Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d7b1a5-39fc-3014-83bc-8c7d4a1bb0dc.roa
File:                     40d7b1a5-39fc-3014-83bc-8c7d4a1bb0dc.roa (raw, json)
Hash identifier:          ep1IfdQgyKnWnQBcxOMjEXz7+O+l/gmmv+TumKkZevw=
Subject key identifier:   53:B8:FC:5B:4D:78:58:14:3E:C6:62:20:31:AB:F3:68:8B:74:38:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4326104F7D8025BC55C6700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d7b1a5-39fc-3014-83bc-8c7d4a1bb0dc.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.142.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:61:04:f7:d8:02:5b:c5:5c:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=69ee1264-24c7-4ae1-add2-04fe78684e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:b2:e3:80:5c:31:93:60:dd:00:91:16:53:
                    5f:71:72:c2:b5:c6:0b:8d:16:a8:c9:ed:77:3e:28:
                    93:99:b0:19:42:d7:05:ab:89:63:de:07:17:df:4a:
                    77:d1:2a:23:de:cd:06:77:ea:fc:79:1e:15:10:3b:
                    bf:0e:c6:4c:db:12:3e:72:cf:07:d4:57:5e:50:75:
                    52:d9:c6:ab:a6:be:22:52:25:a3:50:f0:44:2a:43:
                    01:1b:c3:8e:13:a0:a9:9a:88:18:7e:a4:11:99:35:
                    85:87:7c:2a:92:53:09:3c:3e:d3:82:75:59:f0:42:
                    72:da:6e:a6:5e:f4:53:36:d9:28:56:d4:bd:16:f8:
                    8c:a0:f1:8d:8b:1b:f5:70:74:87:f7:77:26:9f:9b:
                    92:24:37:da:03:f9:ff:29:b0:ea:a9:ce:90:40:20:
                    38:1b:d4:32:a3:09:5c:cb:0b:77:00:6d:24:32:7d:
                    84:a8:0f:a6:11:3e:bc:fb:98:7d:ba:2e:59:ef:11:
                    22:20:cf:a0:aa:13:06:20:31:23:64:f3:f2:f2:3e:
                    d3:94:b4:4e:b0:bc:bd:bb:60:52:32:2c:2f:1c:8e:
                    63:3a:18:2b:e7:df:51:34:80:05:2c:8f:80:48:6d:
                    a0:ca:ab:80:ec:f9:27:35:f7:b0:94:f0:bb:bc:40:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:FC:5B:4D:78:58:14:3E:C6:62:20:31:AB:F3:68:8B:74:38:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d7b1a5-39fc-3014-83bc-8c7d4a1bb0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:15:2c:0c:f9:50:58:5b:ed:53:6a:24:03:4e:8c:36:1a:f7:
         db:54:52:95:10:da:84:a1:03:d0:ea:f2:2e:6f:2d:31:32:6e:
         25:10:88:87:0b:92:f9:4c:9f:8e:90:ff:d5:b9:7c:e4:a0:e5:
         c6:3e:4b:2f:6a:a9:78:d4:df:78:e9:5a:3d:14:3e:be:b2:c0:
         11:74:6e:84:a7:af:3a:4e:99:1c:a1:a1:94:fd:6e:21:c7:fe:
         5f:2d:9b:47:02:0c:79:17:aa:f9:15:1e:40:07:f1:0d:2f:0a:
         8c:a4:81:b4:9f:c7:9d:f6:e7:c1:e0:f1:5b:f0:6c:29:b9:05:
         05:35:18:05:a3:82:f5:7f:39:89:86:9e:8b:a1:19:c1:33:24:
         34:91:d1:08:37:67:b8:b8:4c:9e:20:81:93:7f:3b:86:42:5c:
         3e:4a:d2:ee:8c:f3:5b:4b:d9:39:ec:14:f3:b2:02:14:69:d0:
         68:40:15:d0:e7:df:0b:1f:f5:93:5a:bb:5c:55:5f:06:4b:b9:
         ba:21:fa:ee:55:ed:93:85:0f:3f:1a:b7:64:94:5d:b4:2b:ae:
         12:59:d6:50:06:47:8a:a5:a7:8e:13:87:85:4b:05:78:6a:3d:
         4e:9d:fc:bf:6b:bf:26:34:9e:24:c0:d8:8d:cf:8d:fc:70:9f:
         cc:38:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:10:31 2025 by rpki-client