Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac8b5e61-cad6-3511-a4d0-b9f75d8162c6.roa
File:                     ac8b5e61-cad6-3511-a4d0-b9f75d8162c6.roa (raw, json)
Hash identifier:          UgwKYRS8lD4HYzoZqR0FS8pC8mv8QRASPurbpy12aPY=
Subject key identifier:   22:57:4E:97:EF:F2:38:F2:37:C6:B2:AB:46:3F:16:01:24:E2:D0:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB59991A66A89E49DBCAB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac8b5e61-cad6-3511-a4d0-b9f75d8162c6.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        76.22.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:59:99:1a:66:a8:9e:49:db:ca:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=37e75e38-a4c9-4953-ab46-0d237311675e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:93:8d:ee:17:3b:4f:28:be:4a:0c:c5:96:0d:
                    04:d5:30:e6:ff:6a:54:79:75:3d:29:a9:36:cb:24:
                    6c:26:7f:c6:4d:77:33:ff:47:c5:4b:cd:1c:9d:0e:
                    d1:99:b7:59:ab:43:59:96:f3:b8:ca:b2:72:00:10:
                    34:db:26:a6:eb:66:ee:bb:8d:bd:02:56:4d:13:6d:
                    63:a9:ab:7a:31:75:7f:ea:0f:36:a0:31:f3:57:bf:
                    af:ce:51:62:17:fb:dc:b4:af:8d:41:57:8f:2a:4a:
                    42:c1:93:fb:67:16:2b:00:ef:22:e6:99:69:11:a8:
                    e9:3b:09:93:e8:a1:d2:0e:99:e2:67:fb:6d:21:57:
                    08:9c:93:aa:6d:b1:1d:61:a2:c4:e0:24:98:f4:51:
                    1b:18:9d:b0:e6:c0:34:a5:ce:24:9b:4d:39:ef:df:
                    01:49:9b:7e:9a:6f:df:57:f4:96:cd:a8:a3:84:e5:
                    2e:11:1e:3d:b4:2e:b0:bf:f1:d0:7f:64:fe:64:76:
                    39:0f:31:48:ee:dd:63:73:b9:42:f2:59:b2:0c:1d:
                    b9:ca:22:5a:c5:81:e0:0a:61:32:b1:c2:44:db:f2:
                    fe:0e:cd:4c:89:ea:bd:a9:8a:c4:25:7b:43:74:4d:
                    0d:5c:38:2e:fb:53:f2:0e:d6:d3:59:b9:b5:dd:4e:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:4E:97:EF:F2:38:F2:37:C6:B2:AB:46:3F:16:01:24:E2:D0:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac8b5e61-cad6-3511-a4d0-b9f75d8162c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.22.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:fd:4a:6b:cd:23:f4:ba:b1:63:16:c7:68:27:24:b1:26:b5:
         12:11:a6:7f:f9:64:c8:a6:15:1c:fd:bd:c4:74:34:86:89:64:
         9d:9c:8f:04:45:7a:0d:0f:89:24:30:b5:47:3a:44:1b:ea:85:
         5e:4a:db:18:f9:ab:d7:e0:3b:d8:44:1f:1b:bb:c3:b1:57:bf:
         f3:87:d9:a1:84:4d:e5:e4:0a:75:c1:dc:5a:6a:b4:b5:96:61:
         00:59:f5:e5:6a:50:31:65:64:e4:ad:5b:13:84:b3:63:8b:98:
         7a:2e:39:58:e7:00:a1:54:8b:17:b6:87:26:71:21:f1:60:30:
         5d:66:d3:97:d5:50:98:eb:ba:f3:14:c6:35:73:58:f0:e9:59:
         70:4c:90:e9:f4:c3:df:16:59:2b:2f:48:a4:1c:f7:56:e8:3a:
         0a:ca:5c:b5:d6:e4:50:37:5c:59:50:4a:21:07:df:cf:ba:17:
         7d:cd:15:72:6c:6b:62:ae:29:1a:a2:0e:e0:2a:ea:c2:db:39:
         0f:8e:a4:9b:dc:dc:c6:70:a2:ab:ca:6e:28:5d:9f:d9:e5:a0:
         30:87:23:4b:08:f5:e5:c4:31:4f:80:a2:5e:d0:c3:c4:cc:73:
         2d:d6:74:c8:9b:e3:e8:35:f3:63:17:68:f5:5e:32:f6:c4:5c:
         1c:f2:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:22:32 2025 by rpki-client