Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6077f6c-de73-33c2-9870-ea2a4fe64ba2.roa
File:                     f6077f6c-de73-33c2-9870-ea2a4fe64ba2.roa (raw, json)
Hash identifier:          bnh0p1kVNNLSZxe4UnaH/TDWNWqkssXYGsSVQ7SLEA4=
Subject key identifier:   2D:22:A8:7A:17:70:8F:20:E7:60:92:43:46:84:12:05:AC:2C:82:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8703914B9EC8725A83B10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6077f6c-de73-33c2-9870-ea2a4fe64ba2.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        73.100.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:70:39:14:b9:ec:87:25:a8:3b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=20fd6cdb-b686-4c45-8ed1-892bba701fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:dd:6f:2b:a8:ed:8b:e9:98:b2:b5:3a:41:
                    d8:97:fa:21:e6:c4:76:9d:db:3f:9b:46:8d:c9:cd:
                    20:35:f3:f0:b9:0e:a3:60:5a:16:ff:36:52:da:70:
                    6a:52:c6:c8:0b:c3:81:e6:20:0d:a5:a2:7d:bd:59:
                    c3:22:45:15:d3:94:4e:2d:e9:9b:84:0a:04:4c:9d:
                    75:31:ae:52:ff:b0:97:fd:cf:87:d7:c6:08:f7:7f:
                    f9:56:d3:17:09:93:c5:47:92:ea:77:de:2d:26:cf:
                    69:fb:9e:4a:1e:a4:f1:ad:d7:41:e7:8c:1a:ad:3a:
                    18:72:97:f9:cd:b9:09:8d:db:dc:28:f1:be:07:0a:
                    23:45:71:07:ed:fb:ef:96:76:2e:67:98:f5:df:4f:
                    bd:a7:06:61:76:42:c7:8f:ce:5d:3e:4b:3d:a8:b4:
                    cb:02:7a:27:6f:b0:57:3c:50:3b:d5:ba:8e:1b:33:
                    35:4d:9c:ca:60:aa:5c:8c:06:ab:dc:2f:8b:17:84:
                    76:23:a1:23:69:6b:c2:c3:71:d3:47:e0:63:51:79:
                    6c:4e:36:b6:17:1e:11:45:f6:ad:69:93:fa:e7:15:
                    89:65:54:b6:6e:60:96:9e:10:80:eb:57:82:ad:c0:
                    bf:a3:cb:e1:90:e4:df:09:1a:69:9f:a1:71:89:c9:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:A8:7A:17:70:8F:20:E7:60:92:43:46:84:12:05:AC:2C:82:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6077f6c-de73-33c2-9870-ea2a4fe64ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:f6:6f:ab:55:ab:72:67:d1:21:38:f3:1f:d0:26:fd:2a:
         92:68:ae:d5:97:5b:a5:d1:06:d7:82:44:e6:d9:97:ec:c9:b8:
         ce:55:1e:23:55:fa:ee:11:76:62:65:d4:53:90:41:3c:02:67:
         17:49:d8:16:e7:c8:8c:3f:35:f8:17:82:98:bd:0a:0b:50:e6:
         31:c1:e5:30:5d:c6:04:a6:e3:fa:db:e6:2d:1a:d2:ce:f2:48:
         27:59:4c:44:c2:77:e8:ef:f8:84:c1:96:28:31:2b:79:31:8a:
         d2:da:63:3a:7e:9e:1f:28:1d:f9:52:0f:aa:24:a0:d0:97:98:
         3e:1e:ac:67:f2:57:e3:3a:8d:80:28:50:c6:03:d5:66:55:1a:
         2c:14:0a:59:9d:c0:29:c8:12:df:5c:99:6d:7f:ba:04:ad:b6:
         d9:ee:07:bc:59:66:35:27:a6:84:f8:75:a0:b0:ad:38:4d:0a:
         b0:35:0c:a6:8f:ba:77:99:8d:30:fd:52:d9:0f:19:f0:5f:9c:
         73:38:15:b1:f0:56:d0:c4:7c:68:5c:1c:e7:02:c9:89:18:d3:
         d4:21:cc:b2:37:f8:8a:a6:ae:9e:b7:7e:02:34:ac:7b:a2:0d:
         bf:fa:ef:f7:54:95:50:22:e6:52:e4:81:a8:25:18:20:98:a4:
         c1:bc:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:56 2025 by rpki-client