Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b91f99c-ac7d-33b7-b1ef-e6d0ba5359d9.roa
File:                     3b91f99c-ac7d-33b7-b1ef-e6d0ba5359d9.roa (raw, json)
Hash identifier:          ghBG38/4L/G44uVSwNObNllJ8KcwSAZxnwN4oyYdlC0=
Subject key identifier:   E3:3A:8B:3C:5B:C9:28:DA:A8:3D:EA:64:D1:A7:E9:7C:05:C8:55:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43108B097E15AEFF35705C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b91f99c-ac7d-33b7-b1ef-e6d0ba5359d9.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.142.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:08:b0:97:e1:5a:ef:f3:57:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=789cf795-5c12-4b67-8332-f273cad82d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:36:25:62:97:3a:65:a0:54:35:98:d5:86:
                    17:85:ca:3b:c9:06:4c:7a:8f:82:a2:b8:79:1e:6b:
                    e8:4e:02:a1:30:69:5b:80:40:d5:6e:83:6c:f7:49:
                    5d:84:4e:58:4b:88:3d:9c:26:a2:dd:8b:27:67:5b:
                    86:72:40:95:1a:9f:6e:4d:b6:4d:31:4d:31:5a:25:
                    a1:1f:4f:4e:1e:a4:c0:ff:17:76:0b:2b:97:81:7d:
                    d6:9d:16:11:35:cf:10:87:e4:25:40:11:8f:ed:80:
                    87:0b:16:33:e1:2b:30:17:d3:e7:c7:6a:8a:b0:0b:
                    f3:f7:bc:1a:9c:50:0d:26:6b:6b:61:4b:18:f2:71:
                    ab:df:bf:f7:40:8a:7f:19:12:06:af:c2:17:b1:0e:
                    b4:5e:44:c5:83:1f:b9:84:c0:d4:fe:21:4c:40:e9:
                    38:e8:03:c0:f8:24:15:8e:e7:92:38:5a:5c:37:40:
                    9d:d2:a1:49:9a:40:f5:85:b3:aa:c4:08:56:30:82:
                    7c:0f:32:58:93:45:66:6e:cc:cd:5f:a3:36:95:84:
                    23:1b:ae:80:7d:e3:7e:96:b7:9f:2c:00:6b:0e:84:
                    08:97:39:67:db:10:79:69:ee:67:02:4c:e0:19:bd:
                    9d:e2:14:e5:b6:38:9c:1d:81:52:93:d0:77:48:1c:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3A:8B:3C:5B:C9:28:DA:A8:3D:EA:64:D1:A7:E9:7C:05:C8:55:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b91f99c-ac7d-33b7-b1ef-e6d0ba5359d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:90:b3:77:5b:64:51:64:f9:76:66:76:1d:fe:8e:dd:87:50:
         40:d8:05:57:ff:6a:3b:e9:7a:fb:93:a4:6c:0a:b3:25:f4:27:
         46:51:26:b6:e9:8c:5c:f3:95:a9:1a:e4:ea:7c:b2:10:4a:ce:
         a8:e9:80:d4:66:66:a3:3e:cf:8b:c7:c7:7b:2d:35:ba:e6:91:
         f2:b2:3b:ff:68:3d:46:d0:80:28:44:91:7f:6c:7a:89:e1:62:
         9c:71:6a:91:4e:b5:4a:61:2d:3a:e6:8d:61:10:4c:e1:2f:0c:
         f5:e2:db:84:fd:8c:b1:54:76:ab:08:60:36:65:de:3b:59:a7:
         23:13:8d:e4:fa:f4:7c:13:76:8d:69:9c:e3:4d:a2:ff:38:5d:
         a3:69:f7:f5:fc:98:dc:33:83:ff:4d:a1:f5:b7:4b:18:27:14:
         63:e8:89:04:08:4d:38:b7:12:ca:92:3b:06:65:5c:37:eb:53:
         e8:cf:2d:ee:1d:c1:50:d3:3b:02:93:59:f4:55:1e:cb:03:26:
         ba:9e:22:e8:8f:46:69:0b:40:a1:84:0a:35:a7:c0:53:03:2d:
         69:d3:12:2a:31:d7:6e:aa:bc:2c:1e:46:f9:bf:37:9f:50:df:
         85:1d:71:87:c1:75:74:ce:dc:2b:a1:54:e4:a6:5c:32:d4:53:
         07:b3:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:57:50 2025 by rpki-client