Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad16be2c-94ae-362e-a3e4-832958213679.roa
File:                     ad16be2c-94ae-362e-a3e4-832958213679.roa (raw, json)
Hash identifier:          DMiLufgipSYEZUS1Ob7m0BfHEFjv8/b0kaxO0PgqqPM=
Subject key identifier:   79:6C:D3:45:D2:24:6D:BF:0D:0A:0D:63:B0:EE:AB:B8:EA:2A:11:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0736590E69E13E6E3FDB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad16be2c-94ae-362e-a3e4-832958213679.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33660
IP address blocks:        76.149.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:36:59:0e:69:e1:3e:6e:3f:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f80e58be-c5ce-4d3d-af14-cd7e7d85e1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:a0:eb:65:d3:c9:08:dd:c9:c7:15:f1:aa:
                    b1:c3:5a:9f:28:a6:47:6b:b5:97:20:d0:af:3d:34:
                    51:28:18:dc:f0:ae:89:3d:df:95:44:6a:69:c4:39:
                    2b:36:7c:b6:41:e6:38:bc:cc:f9:e1:12:10:d6:51:
                    44:1b:66:15:a1:a5:ef:93:1e:e9:a3:33:33:07:01:
                    82:70:44:49:d5:dd:c6:56:93:09:f7:06:e5:e5:fe:
                    ec:e0:8f:39:a6:c5:e1:d0:ff:b8:d2:cd:da:3f:3c:
                    f6:9c:52:c2:d8:98:6d:af:3a:45:34:97:3b:07:dd:
                    eb:48:23:fe:db:47:0d:a4:7e:29:bb:71:7f:b5:66:
                    bc:08:6e:18:c3:49:60:2e:56:02:73:b5:8f:b5:c6:
                    10:48:ff:ee:29:5b:c1:46:38:9b:71:33:e5:67:3a:
                    7e:c1:ba:2f:39:cb:b8:ba:93:27:12:00:b8:c8:10:
                    ea:a4:79:42:8c:47:b4:1c:a9:31:ca:a4:09:af:c4:
                    7b:d7:c7:35:0a:72:88:ad:4f:f9:19:09:34:cc:90:
                    9a:99:d9:69:e4:a4:0e:c3:03:d7:f1:2c:6d:87:aa:
                    b0:f7:03:86:f2:42:c1:0e:10:f2:fb:44:46:ec:05:
                    94:d7:60:bd:2f:cc:dc:02:70:cb:c6:e3:41:63:6e:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6C:D3:45:D2:24:6D:BF:0D:0A:0D:63:B0:EE:AB:B8:EA:2A:11:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad16be2c-94ae-362e-a3e4-832958213679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:39:b0:aa:b7:f4:25:de:6d:96:39:70:fe:4f:80:c6:18:
         fd:98:a6:a2:80:c5:e3:67:61:d3:45:c9:57:27:77:53:2d:79:
         0e:94:4e:ce:eb:ec:f5:0d:85:d4:e6:43:1f:88:fc:10:4d:21:
         0c:25:57:2f:dd:8d:c4:6c:f5:68:6e:01:a9:c1:6b:d0:4d:11:
         b7:23:eb:2c:4f:9d:d4:06:61:9d:d0:c6:3b:0b:fa:6f:59:7e:
         a8:da:d3:90:b9:8d:7a:b3:ed:32:60:a9:c0:1c:9d:8c:47:24:
         d1:e3:10:60:02:f8:7d:af:56:b7:fc:54:1d:d9:98:af:3d:27:
         43:b4:11:31:64:ed:fc:d7:2f:6f:eb:92:b8:ab:c2:47:43:00:
         d5:44:5e:10:4b:cb:c1:9c:4a:bd:62:ee:9f:89:d6:82:3d:bc:
         29:64:0c:00:ef:b2:53:e9:67:80:6f:e9:93:ce:56:c4:b9:45:
         8b:74:6d:45:4b:18:f7:ec:5c:2b:f4:c0:70:2e:f2:84:e0:45:
         8f:a9:6d:0b:ed:a1:b3:51:68:76:10:67:61:2d:58:72:36:31:
         13:87:ac:4f:7f:5a:98:4c:49:01:a0:6a:f5:66:43:b1:16:ed:
         86:8d:1a:92:9c:94:a4:ea:fe:30:ff:3a:17:ba:26:a2:f3:c1:
         8b:87:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:11:30 2025 by rpki-client