Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb0d8880-1916-3f72-a252-c02c60900bf5.roa
File:                     cb0d8880-1916-3f72-a252-c02c60900bf5.roa (raw, json)
Hash identifier:          OLO5g70AWP5gNtRbzfaVbmo8qBnZGLsXM58oka42M9s=
Subject key identifier:   FC:BC:88:AC:53:E6:2C:04:9B:9B:26:D4:88:7B:40:50:96:B5:ED:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB5A9E6E4364392FEFA080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb0d8880-1916-3f72-a252-c02c60900bf5.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        76.23.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:5a:9e:6e:43:64:39:2f:ef:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=75306fa3-e03b-4d4b-81c1-9f7dee023af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:35:e2:fc:b3:bd:cb:a4:e8:77:2b:f2:28:
                    e0:25:b0:79:da:a2:e7:0f:d5:37:c3:42:1c:1a:d8:
                    c9:e5:77:19:63:39:0e:da:b5:e2:ee:d8:28:8d:94:
                    1f:27:33:c4:38:22:81:9d:23:20:e9:1f:74:d8:c5:
                    a8:e5:63:f4:02:09:01:17:26:4f:ca:ba:de:1b:31:
                    df:03:1e:1b:51:44:6c:ea:f6:6f:9b:fb:29:44:95:
                    1b:44:f3:8b:88:91:40:16:7f:73:13:33:16:ce:8c:
                    dd:2b:5d:04:96:82:37:bf:c8:15:57:1d:8a:6b:5b:
                    c6:a2:4f:f3:40:b6:30:76:e2:86:fa:42:b6:59:64:
                    cc:22:af:f3:b7:23:01:cb:d8:95:4c:d5:2f:32:ac:
                    03:3f:ac:ba:dc:07:f1:5e:bd:1c:6a:be:34:84:bf:
                    b1:5c:cc:ea:56:74:7c:f9:f5:f4:9e:b1:eb:ad:32:
                    3b:d5:4b:e2:94:e2:1e:54:6a:55:e4:2a:5a:33:55:
                    f5:9b:ee:5c:bb:78:60:86:6e:03:f4:50:e8:57:e9:
                    ca:e3:c3:a0:36:3e:9e:b9:e4:c6:0e:6b:5b:a7:1b:
                    ad:32:d2:7b:ca:4e:17:04:29:3c:c4:81:d2:2e:9d:
                    b7:e6:be:4a:b2:64:b9:80:c6:23:53:60:ba:28:2f:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:88:AC:53:E6:2C:04:9B:9B:26:D4:88:7B:40:50:96:B5:ED:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb0d8880-1916-3f72-a252-c02c60900bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:99:93:8d:fd:43:12:de:f6:93:56:3f:97:1f:b6:f5:63:b4:
         49:b2:6a:64:fc:be:ec:a2:fb:59:22:19:8f:d2:95:1a:f8:8d:
         ab:9f:b3:2f:f8:d5:21:60:31:5c:2a:74:9d:b1:59:3a:6c:ff:
         ad:ba:05:5a:ec:01:63:06:32:fc:4b:08:be:a1:d3:74:aa:a7:
         1f:bd:62:34:0e:51:8e:4e:5a:e6:9c:4a:b7:36:ab:b7:f2:9b:
         11:17:f4:b5:5a:1c:62:e3:9d:ac:4f:f2:d8:c6:3e:45:6b:4f:
         6b:08:db:2e:06:1d:7a:25:82:97:97:68:7e:44:76:dc:8a:af:
         54:f0:86:2a:88:9c:d2:03:4d:ab:9f:31:5a:fd:b1:61:4d:2b:
         a5:67:42:5f:fb:7d:67:e8:76:cc:b9:c4:3c:c1:82:5e:ef:0a:
         53:5e:01:7f:0d:f0:9c:9c:d7:31:a7:b5:1e:8e:56:17:b1:62:
         9e:78:80:d9:ec:21:19:34:4a:a2:9a:92:63:35:f2:d4:92:e4:
         43:03:be:15:c9:97:69:57:dd:36:3b:32:e4:7b:56:5f:af:33:
         ec:92:18:83:c7:c9:33:09:79:73:b9:06:19:7f:d3:f5:bc:e7:
         66:24:8c:d0:c5:0f:3a:57:74:ae:08:8b:2b:6d:72:6a:17:fb:
         2f:49:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:10:46 2025 by rpki-client