Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdd2983b-5867-3067-8312-c85b76e7e267.roa
File:                     bdd2983b-5867-3067-8312-c85b76e7e267.roa (raw, json)
Hash identifier:          DbaNkwLIhr4cpW3051NL3BYAK2JVwJY0Oi3apfT5QZA=
Subject key identifier:   E1:1A:4B:33:5F:F8:B1:97:13:AE:A8:15:28:9F:E9:03:1E:3F:84:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06A1D3B73486F7231C0F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdd2983b-5867-3067-8312-c85b76e7e267.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        76.141.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:a1:d3:b7:34:86:f7:23:1c:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=58e469af-14a4-4cce-9cf2-b740a7d53231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:13:63:16:16:33:a9:d7:8f:57:3c:5f:ea:
                    6f:b9:36:10:ba:88:f5:70:58:d8:87:44:56:ca:e9:
                    94:ad:78:f4:14:7d:b4:91:73:e8:69:1f:5a:eb:3b:
                    c4:3d:c2:2f:49:58:dc:04:23:a7:c5:e6:10:08:a2:
                    b5:02:fd:ce:93:9f:e7:ad:0f:64:2c:1e:18:44:c8:
                    c3:17:e0:c3:0b:93:76:2d:1d:74:5b:cb:e9:19:81:
                    7b:19:ba:e6:3c:12:55:77:ac:b3:14:8d:94:00:31:
                    0e:a1:56:4d:be:85:1b:75:4f:16:c7:09:c6:bc:5e:
                    ff:66:a6:ae:2d:72:46:2d:ad:82:02:67:4e:42:d4:
                    be:3a:bd:ae:4f:8b:0d:a0:ab:cc:ec:97:03:37:3e:
                    8e:d2:61:bc:34:60:5f:08:56:b4:61:c3:9f:1b:2c:
                    79:2d:81:07:3a:ba:a7:e2:b2:a3:47:8c:06:35:22:
                    69:a5:9b:d5:68:38:93:c8:95:3f:46:d2:1d:9a:ae:
                    f0:7f:e4:11:d3:1a:80:e3:b5:8d:c0:26:3e:a2:e6:
                    ed:19:e3:85:15:9e:54:1f:41:4a:72:e0:89:2f:31:
                    9d:64:a3:79:b6:9b:0a:6c:c6:21:a9:e5:2b:88:f7:
                    b0:b4:bd:b8:33:ad:1b:10:70:00:7c:5e:77:47:3f:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1A:4B:33:5F:F8:B1:97:13:AE:A8:15:28:9F:E9:03:1E:3F:84:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdd2983b-5867-3067-8312-c85b76e7e267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:95:d2:0a:75:c5:88:c5:e7:30:51:a9:90:f7:06:61:04:3c:
         b1:31:97:6f:b0:1d:e6:02:c0:4c:d0:c4:86:18:6d:38:77:c2:
         23:5f:b0:98:d9:37:0c:9b:35:5b:41:79:eb:60:2e:af:47:34:
         93:76:2e:01:3b:3d:54:e8:2b:85:d7:cb:4b:98:74:69:df:91:
         1c:11:c4:10:bf:8a:59:3d:38:49:b2:01:2a:d5:e0:6f:c9:a1:
         f8:e0:c1:2c:5a:3d:da:c2:25:4d:4c:7f:84:b2:2d:90:62:6e:
         31:c5:99:96:e3:bf:54:08:e8:81:94:9e:b7:1d:73:05:16:8f:
         92:ea:f2:8e:5c:d0:57:d1:2f:37:10:b8:cd:c2:2d:5e:c1:7d:
         6d:cd:37:c0:27:14:6e:14:72:69:48:09:e0:52:2e:b6:a9:de:
         6a:c0:fb:f6:37:43:f0:b5:ec:cf:9c:2e:69:51:1a:e7:50:8f:
         6a:12:50:5d:c8:d4:70:15:24:35:d6:ba:89:8e:7a:ed:11:2e:
         30:87:94:65:fa:1a:13:0f:9f:93:e2:49:8e:ef:63:65:14:14:
         a7:e2:8b:3d:a4:9b:af:e8:20:61:8b:23:60:78:ac:d1:89:11:
         9a:9a:31:30:81:44:5d:5c:25:a7:d7:e3:1c:5c:e4:ab:97:84:
         69:56:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:48:48 2025 by rpki-client