Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64250590-5fff-39c7-9e2d-d00e5a3bc8c8.roa
File:                     64250590-5fff-39c7-9e2d-d00e5a3bc8c8.roa (raw, json)
Hash identifier:          5OTiep6vFGfpvTiWA5HiXDsIAFvo6F61+b2iUCynPOU=
Subject key identifier:   26:7B:63:F0:17:D2:62:18:33:E2:E1:57:A4:11:02:5A:9A:03:65:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFB9EF62BE6CD678E1D300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64250590-5fff-39c7-9e2d-d00e5a3bc8c8.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        76.157.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:b9:ef:62:be:6c:d6:78:e1:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=28e26f48-9a71-4040-a9f0-ece374546f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:3d:3d:bc:bd:26:b2:7f:3a:c5:2c:19:a7:
                    9e:2a:bb:94:5f:43:79:d9:08:a1:29:8e:c8:e7:c3:
                    22:c7:01:0f:9d:56:70:59:61:1d:e7:68:38:fa:1e:
                    cb:10:85:e9:c7:70:b3:76:d5:a0:1b:5f:dd:1b:cd:
                    89:db:49:b1:26:e9:5a:24:47:df:e4:40:36:b8:e4:
                    8a:fb:f8:ad:60:56:68:de:aa:51:34:52:53:62:b8:
                    5b:09:d2:76:b3:25:15:91:db:6f:82:f8:c0:aa:9a:
                    0e:73:a0:04:73:ca:ed:35:a1:8d:ed:b4:0a:fc:a8:
                    1f:05:31:b0:76:5f:a0:c1:ad:23:e4:14:cf:ad:5b:
                    9a:72:87:c0:5c:d2:c5:62:e0:a4:3c:29:2b:d3:89:
                    94:4a:26:38:18:fb:29:22:2c:c9:d4:b2:7e:84:50:
                    88:08:dd:ae:0a:52:a9:f8:2a:c4:11:d5:27:01:f3:
                    2a:ef:7e:f8:ab:c4:4d:c7:67:9b:87:b5:6b:e6:de:
                    c9:38:d8:72:30:42:65:be:ce:d5:27:75:62:7a:d2:
                    c8:ff:c5:8c:45:d5:b8:40:67:76:10:a7:a2:95:e1:
                    3a:67:19:39:5e:d0:cd:4a:a2:3e:81:a4:90:5a:1c:
                    74:43:95:33:c9:ce:d9:3c:d7:14:1b:e0:61:03:42:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:63:F0:17:D2:62:18:33:E2:E1:57:A4:11:02:5A:9A:03:65:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64250590-5fff-39c7-9e2d-d00e5a3bc8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.157.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:0f:22:25:47:63:d7:c4:96:75:26:69:e4:fa:94:c3:10:
         06:e2:d7:cb:e2:dd:44:f4:86:01:17:7f:a6:54:27:61:eb:62:
         ba:17:b7:ef:23:16:7b:b8:36:8c:53:73:1c:dd:5c:19:87:fd:
         c0:90:09:f7:92:d5:6c:76:fd:9a:53:65:7c:31:a3:d3:e6:2b:
         12:bf:3a:46:90:88:4e:6c:e4:fe:39:bc:cd:96:ab:a3:7a:1c:
         5e:ba:d1:24:73:f3:c4:bf:50:b8:2f:8a:93:7a:28:fc:55:4e:
         8b:23:da:a6:48:6a:2c:ad:9b:90:d7:e7:91:e3:1d:87:c9:a4:
         7d:4e:85:4f:20:f7:ba:66:15:e0:f9:3c:7f:fc:f3:9d:be:8c:
         5c:10:c5:34:d9:1e:62:c4:05:3f:83:3e:a8:46:6f:96:51:d6:
         20:71:88:08:cd:6b:9b:aa:91:26:c4:bf:45:4d:54:5e:b8:4b:
         8c:02:59:20:0a:18:8d:af:6e:b6:5d:03:82:44:e1:37:a1:82:
         92:d8:59:bb:ae:1b:26:8a:da:1f:2d:6d:fe:59:83:58:43:4d:
         25:a2:02:e7:9e:ea:14:86:d1:32:f9:36:6b:dd:6e:1b:ac:4f:
         7f:7c:9e:31:54:e3:04:fa:eb:40:09:9a:cd:a5:fb:0f:12:39:
         4e:72:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:16 2025 by rpki-client