Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02080763-c4c6-38fe-9474-41e7d9f11c65.roa
File:                     02080763-c4c6-38fe-9474-41e7d9f11c65.roa (raw, json)
Hash identifier:          ++T81WTJxndo91zow/9A0jIlzQsgIKo+8MnUbmfj/Kw=
Subject key identifier:   E2:B0:EB:4C:F4:1E:FE:A5:25:0F:73:6F:24:CC:C6:BB:B2:ED:01:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA510A0EC8C0915079ADE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02080763-c4c6-38fe-9474-41e7d9f11c65.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        96.110.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:10:a0:ec:8c:09:15:07:9a:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=49a4300b-27da-49b1-92f8-8c1db89d67a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:74:a5:6f:3d:e6:c6:1e:69:88:7c:0e:5c:
                    f8:ef:fc:89:97:62:e0:ee:37:27:13:1c:53:6e:d1:
                    2d:81:c7:b8:da:74:80:85:42:cf:32:0e:20:de:f2:
                    76:28:d8:2f:77:e2:ef:4a:69:25:51:8c:87:c6:26:
                    a6:b1:97:5a:40:09:d0:cc:77:da:ce:3c:e2:53:f8:
                    5c:a1:e6:c3:57:c9:66:3a:86:e7:c6:bf:8e:5b:3a:
                    70:c0:13:e1:25:ad:d1:4d:97:ed:48:f4:c0:58:5c:
                    74:75:fe:46:5c:a7:ec:53:bb:82:c3:c5:bb:e4:54:
                    0e:ff:4c:fc:f7:4e:82:22:01:65:e2:0e:f2:77:f9:
                    6a:04:ac:b0:a9:9f:ef:fe:14:13:ae:30:41:23:b9:
                    54:ba:64:3d:03:28:a6:b3:89:75:04:03:36:d1:4b:
                    d2:0b:69:82:18:ce:6b:0f:0f:a3:cb:ac:ac:65:7e:
                    d1:ea:4a:14:a7:42:3c:e1:f2:46:3c:a0:4c:1a:9f:
                    15:80:c6:3b:36:d3:d7:c4:49:5d:83:9e:9e:f9:1d:
                    b5:03:26:3d:03:40:2b:43:3b:65:b2:63:ef:e9:06:
                    13:54:c6:5f:48:bc:4b:fd:4b:ec:2f:96:ac:27:a0:
                    d4:ca:21:8c:ee:76:e8:2b:10:14:51:d6:c4:cc:48:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:EB:4C:F4:1E:FE:A5:25:0F:73:6F:24:CC:C6:BB:B2:ED:01:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02080763-c4c6-38fe-9474-41e7d9f11c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:21:e2:cb:ba:7e:73:ad:ac:c4:59:c9:41:c3:54:6d:ef:
         5c:cc:be:cc:06:5c:1d:74:98:88:57:9a:b7:43:23:ef:12:79:
         bf:dd:e2:25:16:bd:d0:82:0b:13:43:e8:eb:5b:d2:ad:a9:c9:
         b4:3c:69:00:55:81:85:a9:98:67:38:eb:4d:11:de:83:82:75:
         5e:1a:da:12:dd:66:1e:7a:08:3f:0c:ff:59:7b:9f:4e:7a:a1:
         c8:19:8a:b1:ab:c8:c3:fa:d2:a1:e5:bd:7d:d5:bf:9c:df:d8:
         7e:c9:b7:5f:17:6d:ed:97:6b:76:dd:8b:a9:23:7b:82:e7:22:
         32:9b:f5:cf:76:f7:21:c0:12:41:03:89:5e:b8:4d:07:d1:10:
         96:ac:d6:42:2f:bc:65:b3:0e:9a:e2:1e:52:0a:0f:a4:bb:ba:
         35:38:77:6e:5f:2e:44:6c:68:d3:e2:95:c0:18:df:e2:5e:79:
         03:d4:73:bd:0c:4f:8f:87:81:19:0b:ae:a9:63:84:08:b1:1a:
         85:92:c3:82:b1:48:6f:bf:89:32:11:4e:eb:d5:da:eb:84:2e:
         26:ac:c2:85:a2:7e:72:12:d7:ba:5c:fc:9f:95:85:37:15:e9:
         39:41:8b:81:2a:a9:e3:67:f8:38:3d:c5:11:57:0b:d1:0e:5f:
         8a:f6:4f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:10 2025 by rpki-client