Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7581e9e4-826c-30b6-931d-65eb7fe76524.roa
File:                     7581e9e4-826c-30b6-931d-65eb7fe76524.roa (raw, json)
Hash identifier:          pMc7SFO8peckfbGXDNvZx6xf56LulqnGq5fpvwCyVyE=
Subject key identifier:   01:9C:E9:42:EF:7E:95:3C:71:6B:37:78:F7:F6:CE:F7:B1:3A:F2:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431D7C649C3EC571D31B4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7581e9e4-826c-30b6-931d-65eb7fe76524.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        76.28.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:d7:c6:49:c3:ec:57:1d:31:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=7cee5d38-0d41-48fa-8478-22b129d1a22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:65:61:91:1e:8f:b3:50:91:b8:fd:ef:cf:
                    9c:38:de:30:f5:b7:a7:e9:21:dd:ea:a4:35:41:e4:
                    e0:ef:cf:e8:87:17:86:34:67:8d:a6:db:38:f7:fd:
                    e8:4b:4f:68:e4:9e:b9:26:ed:2d:7a:ff:6b:9d:8f:
                    b1:00:ad:de:77:ea:3e:96:6d:85:ca:19:a7:95:5e:
                    ac:00:c0:12:54:64:36:be:54:a2:ad:f7:bf:b2:80:
                    3b:f2:91:04:78:e8:74:2b:83:42:04:e1:f3:2c:fb:
                    cc:82:71:a2:54:01:38:0c:07:3c:1c:b9:06:94:ec:
                    65:9f:c5:14:61:fe:df:62:dd:b0:f3:ad:ac:0b:bf:
                    c9:60:27:4a:57:fa:85:1c:6d:76:14:a2:82:24:26:
                    42:1c:6f:7f:44:15:7d:53:5e:87:7b:ac:d5:51:17:
                    2e:b3:57:a3:57:f6:58:3a:f4:27:c6:2c:e1:b8:56:
                    17:2b:53:1e:df:73:88:bf:f2:88:28:60:a1:52:44:
                    f2:35:f8:67:28:23:84:17:63:a6:65:1b:db:7e:2a:
                    7a:e4:d7:a6:db:c1:5b:b3:ab:98:80:48:ec:78:fa:
                    a0:fb:c4:1b:84:f8:27:1f:94:d6:b1:a5:58:b7:e1:
                    cd:b5:07:d9:8e:fc:45:c5:56:cc:72:27:98:9d:99:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9C:E9:42:EF:7E:95:3C:71:6B:37:78:F7:F6:CE:F7:B1:3A:F2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7581e9e4-826c-30b6-931d-65eb7fe76524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:60:ba:0f:6b:17:7a:3e:4a:f5:f6:b3:ce:4c:a0:97:50:1b:
         b2:af:cd:57:00:d9:ba:7e:11:fc:b8:5d:00:a5:b7:b2:19:75:
         f1:32:3a:d0:9a:e5:d1:42:d1:2a:de:ad:03:9a:df:80:6f:4a:
         f4:5f:e4:71:50:26:2f:b6:aa:a7:95:79:3e:99:3b:9b:ff:0e:
         2f:06:16:00:8c:21:85:1f:fd:47:e7:be:6e:5b:41:21:84:1d:
         3b:6e:b2:ef:5c:c9:71:15:57:85:5a:a2:99:7a:36:dc:8a:e0:
         ed:fe:9c:1a:38:71:49:51:31:87:79:31:61:3b:52:51:36:0f:
         a5:12:88:bf:e6:21:62:2d:24:61:5d:5e:b5:7f:f7:2c:57:b5:
         ec:9a:64:ae:16:77:6b:8c:4c:f1:ca:07:cb:73:cb:a9:67:de:
         bf:d2:59:87:0f:ab:f3:4f:08:8c:82:74:94:63:50:fa:88:d7:
         09:15:f0:96:12:16:da:8b:ce:5e:27:2c:00:1b:69:f8:ab:fa:
         67:37:37:20:33:02:3f:fa:1e:91:7b:56:a5:02:c3:ab:3b:0d:
         e1:04:88:7c:2e:37:c4:a8:54:c2:0f:94:d9:52:e4:a1:18:20:
         b5:1a:6c:64:d5:27:64:5c:71:ac:50:71:90:ea:c3:06:a9:0c:
         e1:00:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:12:53 2025 by rpki-client