Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79b8c7c3-d9e1-3089-bdcb-579247635507.roa
File:                     79b8c7c3-d9e1-3089-bdcb-579247635507.roa (raw, json)
Hash identifier:          LZAaluwpkKNz8mGUvHXqGXckgbaV62qi/rWQL/qmqmY=
Subject key identifier:   4F:25:58:B9:AA:7B:07:D2:42:67:7A:2A:45:9B:7E:D4:39:1E:CB:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD05AAD61DFAC528728D70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79b8c7c3-d9e1-3089-bdcb-579247635507.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33490
IP address blocks:        162.151.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:05:aa:d6:1d:fa:c5:28:72:8d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=b6346c5c-ae7e-4c47-8f01-277bb3d13cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:84:0c:48:85:74:d1:ab:c9:0d:7f:cd:49:
                    59:85:7b:57:ea:6b:cd:18:f1:8b:b9:9a:70:7d:ca:
                    5c:04:68:59:11:0a:44:a5:b2:90:e4:95:cd:e2:48:
                    d7:20:67:65:e9:5d:2b:3c:e5:0d:54:48:c1:62:e3:
                    5e:f2:71:c3:29:b5:54:31:58:b9:27:e3:15:b9:41:
                    e7:3d:b1:a8:3b:ca:c9:3a:87:0a:ae:e5:1c:83:44:
                    43:7d:32:11:cb:66:e5:59:96:00:da:05:d7:88:f5:
                    1e:86:d8:63:bb:85:b0:8b:54:bb:70:36:73:0e:5c:
                    bc:9f:1f:51:2c:50:1b:31:63:fb:db:da:d9:85:b2:
                    c6:51:ea:f1:9d:05:0f:39:7a:0b:4c:cc:54:28:73:
                    8c:0b:4d:71:64:cc:44:31:db:d0:a4:c9:36:a4:45:
                    7d:90:03:ce:40:ca:67:af:90:32:68:84:42:65:ee:
                    69:07:b7:63:fc:68:b3:35:47:8f:6e:df:25:40:12:
                    90:74:8e:60:22:ea:89:26:a8:2f:6c:cd:ff:4b:60:
                    e5:92:96:e3:05:33:58:cb:5f:d4:a4:28:05:90:89:
                    3f:86:1f:74:86:03:5a:82:4d:35:07:7e:bc:ee:c4:
                    07:67:fd:7f:c1:bf:8a:5d:31:d0:11:77:d9:a5:a3:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:25:58:B9:AA:7B:07:D2:42:67:7A:2A:45:9B:7E:D4:39:1E:CB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79b8c7c3-d9e1-3089-bdcb-579247635507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:76:a1:db:d6:b8:27:b6:9d:36:63:2f:e3:78:dd:b8:25:
         c9:66:a9:d8:b4:87:e1:d7:61:0c:41:36:11:d6:e3:0f:2e:f3:
         74:bd:d5:0d:54:c9:6a:10:74:9a:33:1f:dc:2f:7c:83:5b:bf:
         c7:e2:0d:13:22:eb:44:c6:ed:25:97:8e:97:3e:7c:2a:66:4f:
         71:f5:8f:82:3c:73:12:62:9b:58:4e:9e:ef:ba:19:cf:bf:4c:
         62:a6:c0:64:93:67:5c:88:59:97:94:92:84:08:48:ef:9d:be:
         75:22:58:d8:28:64:35:91:05:60:a6:7e:81:0a:17:18:e3:34:
         e9:1a:11:2f:1b:d2:80:da:85:ea:7d:6e:b6:7f:5d:e4:b2:e4:
         83:50:50:76:94:2e:84:c5:b2:d2:cf:1a:e0:d1:80:bb:9e:45:
         e2:c5:37:d3:6e:ad:6b:5e:e0:79:95:86:80:c3:95:fa:55:ac:
         2f:33:6c:0c:48:79:01:b0:32:a8:d3:3c:86:8d:2f:93:9c:76:
         c3:3e:d5:25:91:11:5a:ce:13:97:ae:46:11:13:70:d7:d7:fa:
         93:99:c3:15:e6:27:d6:c8:bc:78:d3:89:9f:37:40:17:c9:45:
         2a:8d:12:11:3a:0a:96:84:b2:f3:ac:45:a9:4c:78:7d:c0:41:
         02:55:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:55 2025 by rpki-client