Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb42b10d-5e15-34d4-a512-58cf345774ad.roa
File:                     eb42b10d-5e15-34d4-a512-58cf345774ad.roa (raw, json)
Hash identifier:          4jT4HZGp0E0tA4LWIq4plHF6D/pLwoLaVBg62gfOEiU=
Subject key identifier:   70:59:12:E6:96:83:D2:CE:5B:81:96:41:7D:05:6F:38:AF:5C:09:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B1F644F19B3F286C97416540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb42b10d-5e15-34d4-a512-58cf345774ad.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        96.96.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:44:f1:9b:3f:28:6c:97:41:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=41f0ae5a-deee-49ea-9c74-44c7859de70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:0b:d2:3b:49:ef:6a:81:46:a6:d7:83:7f:
                    b0:86:26:e1:24:2b:c4:a7:6e:44:b1:06:30:ae:17:
                    a6:eb:80:40:70:1a:3a:e8:80:5d:72:d0:06:9e:c7:
                    2d:ea:1f:64:cd:32:16:7c:67:fd:b4:9d:b4:3d:43:
                    b3:0e:c2:4e:31:19:ea:4f:a0:8c:04:c9:dd:18:01:
                    2a:47:e6:c9:be:b0:4e:70:0c:ad:4c:d9:03:2b:de:
                    f0:fb:72:3f:4f:a4:3c:28:13:48:8e:4a:57:c4:7c:
                    08:60:05:29:1e:d5:af:55:b1:a8:f0:0b:93:0e:7f:
                    60:9b:20:17:ff:5c:e1:65:19:c1:8c:7b:87:f8:07:
                    26:3d:f5:80:67:ed:e5:b5:96:79:c8:a6:8e:3e:88:
                    56:f1:b4:c8:4a:7c:68:10:2a:6f:5b:4f:74:d8:27:
                    1f:77:93:71:90:57:80:77:47:b0:f9:ed:3a:2a:4b:
                    27:62:da:1d:cf:ce:3c:27:b0:ba:d2:6a:12:80:55:
                    1a:e0:79:c6:fb:1e:e2:85:f7:3b:81:93:ff:f7:f4:
                    62:2e:a5:73:12:5c:28:cf:54:6f:7c:0d:d2:31:93:
                    be:36:3a:eb:90:97:ec:c3:45:8c:23:14:d9:19:e9:
                    e3:2c:a4:fa:2b:fb:7f:11:96:db:8e:12:04:34:1f:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:12:E6:96:83:D2:CE:5B:81:96:41:7D:05:6F:38:AF:5C:09:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb42b10d-5e15-34d4-a512-58cf345774ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.96.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:79:44:0f:fe:b1:fd:39:2e:06:6d:9a:ce:15:69:2a:86:59:
         dd:13:7c:4d:0c:f7:68:ae:23:f7:6c:92:24:92:cd:bc:76:9d:
         58:1a:ca:4b:ba:a7:b4:8d:f7:a2:1a:85:8c:c6:02:a2:03:9f:
         2d:c7:6a:50:b5:ea:20:dc:40:d8:62:a5:e4:7f:c1:d1:bc:e5:
         4a:2c:9b:e8:4c:fa:35:d8:a6:b5:a7:5a:39:f3:77:f3:71:0b:
         69:61:b1:21:5a:fd:13:d3:19:50:b0:0f:96:3e:08:83:23:1d:
         64:97:f4:15:22:fb:d5:35:e2:87:c1:b9:2b:51:e4:c1:d8:a4:
         1d:3e:69:5d:96:a3:2e:1b:a6:cb:36:da:84:14:12:26:b2:76:
         1c:d7:41:c8:a7:bf:ff:33:b3:73:be:b7:f6:3b:74:75:3e:79:
         b4:06:7f:13:67:f3:9f:01:85:ca:9e:b8:80:96:08:81:14:42:
         39:4f:9c:03:5c:e3:b2:72:07:0a:58:83:6d:64:f5:b4:17:13:
         06:f7:47:3a:6b:75:dd:8b:27:a7:94:27:9b:c9:0f:b4:41:76:
         bf:6f:51:95:ed:32:e2:46:d6:f4:65:4a:a9:0c:6b:90:e5:21:
         1b:71:b7:9a:8f:37:cf:55:4c:66:b8:3f:44:ac:20:95:bc:b7:
         75:cf:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:41 2025 by rpki-client