04:18:e5:5b:48:8f:b3:9f:15:44:25:d7:02:
         e7:8a:1c:aa:08:e9:33:95:fe:ae:35:76:77:a2:2e:0f:e0:da:
         0a:5c:96:4a:93:f6:0d:30:08:fe:4a:86:3a:3a:65:06:36:05:
         01:92:b1:aa:25:34:4a:7c:c9:2a:f1:7c:f5:c6:90:8b:06:53:
         0d:05:8e:6d:f1:fe:40:1c:e5:be:74:a5:20:87:90:29:4e:99:
         62:3f:00:a3:2a:f9:df:d5:0c:83:4b:74:83:26:10:d8:97:5c:
         f9:f3:c9:9f:5a:f1:8b:fc:16:cd:b8:f8:45:23:26:34:1b:b7:
         c6:fd:f6:b2:79:27:7c:5c:47:c1:43:d8:d9:28:b5:76:27:8f:
         cf:b2:c2:b4:40:50:15:da:c4:be:d8:cf:bd:5f:c9:2c:99:12:
         4a:d5:0a:84:c8:54:c7:da:ca:c9:34:ae:ff:07:ea:48:1b:9f:
         dc:f1:cb:d9:cc:c9:d0:e4:f8:e9:d2:53:19:4c:32:8d:c7:ab:
         97:d7:c0:ee:3c:a4:71:05:6e:e3:a4:58:1e:ee:71:94:b5:ec:
         30:31:15:b8:eb:22:ef:3d:a8:11:dc:5f:97:50:0b:b7:26:71:
         14:2a:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:19 2025 by rpki-client