Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/095abcdd-4682-3ad6-afd3-b52ac8cc3c48.roa
File:                     095abcdd-4682-3ad6-afd3-b52ac8cc3c48.roa (raw, json)
Hash identifier:          TepTGQN2J318iEZDvLS9VJ5bG8RpVbfaDus9npf5W6A=
Subject key identifier:   EB:CC:CE:39:E7:C1:98:1D:0F:F8:4C:2F:41:90:42:E3:25:B8:80:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432666B465CF6833E6E05F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/095abcdd-4682-3ad6-afd3-b52ac8cc3c48.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.30.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:66:6b:46:5c:f6:83:3e:6e:05:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=44659a64-6967-42ce-9251-1266e39a0ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:e9:ba:97:73:11:c8:eb:1f:f5:53:98:86:
                    b3:2d:94:f7:e6:59:d0:84:28:50:08:4a:fa:c4:4b:
                    3a:9c:ad:90:3f:88:30:41:87:ff:ff:1a:77:2a:f0:
                    42:f9:69:42:53:58:cc:31:93:02:40:aa:bd:a3:35:
                    aa:14:59:0c:f3:77:19:0a:fd:a8:17:5e:10:7d:1a:
                    df:31:a8:18:36:9f:e5:48:b5:40:96:43:14:07:1e:
                    f5:b9:d4:fc:d4:bd:a3:d2:98:83:61:83:9a:c5:e2:
                    26:29:5e:02:4f:88:45:4b:22:86:cd:dc:72:a7:d4:
                    78:0e:ac:ce:fe:2c:dc:ed:c3:7d:79:5d:ab:4c:1f:
                    7a:9f:28:b2:9a:64:6f:bc:f4:c5:db:73:63:6c:23:
                    7c:6a:ff:4c:7d:cd:d6:5a:14:cc:bc:d6:fb:1c:59:
                    ab:f0:e2:06:2e:4e:30:56:19:41:ab:db:94:05:2a:
                    27:0f:1a:1f:31:6a:82:f5:c4:d7:5c:29:8e:25:6b:
                    f5:b6:ba:f3:6f:f6:93:db:3c:05:f6:97:fd:72:6a:
                    6a:3c:11:d7:f6:7c:08:43:ff:c2:0a:b5:2f:fd:84:
                    92:c9:07:5a:19:fa:de:02:cf:88:b2:a8:4f:37:d7:
                    19:64:bf:e1:0c:21:96:97:f9:e4:15:fd:3a:88:74:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:CE:39:E7:C1:98:1D:0F:F8:4C:2F:41:90:42:E3:25:B8:80:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/095abcdd-4682-3ad6-afd3-b52ac8cc3c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:f1:26:ad:61:28:6b:62:b7:97:f7:50:08:6d:6a:1a:a8:5b:
         bd:53:61:48:56:36:76:c1:61:17:ae:64:a8:12:04:61:20:31:
         cf:e9:e4:ba:20:7d:0a:0d:cd:ed:3a:75:4d:15:bc:5d:5b:19:
         e9:21:dc:5b:9b:29:81:c7:ae:6f:9c:52:6f:50:f1:cb:51:2d:
         e2:85:02:70:19:9d:f8:ea:2b:ef:fd:6a:d9:f8:91:8d:9a:ad:
         d1:db:1d:1f:38:18:9f:c0:84:11:a9:ca:8a:9e:5c:e7:e1:b9:
         3b:48:aa:9d:ec:5d:02:eb:a4:14:b0:b2:09:03:8b:56:0f:df:
         23:53:66:3e:56:58:aa:54:81:0c:79:d2:47:a8:87:0a:c0:76:
         0f:89:14:36:fb:18:4e:1f:55:ec:66:72:47:a8:e2:14:91:92:
         2a:05:25:60:05:87:b9:a1:7e:db:54:cc:05:ad:03:6a:87:d9:
         c7:fb:ab:2d:d1:de:3c:ea:de:0c:23:5a:91:5e:7e:46:c7:31:
         da:ff:fe:95:31:72:81:a9:df:cb:f4:09:c0:2e:5e:c2:cc:52:
         0b:db:a9:f5:02:e8:1c:01:d7:3f:56:36:77:74:af:5c:d3:10:
         75:50:74:23:56:5d:1c:13:aa:2c:a0:0c:1d:19:9e:b7:ff:28:
         4c:24:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:01:55 2025 by rpki-client