Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa
File:                     9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa (raw, json)
Hash identifier:          OU579p57pFJaV+iCu45gHCRPkBXjEQXNoXWKA0nyQpQ=
Subject key identifier:   79:D7:2C:0A:4D:67:B4:89:3A:C2:D1:49:C6:49:3C:88:C8:01:61:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0731FCE65E649534694480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        76.23.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:31:fc:e6:5e:64:95:34:69:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0d11638f-573c-4469-8541-0a4119501667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:71:d7:38:9e:a7:4c:d9:f1:56:04:dc:24:
                    0b:28:2e:23:4b:31:88:da:27:68:41:36:91:ed:55:
                    77:63:24:94:e1:a2:70:be:6f:80:23:fc:d4:3d:42:
                    bb:3b:d4:9e:43:ab:8d:1c:c2:65:4d:7c:65:b1:ef:
                    32:3f:b4:06:0a:d2:a3:fa:e1:ae:ad:1c:46:97:d4:
                    61:75:8f:4b:9d:c8:03:53:e0:e1:aa:d7:9e:f7:eb:
                    fd:ed:ae:45:3d:1d:e6:c8:7a:75:88:30:70:03:2e:
                    de:ad:7a:77:be:ee:e5:bf:f0:92:a6:3b:ba:6b:b4:
                    13:22:e7:ac:c7:45:89:ce:39:25:32:b9:41:34:5e:
                    0b:51:36:7a:62:ef:2f:d3:93:f3:c5:ab:5a:4d:44:
                    ad:fd:18:45:a5:a7:72:71:c3:70:6f:ec:39:c0:f1:
                    22:26:c6:b6:83:86:b6:ce:ab:f4:83:76:20:f1:fa:
                    fd:a9:4a:11:29:53:df:64:de:42:50:be:81:d3:55:
                    79:ea:91:45:ef:03:ad:ad:88:7c:1b:2c:c2:8c:b3:
                    1b:63:dd:7e:53:2b:c6:08:95:96:c6:7b:dc:92:79:
                    45:b6:e6:04:36:6c:73:8c:83:17:43:f5:1c:46:8c:
                    2f:93:a6:3e:12:83:00:37:8a:e1:f9:da:75:62:a4:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:2C:0A:4D:67:B4:89:3A:C2:D1:49:C6:49:3C:88:C8:01:61:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:82:d4:87:0f:14:87:57:91:ba:2d:04:bd:24:ee:ec:2c:7d:
         6d:0c:ab:4a:f3:ce:3c:4e:fb:79:1e:02:f1:27:56:7a:35:72:
         92:ad:fe:ae:6c:9d:44:e9:5e:50:79:f9:3d:c9:2d:73:a0:d9:
         3b:82:a1:43:65:98:97:35:f1:ab:31:92:bd:83:ca:04:83:6f:
         0d:b4:be:8b:6b:bc:ce:1e:96:3e:6b:59:e8:24:d9:a2:11:a0:
         81:e3:c9:c7:40:e0:39:ca:46:9a:8f:36:fd:8e:61:e9:3f:3c:
         75:26:08:8b:b2:61:ba:6f:57:7d:92:3b:ae:a7:dd:af:2f:47:
         d9:73:95:f2:ca:8a:1d:f6:63:87:79:4a:21:19:47:4d:72:0a:
         e5:5a:78:e2:96:d1:81:6c:a5:9b:1d:58:08:5d:fe:ed:c1:4b:
         a8:cb:0b:96:26:82:69:c0:78:ae:99:3c:2a:1b:f1:db:f6:13:
         40:11:45:a6:7a:b0:72:3c:0d:14:e5:61:86:3e:52:35:f4:6d:
         0f:c3:88:4b:d0:e3:72:3c:6c:e3:c7:bd:4f:22:d4:39:0d:06:
         d0:1b:f6:f8:27:25:ce:cb:57:cb:08:ae:71:1f:17:30:f8:c3:
         bc:c8:79:4c:cd:a0:12:63:9f:6c:fd:82:97:ac:48:54:df:74:
         75:54:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:54:30 2025 by rpki-client