Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e2d632e-c526-3a49-831c-089625b3ea15.roa
File:                     6e2d632e-c526-3a49-831c-089625b3ea15.roa (raw, json)
Hash identifier:          6/xcGqtEPIB+zYhVcB+3mW6BYF+6fhneCEGAHTKJEOY=
Subject key identifier:   E0:2B:1C:87:29:99:C9:DE:CC:85:3E:56:29:2E:9D:36:14:9F:1B:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75C8B4C7AF3EB52A738B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e2d632e-c526-3a49-831c-089625b3ea15.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        76.105.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:c8:b4:c7:af:3e:b5:2a:73:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=eb3e605d-6182-4bf6-8705-bf0f7958a573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:53:16:ef:17:0a:62:f3:35:7b:ed:5a:fe:
                    6a:c0:3c:e1:09:c2:c1:1c:a2:b1:b8:db:7b:d9:bc:
                    b5:a4:0d:ab:1a:7f:71:69:b5:81:05:e8:00:78:d9:
                    29:b7:d1:36:be:57:d4:e7:07:fb:bd:f0:99:4b:58:
                    79:89:03:f0:bc:4b:b4:84:68:47:37:1d:33:5f:4b:
                    bf:5d:b1:82:9d:87:4a:70:f7:50:0f:90:22:62:4b:
                    ab:44:db:de:3a:13:ba:1a:57:5b:a3:d0:c5:37:64:
                    ad:67:bb:da:ef:f5:3c:63:b9:3c:89:d8:34:ad:f5:
                    37:df:cf:6d:4d:50:a6:94:fd:31:2a:2c:c5:9d:00:
                    c4:ab:10:c4:81:84:82:54:39:41:a6:07:41:b8:b5:
                    ba:fd:17:ed:23:44:56:31:e2:52:cd:ec:63:7a:00:
                    10:8b:b7:ca:cc:48:4b:29:fc:ee:76:ea:8b:11:e8:
                    30:1b:82:dd:49:74:ab:f1:ba:2b:cd:c0:43:0d:d7:
                    60:16:79:0b:23:fb:68:92:26:bd:47:fd:64:9a:1c:
                    12:3c:11:7a:84:63:09:76:d6:48:2a:dc:5c:16:fd:
                    66:87:e5:c7:b1:dd:fd:ad:8a:2a:26:7c:26:c7:e3:
                    f8:9b:ed:ab:5a:44:87:de:7e:9d:4f:e1:c9:76:d2:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:1C:87:29:99:C9:DE:CC:85:3E:56:29:2E:9D:36:14:9F:1B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e2d632e-c526-3a49-831c-089625b3ea15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:c7:87:66:46:73:9b:87:dc:f0:a3:cc:4f:a4:45:e6:62:bd:
         dd:fe:bd:67:59:0a:dc:26:a5:60:39:a4:77:c0:11:e7:23:46:
         76:8c:78:43:eb:d2:f2:a1:bf:fb:39:e7:7d:8a:7d:eb:0d:e3:
         fb:fc:80:83:fc:b0:6f:5a:f2:1b:04:c6:f2:89:e1:86:ed:3c:
         29:72:ec:27:39:05:59:6b:82:aa:79:fe:30:73:21:a9:74:f2:
         72:86:dc:e8:66:59:37:57:0c:51:51:96:06:bf:a2:4a:10:30:
         00:68:b2:8c:e8:00:b5:9b:65:74:0e:e1:dd:c8:94:b1:ee:f4:
         32:27:68:39:2a:5d:f2:9c:e9:77:d5:f4:49:3a:b5:47:ff:de:
         c8:9d:98:30:10:1a:2e:a1:c9:57:7b:b2:dc:68:07:64:7a:70:
         77:cf:43:2a:f9:a8:44:fd:4e:46:91:e7:5c:a8:db:f3:08:f4:
         71:f8:6a:d3:cf:2f:ff:48:9d:5e:f0:df:66:34:98:33:5b:5b:
         48:06:2c:06:ba:46:5f:00:dd:6b:6b:45:f1:c9:d0:f0:2b:fa:
         fb:d0:0f:c1:b3:8b:92:70:c0:bf:7d:19:ba:28:66:e8:e4:c0:
         8d:9f:1c:65:ec:a8:96:7a:8a:75:ab:1f:d3:78:d8:07:d2:8b:
         03:29:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:59 2025 by rpki-client