Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b0e5ccf-9f51-36af-89c6-7354cf08c890.roa
File:                     1b0e5ccf-9f51-36af-89c6-7354cf08c890.roa (raw, json)
Hash identifier:          4nIQAPgLjVch+nPOBNUCqOcKgo8b7uJgf71rApGvJNM=
Subject key identifier:   A1:CC:1B:F8:FD:44:F8:CA:EF:7E:3D:27:E2:AA:48:3A:12:4F:32:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43265A11919170294F39E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b0e5ccf-9f51-36af-89c6-7354cf08c890.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.30.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:65:a1:19:19:17:02:94:f3:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=21c7bc49-68ce-492c-ac58-de970d9e7a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:29:c3:6d:af:91:41:a2:cb:0f:67:f3:06:
                    e6:f2:1b:d5:61:9d:73:d8:f1:d9:35:2e:16:50:8e:
                    34:68:41:bd:49:7b:6b:b6:74:c6:ec:cb:fe:9e:d6:
                    b8:23:51:b6:c2:ff:4c:5a:76:26:cf:07:34:0a:a0:
                    32:c6:7d:08:18:5e:28:72:b3:57:26:dc:87:10:dd:
                    37:1a:26:ef:eb:ae:9b:85:4c:be:b8:0b:c5:cd:80:
                    16:31:88:70:08:8e:a6:43:75:39:2d:29:81:92:c5:
                    e6:26:13:5e:35:d4:7d:5e:97:22:b5:ff:22:30:fd:
                    3d:8a:a4:b5:85:a6:9f:21:f2:60:a1:6e:0a:af:87:
                    f6:8f:e6:c5:54:32:9b:e2:0c:14:4a:36:54:9b:31:
                    41:e0:f4:9a:1c:95:9e:d9:86:44:97:8d:27:fe:b7:
                    50:c8:ad:7c:e3:56:d0:6e:f5:4b:ee:d0:9e:13:17:
                    78:fb:2c:61:9a:4d:18:7c:20:64:04:6d:13:50:89:
                    63:4f:5a:82:0c:84:e2:c4:4a:af:48:45:71:f1:60:
                    f7:95:ed:df:e4:97:a3:a1:ac:0e:97:a9:54:ab:40:
                    63:8f:6a:6a:53:eb:42:22:e4:0d:da:8f:37:de:03:
                    c7:e7:30:b4:0b:a4:e9:3a:20:fd:23:81:f9:0f:a1:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:1B:F8:FD:44:F8:CA:EF:7E:3D:27:E2:AA:48:3A:12:4F:32:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b0e5ccf-9f51-36af-89c6-7354cf08c890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:be:fe:0e:06:5d:ae:db:07:f4:5d:6b:0a:69:e2:65:e8:
         26:89:20:fe:bd:fc:7b:15:ea:9e:37:a0:72:b6:ae:a4:08:17:
         53:fd:e6:72:9a:aa:bd:93:9c:90:70:e2:6e:71:52:bc:2f:bc:
         6b:3d:81:e5:c0:9b:b4:63:30:92:40:2f:19:8e:aa:73:f0:3a:
         e8:93:a9:c7:3c:ce:db:52:ff:9d:33:86:07:a0:7a:4f:06:12:
         92:74:dc:95:58:e7:2b:2e:51:f4:4b:d4:4b:19:09:b0:cc:e9:
         14:b0:04:a5:aa:9d:e6:2c:d8:b7:2c:84:28:d1:ca:ea:79:05:
         81:69:4f:c7:b3:c4:74:70:fd:51:c7:38:e0:41:7c:a6:ee:97:
         29:7b:e5:3d:59:41:82:40:5e:30:ea:f3:75:07:20:ce:d6:ce:
         51:d1:4a:ec:cd:de:f5:24:0d:79:b0:7e:ce:5a:84:92:98:86:
         84:c5:55:9e:ce:bd:a4:bf:b0:97:ce:f0:9a:b3:ff:47:ee:53:
         d4:0e:91:8d:e9:6b:74:7c:66:89:5e:8e:52:d4:9c:19:02:4b:
         27:f8:fe:f1:f5:02:8c:98:82:2c:60:09:f7:c8:df:47:6f:17:
         07:73:69:2d:8c:95:9b:42:64:0c:06:55:8d:84:b6:04:06:58:
         2b:f2:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:10:40 2025 by rpki-client