Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79be29a7-9435-3c49-b6d9-2c7b79611732.roa
File:                     79be29a7-9435-3c49-b6d9-2c7b79611732.roa (raw, json)
Hash identifier:          0vEP8h2kMWUOfZ58coJELvhEsiRsOCfO6f1pNu9CYos=
Subject key identifier:   D8:A2:1A:09:8E:8E:5C:70:A5:7F:80:8C:CC:BE:8B:FE:B8:B3:D0:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FF0256BFFE91B93C9FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79be29a7-9435-3c49-b6d9-2c7b79611732.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        76.144.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:f0:25:6b:ff:e9:1b:93:c9:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=2b3f4959-563c-46b6-8092-841dc43dabab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:5a:3e:88:71:42:be:48:a0:ac:52:e0:4b:
                    39:72:50:46:2b:f0:be:68:ca:12:d8:2d:37:bf:96:
                    3c:69:7a:c4:af:68:14:c3:2f:95:c8:a0:6b:63:a2:
                    fd:fe:ee:2e:e8:6e:a1:ac:fa:ab:4e:81:6c:dd:e7:
                    35:af:55:6b:60:4e:db:c8:79:7e:bb:ac:bc:e6:b4:
                    69:b8:aa:88:61:66:83:ab:f6:82:e8:da:2f:b6:89:
                    76:89:3d:47:fe:25:bf:33:6b:ff:c2:19:94:96:76:
                    a3:e9:ec:9f:02:fd:58:7e:c5:5e:26:f0:4a:6d:6d:
                    71:0f:30:97:5f:d0:6e:12:81:78:9c:fd:ca:56:66:
                    a6:2d:1a:05:6d:be:33:0b:a1:bf:e5:55:fd:55:ff:
                    53:92:ba:b4:81:e5:ad:23:7b:07:d7:fa:26:2b:a8:
                    39:1a:e5:7e:e6:b4:08:dc:01:56:19:e0:36:3c:ee:
                    d3:b3:cb:2f:f9:b6:5d:ee:47:10:12:32:0a:ff:55:
                    e6:3e:93:3f:4f:7a:06:39:2d:f8:0a:ee:72:0e:3f:
                    8a:f2:d7:90:56:c1:74:8a:49:3a:22:3e:a7:cd:fe:
                    a8:72:5f:dd:58:39:05:a4:fc:a4:2d:71:b8:c8:b2:
                    d2:e7:eb:85:41:b2:fb:6d:da:a5:90:1d:c2:72:b7:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A2:1A:09:8E:8E:5C:70:A5:7F:80:8C:CC:BE:8B:FE:B8:B3:D0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79be29a7-9435-3c49-b6d9-2c7b79611732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2a:d5:47:b6:6e:7b:31:e8:cb:11:6c:c2:17:eb:bc:cb:fb:
         f3:c8:74:57:bf:ca:a1:c9:73:b6:57:6e:ee:a1:02:e0:de:ca:
         47:52:68:3b:c3:7f:d9:91:8d:88:81:ba:48:26:a8:e0:7e:93:
         d8:b6:53:ca:e7:53:5c:2a:65:63:aa:35:8d:e8:aa:41:51:26:
         9e:13:f6:73:df:d3:68:c9:25:72:a5:a5:de:49:43:c9:5e:e6:
         19:b2:f2:cb:0c:44:dd:f9:f9:c2:e7:30:92:1c:2d:d2:a1:bd:
         25:61:06:9f:d1:c4:59:85:a9:9e:40:20:8d:ac:aa:b6:bc:48:
         d5:25:a0:1b:b7:22:34:c8:97:81:11:2e:88:3b:a2:6e:a6:2b:
         7a:a2:52:c9:07:e6:31:96:b3:89:8b:d3:f5:b9:a8:96:32:2c:
         38:2e:8b:ad:7b:19:9b:40:b9:e4:3a:88:7c:20:b1:21:e9:88:
         56:f8:eb:4e:a8:aa:15:60:4f:f9:cd:49:ee:43:4a:b8:6d:57:
         e1:8a:ee:5e:88:c5:46:e6:f0:5b:ba:7b:a7:80:b1:55:7d:0b:
         9e:46:84:ff:01:86:6e:18:b8:68:f1:e4:e3:10:14:f5:85:4e:
         ad:b8:95:23:ce:fa:2e:ec:36:53:e8:cf:db:6a:46:6a:fa:97:
         1c:c5:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:10:51 2025 by rpki-client