Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/818561ab-8a82-30a5-89a6-1aefca65e5e6.roa
File:                     818561ab-8a82-30a5-89a6-1aefca65e5e6.roa (raw, json)
Hash identifier:          Y0FHSHvYoSu6CLXjfoE5EzKSbC1O8VFPjTX1VkFPmDw=
Subject key identifier:   06:EF:3D:0B:AE:78:9C:D3:47:8F:3F:69:3A:FE:27:7A:9E:41:0A:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA541CD03A792F6E78F8120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/818561ab-8a82-30a5-89a6-1aefca65e5e6.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        75.72.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:41:cd:03:a7:92:f6:e7:8f:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=75794611-c115-4aaa-a0e4-7abaf31b69e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a7:3c:32:0d:3f:ec:04:d1:d2:68:70:c1:e2:
                    c3:5f:b9:57:71:31:3b:66:28:2e:86:f0:bf:09:1e:
                    38:fc:27:3c:fc:96:29:3f:5e:d8:3e:64:78:87:63:
                    33:21:db:fc:b7:91:2a:27:c9:de:3e:c4:06:f0:39:
                    ca:b7:b5:bc:6b:2c:de:44:3d:a4:3e:f8:97:6c:f9:
                    c8:c8:46:d2:a2:84:8d:1f:b2:93:78:a7:38:75:27:
                    1e:74:cb:62:c8:b9:43:f9:d2:4c:c8:00:3e:42:d3:
                    e4:59:c2:38:05:16:07:e4:e2:30:b6:01:5f:dc:43:
                    f1:60:f8:54:ed:6c:ec:3c:d9:4f:af:37:44:42:85:
                    f5:ef:3e:50:66:af:73:0c:17:89:f6:f9:3b:6b:dc:
                    53:26:d4:f3:02:7d:3d:be:52:52:40:a6:12:dd:18:
                    61:a5:8a:07:19:f7:70:db:d4:c8:bc:ed:93:e0:a4:
                    8b:1e:64:fa:d0:b6:d3:5c:e9:05:df:5b:b0:1a:0d:
                    0d:7e:6e:4a:b4:de:83:1a:50:0b:fb:c1:58:3f:f3:
                    27:4a:83:2b:bb:5d:9a:09:45:43:65:66:f4:93:68:
                    b9:a9:59:69:ad:7f:b9:87:eb:d2:4c:4f:33:1f:8b:
                    c7:61:f0:e7:da:6d:44:69:50:ec:0d:7b:ca:65:cd:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:3D:0B:AE:78:9C:D3:47:8F:3F:69:3A:FE:27:7A:9E:41:0A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/818561ab-8a82-30a5-89a6-1aefca65e5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:5c:da:9c:52:af:bc:df:b9:10:e8:94:be:41:33:96:3f:9b:
         d7:5b:b6:c6:78:df:33:dc:6f:d1:ef:e4:3d:18:bc:c5:87:de:
         53:67:3a:36:ea:c1:cc:1c:aa:56:91:43:a8:a9:1b:72:04:bc:
         37:53:24:ae:09:c5:d2:57:e4:df:32:8b:4d:73:a1:e4:76:56:
         a8:e4:d7:eb:bc:cc:03:27:4a:20:f9:c9:6a:44:54:4a:55:40:
         d5:86:81:c7:82:20:d8:ce:51:c7:7c:58:79:6a:44:b7:75:24:
         10:c0:bf:3f:45:4e:96:6e:99:1d:72:b1:cf:78:d1:d5:26:c1:
         50:76:b1:0c:93:c3:28:c9:fe:47:fc:44:34:d7:42:ee:70:b0:
         03:23:58:85:52:54:85:9f:f7:99:71:d2:93:a9:47:3b:92:bb:
         71:27:c3:23:e0:9c:34:ef:de:7a:81:72:17:26:94:2d:22:49:
         55:b6:11:5a:fe:a5:5a:e9:11:44:45:2d:d5:32:7a:32:7b:16:
         37:f4:6c:0f:9a:af:64:ac:bf:23:65:9e:e1:b6:8e:28:b6:de:
         d3:2c:40:12:af:99:21:3c:e0:f8:54:73:ff:1e:ab:7d:d2:bc:
         0a:1b:f0:15:33:5f:94:2f:40:a2:5c:3b:1a:f1:2a:02:81:51:
         55:29:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:54:01 2025 by rpki-client