Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa
File:                     9cc09b8b-3d2b-385e-a9ac-443094369442.roa (raw, json)
Hash identifier:          yGHeKmA/QUmXiVYW+YxE6/5A0Yh5QpWrKyAHbNOdUKA=
Subject key identifier:   87:1C:C0:7F:21:77:61:31:EE:FA:56:7C:D1:E6:5E:32:CE:CB:A0:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0848D4BE2B2D12DC7FCDE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        76.136.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:48:d4:be:2b:2d:12:dc:7f:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4e70c20e-523f-4f4d-96a0-a41c3059f904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:88:76:2a:2e:aa:29:8d:ec:a3:21:02:2c:
                    f2:f1:5a:fd:c9:34:35:d6:15:c6:e9:66:a9:47:07:
                    c7:38:35:70:4c:7b:b2:6e:75:5f:48:47:06:34:79:
                    24:ba:2b:e2:7b:98:98:87:2a:37:2d:4e:ea:c7:ba:
                    69:9e:32:e2:bc:73:7c:7d:ab:fc:fb:f5:40:db:a4:
                    90:41:ad:d3:56:67:c6:a6:5f:83:aa:84:58:81:6f:
                    f3:04:05:a1:8d:90:28:0d:23:8b:2f:96:3c:ba:7f:
                    48:76:f4:e4:4d:71:ab:ba:97:26:2c:79:a2:22:6a:
                    af:8c:8e:7c:67:7e:34:04:74:49:51:4e:ff:9a:f6:
                    9a:0e:9d:a5:80:46:8f:00:9a:a2:7b:a0:cf:2b:49:
                    14:68:0c:53:66:29:79:d0:11:6f:71:41:92:8a:7d:
                    22:a8:6b:6c:6c:bf:36:4e:43:1a:a9:b3:a2:f5:d4:
                    16:41:70:04:23:b0:cb:89:02:42:6a:0c:c8:67:bb:
                    02:0f:4c:76:0e:9f:e7:e3:9e:ca:88:2c:b3:f1:e6:
                    1e:46:3d:37:f6:e0:35:2e:1d:81:96:73:e5:96:55:
                    9f:ed:16:50:80:48:63:b7:10:7d:d7:ab:55:b2:62:
                    72:10:2e:71:3c:f7:26:fb:f6:03:9a:80:65:81:04:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1C:C0:7F:21:77:61:31:EE:FA:56:7C:D1:E6:5E:32:CE:CB:A0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.136.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:e2:e9:58:ab:ca:c6:3d:87:e2:bb:c4:ca:49:4b:37:ec:
         37:a1:cb:3f:4b:0f:9e:0b:66:a4:35:a5:7a:6b:17:1f:f2:cd:
         34:0a:5b:51:2b:85:1c:d2:39:f7:a5:b1:f8:67:dc:63:02:c0:
         b7:b4:b1:05:ba:c1:18:6a:de:7b:98:3d:a6:0c:82:0a:6b:29:
         b9:fc:87:58:f7:ba:02:b4:51:fb:51:20:04:b5:8d:74:54:11:
         d2:be:f0:89:2a:70:04:8d:c3:c9:a7:a3:2a:5e:7e:78:7a:5f:
         1c:38:8b:bc:a3:e6:57:f6:84:b1:48:7d:85:43:a6:48:b5:8d:
         37:19:e7:80:d6:bc:ef:52:5c:fc:fb:2d:33:76:75:3d:42:4a:
         93:15:7d:91:58:ea:72:56:8c:61:b7:86:b7:f8:e5:bd:d4:01:
         76:18:08:b8:d7:06:ca:7b:d5:65:30:22:4e:ad:5a:04:26:bf:
         52:98:f0:f3:95:e8:fa:fe:8c:38:28:92:16:a7:1c:4e:c9:a5:
         d0:f9:52:78:49:97:d0:c9:c4:36:6d:87:34:d4:67:f6:63:eb:
         7a:77:a4:fe:07:1c:66:fb:06:ab:08:c4:44:ac:11:b1:ba:3c:
         46:7e:ef:19:06:c1:3e:bc:d9:11:00:e4:7a:50:dc:84:a8:11:
         86:ed:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:06:57 2025 by rpki-client