Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa
File:                     e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa (raw, json)
Hash identifier:          u/7xf/zXNnb6/K3s5DwJEqodNBdfcSvwraMu2Ot+J9Y=
Subject key identifier:   6F:86:09:82:9B:1E:E0:95:B3:61:44:0D:C3:35:E2:0D:8B:88:7E:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B371C15519ABB15014780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        76.28.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:37:1c:15:51:9a:bb:15:01:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=79b33596-2437-47d1-8745-9b1488611bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9f:99:99:25:a8:6a:b4:73:d4:e0:4c:04:25:
                    d8:2a:2b:ce:9f:f1:e1:a8:ad:7d:20:be:e5:a9:03:
                    4a:19:48:e7:88:1e:df:41:9d:bf:b3:2f:5e:e0:72:
                    28:06:2b:bd:d6:bb:73:ad:8e:81:ed:d2:52:7c:40:
                    b5:4d:8e:5e:91:b1:26:a6:12:4f:a4:8d:ad:82:a9:
                    29:5f:94:83:27:d0:2f:18:9a:87:8c:6e:1e:05:1e:
                    be:e6:cb:2e:da:e9:f6:d8:b5:ac:06:d3:ac:90:30:
                    1a:75:c8:af:a1:0e:21:ae:43:73:84:4d:05:e7:f3:
                    a7:cd:de:21:00:5e:81:9e:27:0a:97:ad:16:20:dd:
                    fa:25:f7:06:fa:d7:58:73:e8:0d:b3:91:e8:1f:07:
                    b1:a4:2e:69:48:f2:c3:b6:44:88:67:dc:70:3e:24:
                    34:66:6b:0e:f0:68:a7:14:58:47:f6:16:1d:d1:42:
                    64:18:45:6e:1a:93:19:72:2b:46:59:98:ed:cf:4b:
                    55:2b:e1:82:65:5f:3e:86:99:4f:ef:e9:3f:df:4b:
                    83:00:13:81:42:83:2c:a8:c3:b8:c9:8e:46:09:a5:
                    e9:16:2c:2d:ce:46:4e:d7:f6:b3:53:ae:b4:c3:e6:
                    45:69:36:90:e7:ee:8d:44:62:38:d2:f5:eb:c4:b7:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:86:09:82:9B:1E:E0:95:B3:61:44:0D:C3:35:E2:0D:8B:88:7E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:20:84:7a:d5:d8:14:c2:5a:79:6d:5c:fa:bb:e2:da:a9:7d:
         7e:f2:89:89:47:a8:86:8e:c0:31:5a:8a:7f:e4:16:83:b7:1c:
         36:e8:5a:d8:09:22:40:00:b1:c5:75:53:7b:9b:b1:75:d6:87:
         97:3a:6e:72:2f:d7:c6:a3:e3:4c:ff:be:ca:91:be:0f:cd:1d:
         54:a3:be:2b:ad:f0:4c:ee:68:e2:38:11:cb:fa:ea:95:b9:27:
         e3:bf:04:1e:a9:48:89:b1:14:c6:68:08:ef:7b:17:51:b4:84:
         13:91:18:c0:6c:b3:bd:30:24:19:48:29:86:5b:79:f2:8a:32:
         4d:b4:41:1f:a5:22:ee:60:79:27:cf:3e:a3:a4:76:0c:4d:51:
         9a:83:54:bf:68:ef:e7:83:42:45:1c:8c:c2:23:27:b9:33:24:
         28:c4:33:20:a6:0f:59:92:4e:07:39:70:eb:04:68:e8:22:8b:
         bb:b3:ab:87:3f:fa:23:21:92:68:29:2d:f9:71:fd:50:50:60:
         a0:17:22:8b:fa:0d:f3:0d:d7:05:e6:ac:31:aa:28:e3:f9:ef:
         3d:43:4f:03:a0:57:56:aa:ae:5a:2e:d7:7f:c0:6c:aa:84:5e:
         b7:bc:98:26:b1:d1:ce:6c:3a:dd:01:b9:5f:b9:75:cf:6c:df:
         d8:b7:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:13 2025 by rpki-client