Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5299b6bb-bbca-3337-af32-09c344e49def.roa
File:                     5299b6bb-bbca-3337-af32-09c344e49def.roa (raw, json)
Hash identifier:          aBktQwjzAPJ2DctPfq9ZR0HB/tEjEmjaGNuqqNS1W/8=
Subject key identifier:   6D:CB:4B:CB:BE:24:17:1F:1B:2A:2F:A6:C3:88:26:94:6B:EC:4E:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA2F822A5BAE58BF0550A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5299b6bb-bbca-3337-af32-09c344e49def.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        76.19.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:2f:82:2a:5b:ae:58:bf:05:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d98a65ab-63a8-4b10-96c1-073d6674cff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:6e:9a:77:b2:d6:b8:59:a4:4e:c0:1a:3c:
                    b4:a4:11:64:84:8d:40:ac:95:22:ad:c1:95:63:c9:
                    82:2a:55:50:f1:24:3c:a7:aa:c5:de:4e:e1:21:13:
                    38:a4:e7:b6:ab:9c:1e:30:f8:6b:e1:25:4c:e4:c8:
                    24:34:47:fa:34:dd:ce:e1:2e:5c:af:6f:e1:01:d4:
                    bd:86:60:c0:93:2a:ba:cb:9b:28:b3:d4:2a:bb:c7:
                    7e:15:a5:89:f7:91:47:ae:2d:07:83:69:fd:ba:d5:
                    80:c4:c0:38:c4:1d:83:0b:99:4f:3c:81:8e:cc:f5:
                    d8:a5:3b:b9:19:93:47:db:32:cf:69:61:1e:17:44:
                    7f:4c:7b:01:0b:53:21:f6:d0:75:03:1c:a2:d2:a1:
                    09:ac:de:e2:91:b0:0c:74:cb:81:c9:bc:75:b0:9d:
                    0e:e2:2c:70:1d:e0:0c:14:ea:33:67:63:04:d7:ca:
                    73:b8:65:fd:2a:7f:8f:fc:7c:ab:8a:b7:86:b2:44:
                    58:4c:c7:34:59:16:be:14:97:7c:c5:43:36:9b:99:
                    43:17:89:44:50:f1:86:33:ea:e9:2c:48:03:75:61:
                    6c:d8:09:a4:3e:ba:cb:1e:f2:9b:50:9e:ad:5a:61:
                    c4:0c:0a:10:18:a1:d9:89:16:e4:87:be:48:6b:99:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CB:4B:CB:BE:24:17:1F:1B:2A:2F:A6:C3:88:26:94:6B:EC:4E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5299b6bb-bbca-3337-af32-09c344e49def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.19.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:a0:27:4a:46:cc:24:96:27:10:db:ca:6b:51:c4:d1:3c:
         a3:99:a0:ae:85:22:ad:44:ab:5f:97:54:88:f6:8c:f3:78:10:
         80:32:90:d6:b7:20:dd:79:a5:3b:bf:cb:f3:f4:77:d5:2c:f3:
         85:db:86:37:ff:dc:ec:52:1b:82:8c:b6:7e:0f:06:12:39:86:
         da:16:b1:aa:4a:ed:39:f5:29:d4:25:80:a1:f8:07:2f:b1:55:
         f3:e1:a6:be:9d:b5:9e:5e:6c:9b:34:b7:76:66:d1:71:5e:af:
         4c:8c:f8:5f:de:c1:16:d0:1b:e7:c7:8a:3a:78:21:b6:be:26:
         20:09:a9:4b:5b:fa:d9:13:b7:15:fe:de:45:8f:b9:4f:f6:8c:
         5f:00:65:24:5f:4f:d9:e5:6f:82:a6:c6:47:99:2b:81:14:19:
         1c:3f:e1:91:df:55:30:dc:cf:13:ad:67:09:be:2a:83:5c:2b:
         6a:c3:09:99:fe:dc:21:26:72:e2:1e:e9:93:af:59:d5:b4:de:
         41:ae:48:a0:f8:cc:6d:a0:05:43:e6:f2:d2:00:b5:49:db:be:
         0e:bd:61:5d:ea:75:81:ac:2a:69:54:ef:cb:dd:5b:0c:8e:1b:
         96:8e:21:9c:9c:c9:8f:02:bb:d8:7d:80:23:ee:dd:b6:b7:04:
         cd:14:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:44:55 2025 by rpki-client