Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b971b126-4772-3c09-ab4c-8b08fa593064.roa
File:                     b971b126-4772-3c09-ab4c-8b08fa593064.roa (raw, json)
Hash identifier:          LYZtcMEPoSHVyWPhNY7EKp1RpJjDLoETYcWaCI2TbfA=
Subject key identifier:   E6:DE:25:E2:C4:B2:D6:50:6B:B1:84:68:F7:DC:DE:25:EF:41:66:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431CAD01C1A77DA1B082100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b971b126-4772-3c09-ab4c-8b08fa593064.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        75.67.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:ca:d0:1c:1a:77:da:1b:08:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9ed395e3-4f7a-4f7a-9819-a8d2bb1d4f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:c5:15:f0:67:97:07:17:a5:6c:cd:bb:fe:
                    e3:85:1d:64:78:10:9b:26:e7:1c:46:06:07:85:af:
                    ab:ed:23:fe:03:27:fd:49:6c:44:bb:89:24:2b:73:
                    67:8c:ae:06:4d:33:c8:d5:ea:e7:c2:55:70:a0:92:
                    af:56:82:05:f9:9e:38:6b:73:7e:72:9a:2d:50:79:
                    b6:de:87:45:76:ce:e1:c0:bc:87:31:5a:09:7a:e9:
                    09:46:17:75:a7:58:94:dd:89:15:43:9a:73:79:cf:
                    ec:81:76:05:d6:5e:15:f2:aa:5d:39:b3:f8:50:78:
                    91:14:66:1b:e4:8a:ab:29:e9:00:76:9c:67:2d:d7:
                    cf:fa:47:1d:65:18:a2:e6:79:00:4c:ee:c2:6b:71:
                    55:78:d0:2d:eb:a7:2c:a7:b6:4f:02:6b:cf:c9:c0:
                    a5:b4:8a:08:02:ac:cf:6e:ef:21:96:46:67:df:e2:
                    fa:3f:ab:b5:bc:b6:31:7b:cc:3c:ca:4d:88:d7:51:
                    27:19:42:ba:d6:81:a0:e7:c6:0a:ee:36:00:f0:3f:
                    21:28:3c:ea:f2:41:5b:a4:db:6f:c3:0b:b8:85:d1:
                    ab:25:ab:4e:ff:48:e5:78:e8:06:cf:e6:71:16:06:
                    b2:f6:c4:ed:f2:7e:ac:c2:38:57:7f:0a:48:7d:b1:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:25:E2:C4:B2:D6:50:6B:B1:84:68:F7:DC:DE:25:EF:41:66:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b971b126-4772-3c09-ab4c-8b08fa593064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.67.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:74:03:27:47:9c:e4:29:d2:35:b7:9c:30:b2:38:9d:08:
         85:f1:30:d2:01:53:c6:57:91:89:f8:91:04:46:36:cb:83:b7:
         5a:aa:0f:51:a9:3c:be:d8:89:3c:0b:59:fd:70:a7:bb:af:8b:
         26:ee:4d:1d:15:e3:a7:bf:25:9a:f7:e0:db:66:57:dc:3b:7d:
         6e:4f:0e:39:a3:6c:7f:9b:34:89:92:ca:6b:4f:43:37:0f:a8:
         12:cc:68:42:c0:43:56:2f:1d:84:2c:7a:0b:5c:a4:63:59:d7:
         6c:05:c6:38:36:42:74:48:5b:13:d7:be:5a:09:0f:d4:2d:20:
         4b:ff:c1:a6:d7:c2:e4:1b:39:75:3c:fc:af:58:32:ed:02:ea:
         97:fc:2b:6f:f1:9a:45:18:4e:67:2a:0d:9d:d8:aa:cf:22:4d:
         0f:0a:38:0b:ac:3c:2b:90:9a:2b:d4:fc:ca:e4:13:a4:e7:5d:
         bf:d0:d2:57:69:16:f3:47:20:f8:c8:b5:47:d6:3a:72:d7:93:
         cd:c5:10:76:09:3f:aa:2a:de:19:6a:42:f3:6a:d6:3f:7d:69:
         ea:1e:e0:f2:3e:18:a6:f4:44:31:4c:56:fb:0a:0e:d6:2a:c4:
         42:64:6b:d9:b8:c0:4a:0b:e2:22:be:44:3b:60:d5:26:b6:3a:
         eb:70:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:54:56 2025 by rpki-client