Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1154342d-7e7d-379d-a103-6be4fd5a85ba.roa
File:                     1154342d-7e7d-379d-a103-6be4fd5a85ba.roa (raw, json)
Hash identifier:          SrAoaYD+iszyuCPwIEb1Wo7u9l3W27ARTMdL9nXUlAA=
Subject key identifier:   42:30:2D:2B:73:1C:B7:9C:29:01:41:B5:E7:81:D8:B5:75:15:F9:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB01A7D8CE4622BC3871A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1154342d-7e7d-379d-a103-6be4fd5a85ba.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        76.126.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:1a:7d:8c:e4:62:2b:c3:87:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=cceb6ac1-be90-4702-9651-bcc997740c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:0f:33:ea:bc:08:52:e4:8a:3c:64:e8:33:
                    66:18:00:3f:17:fb:88:50:9f:9c:71:59:5b:3e:6f:
                    1a:5d:53:c5:bb:40:40:e3:89:65:a0:09:ae:7c:3d:
                    e8:bd:78:a7:60:d8:d9:d1:9f:3a:ad:f5:36:ea:0b:
                    3e:5e:a4:80:69:ae:4d:91:84:d8:da:2f:a8:ea:94:
                    af:c2:1c:fe:5f:8e:66:f6:35:cb:7d:cc:15:f5:af:
                    74:dc:7a:b7:6f:64:00:4a:af:1f:b6:38:fa:5a:38:
                    1b:32:58:ea:2a:7a:62:fc:3f:ca:28:65:a6:8a:ce:
                    b5:b8:d2:a1:47:09:24:bd:7b:f1:81:57:61:71:61:
                    f5:5c:26:b1:8c:4e:af:cb:77:32:6c:f5:7c:bd:3c:
                    68:29:ba:e5:1b:ed:2a:54:27:2b:3c:de:d9:16:9f:
                    29:da:a6:1d:07:80:ce:7d:a7:86:01:70:e6:47:b1:
                    aa:f9:f9:b4:67:bc:ab:5f:ee:4a:88:ce:c5:51:1a:
                    7f:33:a8:ff:b5:ef:29:71:7a:b3:9f:e6:f5:d8:19:
                    7c:71:9f:3a:83:18:c1:e0:50:a0:5b:cd:07:e1:25:
                    dd:36:b2:61:97:f2:58:df:62:34:2b:15:08:4c:9f:
                    7f:20:22:cb:e6:1e:63:b1:1e:f8:9d:94:b2:61:fd:
                    db:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:30:2D:2B:73:1C:B7:9C:29:01:41:B5:E7:81:D8:B5:75:15:F9:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1154342d-7e7d-379d-a103-6be4fd5a85ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:1e:05:b0:b9:39:38:49:d8:7e:cb:08:a0:33:89:8c:af:
         ed:97:1e:b1:a1:a2:22:3d:4a:fa:47:40:be:02:f5:b5:44:27:
         97:0a:75:e2:62:85:48:88:a3:a3:af:d4:5c:54:53:10:0b:2a:
         ad:ed:8f:18:c1:68:c4:85:0e:65:c5:86:35:33:9d:88:a9:38:
         b0:a6:dd:06:de:9c:cb:d3:90:50:1b:fd:7e:81:c2:4f:c8:36:
         d1:5b:95:46:32:e0:8a:77:8d:a3:d3:2a:3d:ae:a8:bd:81:0a:
         7a:28:81:5f:a8:c5:58:1d:3b:01:d2:0d:48:ba:3a:5f:67:7f:
         8a:cd:69:77:8a:4b:1a:8e:42:85:8c:d0:59:3c:e6:86:e9:ca:
         09:e7:e2:d1:11:aa:de:d5:c4:a2:17:3c:db:1c:d1:a1:5a:e2:
         e1:73:52:1f:77:55:d2:c2:29:7a:8d:a6:ac:9f:76:7f:38:d6:
         64:cf:f2:76:cf:fb:55:d3:d6:24:78:78:a4:67:a6:b9:cf:bd:
         36:79:02:26:eb:7a:ea:a4:f1:f4:af:e7:c3:e7:9d:14:da:cc:
         6d:ab:25:5a:5b:e5:6e:91:d2:dc:b6:f6:a5:f1:42:da:e3:39:
         43:f6:40:3f:90:26:3a:44:57:3c:08:07:7b:b2:27:98:58:e2:
         02:59:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:21 2025 by rpki-client