Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eca23e0c-41e6-38c0-8744-ee4250da4076.roa
File:                     eca23e0c-41e6-38c0-8744-ee4250da4076.roa (raw, json)
Hash identifier:          iGG6HgBtGtX5I7Ud4fiV1FbrRsGQVTZSlkZ/SSjleyo=
Subject key identifier:   22:4F:98:92:BA:B0:27:7D:28:8C:E4:C9:87:E6:7B:CA:CB:BD:30:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6E246C6366930C523AF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eca23e0c-41e6-38c0-8744-ee4250da4076.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.27.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:e2:46:c6:36:69:30:c5:23:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=33a04e57-14f7-4908-b1f1-45dece9294a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:b1:91:e1:5a:4c:f2:0f:0a:c4:c3:3d:34:
                    e9:ce:89:d8:f0:f4:1d:38:58:08:81:d1:7b:e0:e3:
                    aa:65:3c:32:21:9c:c3:1c:40:b4:e7:d9:28:cb:9d:
                    2a:9e:14:22:b3:bf:52:e8:aa:32:2d:60:b8:5f:fa:
                    8e:4e:b8:b3:1e:32:21:20:03:aa:63:db:c4:10:0e:
                    57:66:c4:16:03:3b:cd:e1:67:c7:90:70:f6:ca:cb:
                    52:f3:39:6d:36:c1:07:9e:0a:fb:8b:21:e2:95:1a:
                    4b:8b:13:4d:6a:63:82:c1:1b:e4:56:4f:36:46:0f:
                    3f:a9:01:89:66:75:db:e2:f6:e2:0a:c1:c7:03:6d:
                    10:48:66:1d:63:18:2d:c2:47:a3:ff:ad:c4:49:f4:
                    5e:8a:a0:07:2b:a2:ac:c8:53:2f:9d:b0:11:5b:17:
                    23:4e:2c:e0:b0:45:a3:96:b3:95:1c:06:f4:c3:17:
                    1e:a6:45:34:9d:34:3f:fb:35:1f:31:ea:6b:79:9d:
                    b6:eb:a9:81:8d:24:ee:d3:b7:62:18:32:18:d7:ed:
                    f7:60:7e:e0:98:14:c1:fb:18:f2:85:c4:e9:d3:27:
                    4d:99:6d:0a:c2:8b:08:4e:2c:36:b4:99:06:52:90:
                    13:48:0f:56:26:f2:1a:65:a4:0b:c1:ac:07:49:f9:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:98:92:BA:B0:27:7D:28:8C:E4:C9:87:E6:7B:CA:CB:BD:30:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eca23e0c-41e6-38c0-8744-ee4250da4076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.27.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:67:73:ec:3f:f0:9a:df:5f:f7:3f:91:11:e3:64:d7:4d:
         1e:a5:f3:7a:78:2f:f2:53:21:6b:63:2a:ef:35:47:08:b0:f6:
         70:62:06:7d:db:06:79:41:cc:05:ff:32:54:b7:41:54:87:ec:
         50:3c:90:35:fb:4c:02:45:57:fa:a2:88:af:f8:01:08:1b:86:
         3f:fc:4f:6c:ab:57:69:7f:cf:95:1c:ea:08:42:0b:e8:26:f4:
         fa:0b:47:c0:88:f5:d1:56:a8:bc:8e:37:ce:88:86:4d:a8:38:
         c8:19:17:fc:41:f9:ca:bd:d3:b4:2d:1c:2a:37:c5:b9:5b:a4:
         c2:7a:51:50:61:d4:81:50:3f:d4:3a:98:3c:07:03:80:83:54:
         ab:6e:42:2e:b6:42:4e:8a:c4:38:eb:e5:69:85:17:fe:1f:d0:
         41:44:8c:26:8c:15:08:4e:da:e8:77:27:3f:a3:fe:b8:5f:31:
         76:71:f4:3d:f5:61:e5:24:f2:f1:1d:75:bb:12:71:cd:dc:1b:
         ac:1b:ca:27:85:45:76:4a:24:62:51:c5:b6:d0:d5:cb:c6:d5:
         a5:00:db:c0:3a:4b:77:bb:c3:45:ad:bd:c7:f1:50:75:d7:d3:
         b5:7b:de:d9:1c:8e:dc:9b:d1:21:bb:67:f2:60:d2:ac:87:79:
         42:01:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:30 2025 by rpki-client