Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99566cc6-f9b9-31f4-a0b2-bd24808da134.roa
File:                     99566cc6-f9b9-31f4-a0b2-bd24808da134.roa (raw, json)
Hash identifier:          l7foi+BDu0Vcp3UX/KNrWgTB8+Bjk1zRLUh4CbVWWiE=
Subject key identifier:   15:8E:5F:46:9E:68:60:F4:50:E7:04:7C:57:64:69:CA:AF:8F:7E:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB044AA02A8906CE6A0C0B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99566cc6-f9b9-31f4-a0b2-bd24808da134.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        76.149.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:44:aa:02:a8:90:6c:e6:a0:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=59ea8c2e-f6af-4725-917a-5ff9e2288277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:b8:e2:20:ad:4c:43:38:b9:df:a5:4b:33:
                    ec:28:35:3a:bb:0e:6c:a1:05:c2:a2:20:b9:7b:1b:
                    a1:71:b8:b6:2e:29:4d:59:03:a2:3f:2f:85:6c:24:
                    41:99:eb:a6:50:d4:2c:dd:2a:be:e3:dc:ec:e0:ea:
                    28:7b:d3:68:c8:50:4f:e5:b7:11:04:ec:78:bb:0d:
                    40:70:1a:2f:4a:d0:6a:e4:1e:c6:1d:ef:c0:73:0f:
                    5e:a9:6e:d7:45:71:2d:7b:04:4d:e6:75:a2:25:b8:
                    34:f2:85:ef:51:35:4b:01:3d:94:e8:0a:39:66:15:
                    c8:fe:6e:3e:d2:a1:0f:ff:39:e1:c4:85:bd:78:3a:
                    b2:d5:7f:8f:e6:b1:81:e3:45:b8:fc:64:e7:d9:16:
                    3a:10:f8:a3:f1:93:19:af:e8:96:d0:9c:ee:eb:79:
                    2b:f4:6b:a2:bd:34:85:eb:90:08:8a:89:d2:77:c7:
                    62:5c:93:80:09:d2:51:08:4c:ce:64:0c:1c:e8:b4:
                    26:0a:87:14:96:d3:70:24:c5:74:bb:e4:d2:92:63:
                    40:cd:3b:91:bc:81:e5:e3:af:a2:09:29:be:1d:66:
                    bc:45:60:27:77:2e:5c:f0:9c:d5:75:dd:70:27:bd:
                    8e:6d:fc:91:9d:3b:f0:39:a1:d8:84:6f:ac:d6:5d:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:5F:46:9E:68:60:F4:50:E7:04:7C:57:64:69:CA:AF:8F:7E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99566cc6-f9b9-31f4-a0b2-bd24808da134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:a6:8e:a6:cf:b8:57:66:da:23:01:fc:ae:61:b2:46:34:
         7e:c6:3b:c0:63:2d:e9:9e:70:36:2e:8c:e5:54:b6:09:30:55:
         79:93:eb:9a:06:c2:47:8d:d1:29:eb:f3:cc:d0:97:28:29:7a:
         9d:09:54:7e:d3:be:7e:ec:97:09:a6:1d:51:ac:00:04:64:8a:
         19:ed:b6:99:a9:ae:7a:64:7b:3d:24:04:35:41:a3:dc:fa:a3:
         12:04:b2:83:94:55:6b:83:82:87:5a:98:21:ac:19:bb:9f:b3:
         ca:20:bc:d9:77:86:ad:f1:4d:db:dd:52:86:8f:24:b7:15:3e:
         17:b1:0c:9a:d0:f6:b1:35:a2:e2:b5:50:91:01:4e:e9:46:30:
         98:ac:e3:19:c9:13:0d:bf:b8:9f:41:d4:62:14:b5:be:43:58:
         df:6c:b9:e3:94:84:4e:61:95:4f:67:da:c9:60:54:a7:97:5a:
         68:a0:a9:7c:9e:ce:71:d2:dc:ec:b4:82:2d:ab:90:61:0e:14:
         55:10:5b:fd:9e:0b:dd:d8:3e:21:63:96:0f:f8:95:33:cf:80:
         fb:73:6f:d5:58:0b:25:78:8d:e6:8f:85:91:1b:27:79:15:08:
         44:76:42:cf:89:32:16:a6:eb:82:8e:a9:22:68:64:23:ff:bf:
         fe:36:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:09 2025 by rpki-client