Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ab1b71-59af-3550-97ef-c696bdbbf9ce.roa
File:                     b0ab1b71-59af-3550-97ef-c696bdbbf9ce.roa (raw, json)
Hash identifier:          m+6IAFkC3SE9Nsqg3yBrFLcRdPCXvv0gpDQb5uphUkg=
Subject key identifier:   DD:C2:FC:F7:79:5E:CA:93:EF:2C:90:E9:87:83:25:EB:3F:D5:03:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07119DC6F68DC6907F2E60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ab1b71-59af-3550-97ef-c696bdbbf9ce.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        76.21.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:11:9d:c6:f6:8d:c6:90:7f:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f4a817af-cec2-491a-9903-4b9e9d85ee73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:42:a5:1e:c2:c6:f6:ec:5f:f3:d8:ec:97:
                    2b:5c:89:d7:ac:2a:90:0e:48:76:05:c8:2d:8d:46:
                    01:0d:be:50:33:d2:f4:4f:39:59:56:1d:38:8f:d5:
                    d8:74:a0:1c:7a:2d:1a:c8:76:a3:66:a7:f2:84:f5:
                    c0:8d:be:e1:f8:cb:3a:5b:ba:24:81:94:f7:39:57:
                    8a:8b:98:c0:0b:4b:05:74:39:75:b2:2a:b1:ec:49:
                    13:8e:0a:95:48:c2:d0:1d:2d:e3:81:7a:25:64:1a:
                    d3:93:56:d4:29:a5:8d:43:13:fe:d0:e6:f1:12:f9:
                    bf:d4:8f:6d:8e:8a:e7:40:66:69:1f:06:d1:bc:81:
                    79:1c:21:ed:5f:68:08:d9:93:d0:48:27:6c:77:55:
                    3f:f4:b5:2c:83:d2:75:41:79:02:01:3a:7d:ef:92:
                    73:15:72:b6:ce:11:67:96:2f:ac:58:b2:10:5c:b9:
                    84:39:99:cb:bf:45:f8:e3:96:4a:e9:37:e3:d1:f6:
                    c3:94:50:9d:53:90:0d:ba:57:81:b7:b0:55:84:ff:
                    77:65:31:1f:0a:65:b9:9b:e3:b6:7d:de:a9:fb:90:
                    a3:20:5b:33:7c:18:d3:18:5d:dd:34:e0:81:57:be:
                    cc:80:c5:59:a4:1c:02:f8:d7:9a:ce:1c:11:0e:11:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C2:FC:F7:79:5E:CA:93:EF:2C:90:E9:87:83:25:EB:3F:D5:03:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ab1b71-59af-3550-97ef-c696bdbbf9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.21.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:57:7d:bd:b7:70:ee:63:c9:3e:7f:ee:49:ac:9c:32:96:3e:
         37:0b:4e:e9:f9:b2:6e:48:9f:4f:48:f7:7b:c5:74:6f:ac:88:
         0a:de:76:e5:b4:65:2c:c0:9c:51:82:54:95:f7:72:09:eb:c5:
         53:8a:b0:31:d0:04:ce:88:08:d7:01:86:fb:94:86:97:ce:fd:
         3c:ff:90:68:62:dd:d0:fc:11:2c:50:31:e0:92:e6:c6:7a:2b:
         70:eb:54:69:93:c7:53:0c:a2:61:14:90:69:a7:c0:5b:a4:c1:
         09:2b:5b:31:d4:df:73:39:23:68:00:40:03:82:a9:5a:6a:6f:
         8e:13:f5:87:30:37:e8:63:6d:ce:e2:ad:0c:ca:c8:83:7d:cf:
         1c:2e:dc:d5:d3:47:40:17:c0:c8:93:1a:3c:31:4c:3d:13:74:
         64:a5:01:c3:4b:51:f3:a7:ab:b9:c5:2d:3f:cd:e2:a1:f8:d6:
         50:06:c2:88:99:d2:65:94:12:d5:1a:69:ca:6b:fa:e5:83:a1:
         7f:85:df:1f:23:55:50:7e:0f:ef:74:d7:a0:93:38:fb:9e:a2:
         98:b8:52:f8:4c:54:14:bb:c1:be:90:12:4c:2c:09:f1:fc:ca:
         60:1e:6d:7d:cc:7a:34:f4:7d:8e:5c:2a:c8:3a:16:b1:36:93:
         a4:38:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:59:24 2025 by rpki-client