Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa
File:                     e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa (raw, json)
Hash identifier:          HQFDSXr4KWtlS8td6HLrO8neNC5iBlQnQV48sUGDBhA=
Subject key identifier:   6C:04:98:ED:54:90:F3:CD:26:3A:7D:89:BC:AA:9C:4E:24:27:BC:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F767DF5BFA08B33C2D27E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        76.28.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:67:df:5b:fa:08:b3:3c:2d:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=febe7772-2c6b-4a79-acea-bd1597d718ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:81:4a:db:32:25:4f:4d:43:e2:e5:15:34:7f:
                    44:98:3f:73:a9:75:97:9d:93:50:bd:d1:e4:fa:50:
                    f6:a5:ff:3e:da:40:40:36:9e:3d:e0:f1:86:a6:58:
                    3a:82:80:76:bd:fe:4a:a1:5d:a7:04:39:2a:ef:88:
                    2d:8e:fd:39:2b:4c:1c:05:c5:0e:8e:63:fa:cb:f2:
                    59:31:de:21:56:a2:25:db:28:50:fe:16:65:ed:ed:
                    f5:ac:1a:2d:92:25:3d:fb:de:0a:57:96:e8:d4:2b:
                    ed:9e:5a:02:ba:1e:0c:da:23:b6:e6:b7:a1:25:85:
                    ab:b7:a5:35:a2:67:b3:ba:26:d3:33:4c:e4:98:95:
                    aa:8f:ad:98:c5:71:5f:6f:b2:aa:b2:e2:4f:c1:70:
                    9f:49:9e:09:b7:e4:a5:71:55:2a:a5:fb:e1:31:1c:
                    1b:df:f2:0c:74:9c:09:cd:f9:89:41:61:bf:e4:fd:
                    1d:15:66:7d:52:87:96:45:ba:21:d2:94:9e:24:15:
                    e3:e5:66:ef:a9:fd:fb:4b:48:e3:65:49:d6:85:3a:
                    a8:cb:dd:48:45:c2:ff:e8:28:66:11:bf:75:17:ee:
                    91:55:fb:ef:09:98:cb:fb:ce:92:80:2b:6b:30:b3:
                    40:11:ed:e8:2e:13:9c:8b:26:20:38:48:57:9c:91:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:98:ED:54:90:F3:CD:26:3A:7D:89:BC:AA:9C:4E:24:27:BC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9827a57-cc0a-3c16-8828-4e2cd78bbe76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:21:27:c0:47:3b:bb:8d:63:67:0f:2c:ea:10:9f:2f:ae:d4:
         5f:d9:e7:53:9f:86:b2:5b:a6:75:21:c3:75:c3:2c:da:a8:10:
         ac:4c:ab:93:b0:52:1e:ea:eb:4f:5e:2a:87:5b:da:04:48:f8:
         b6:13:df:d5:da:be:49:49:1b:10:78:b4:11:5a:37:52:59:8c:
         7b:88:07:09:81:f9:53:d4:23:b7:ba:52:8f:7f:fa:59:7f:d1:
         ab:ed:bb:eb:49:85:d7:59:b3:97:d5:8b:ba:9d:14:7b:49:3d:
         cb:b1:b6:65:22:33:d5:85:ba:c1:8c:a0:a1:1f:ba:81:9a:7b:
         99:8c:ad:8a:ce:34:5a:9a:db:54:f8:21:4e:82:b5:dc:00:c0:
         00:9b:3a:37:f4:8a:cd:3e:49:27:dd:4d:54:96:5a:5f:ab:cd:
         ce:6b:43:d7:27:0c:ea:1a:df:ad:3f:b2:91:bd:e7:9e:be:91:
         be:3c:b4:8c:48:1c:af:09:7c:62:45:9b:f4:61:c5:2a:d8:f6:
         79:81:48:bd:ec:a4:ed:65:ca:ec:63:1e:45:e0:c4:60:00:a7:
         4e:b5:83:6c:de:2a:33:cf:5e:f0:20:78:c9:da:2d:83:68:70:
         42:48:14:23:fc:fc:71:5b:27:e8:a4:bd:31:8c:60:c1:31:9e:
         66:2f:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:58:20 2025 by rpki-client