Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c47c49c3-0824-3713-b203-1b8c2aec55dc.roa
File:                     c47c49c3-0824-3713-b203-1b8c2aec55dc.roa (raw, json)
Hash identifier:          Cbai1AoeSa9onBScUPepJP02PnRLA7oc7funPvdwtJI=
Subject key identifier:   4B:AF:60:95:DE:D3:EC:95:EB:73:58:07:B8:52:8F:7A:A6:BC:97:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16580EA386A5173BD3C4080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c47c49c3-0824-3713-b203-1b8c2aec55dc.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        76.138.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:80:ea:38:6a:51:73:bd:3c:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=d41a0935-20a5-4064-bf98-e1e84280e6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:53:30:ce:3f:b4:4f:ba:47:82:76:ae:3e:
                    51:c3:7a:79:a7:09:b3:47:d3:20:5b:8d:16:96:0b:
                    48:58:33:11:6c:1d:45:17:e0:c5:76:e1:b5:b5:17:
                    d5:54:78:5e:a8:3f:66:4f:97:98:f8:81:61:f3:ad:
                    7f:ff:6b:e9:65:50:35:6a:87:99:f5:7b:52:8c:04:
                    d0:4f:47:a3:cf:0c:da:58:3d:41:02:65:f0:d3:3c:
                    49:37:90:4a:5d:3d:92:08:54:34:0e:3a:57:e5:39:
                    3d:30:0d:9f:5d:0b:4c:50:24:4e:9e:2c:ad:ad:e9:
                    94:f1:22:86:2f:eb:e0:89:a1:f1:4b:1f:c4:80:26:
                    5f:fc:b6:34:27:df:fd:3c:2d:78:be:9e:33:d0:b0:
                    c2:db:44:8d:f1:e8:7c:62:17:1b:01:2b:ab:68:06:
                    1b:38:6d:06:e8:c7:be:ea:34:a9:bd:3e:38:68:0d:
                    fe:66:d5:57:35:57:36:5d:60:3b:56:ed:b5:60:53:
                    f3:81:8e:94:6b:b1:f2:33:ef:09:ba:b8:d9:c1:82:
                    cc:cf:ae:fd:13:33:44:2a:5e:9b:fe:0e:d0:b0:fc:
                    7a:5a:54:3c:b1:24:50:f4:24:76:a0:98:d7:d4:ea:
                    23:3e:fc:39:b6:b8:b0:e7:4e:1c:27:ef:b8:dd:ee:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:60:95:DE:D3:EC:95:EB:73:58:07:B8:52:8F:7A:A6:BC:97:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c47c49c3-0824-3713-b203-1b8c2aec55dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3e:ba:b7:d6:0e:98:d2:39:b8:5f:6a:38:58:76:c5:74:86:
         fd:38:a5:d4:2d:5b:f1:cc:82:24:80:09:a5:36:ac:c3:ec:0d:
         4b:7c:21:80:a9:57:8f:8a:0f:00:a6:09:bc:2b:08:c0:37:ce:
         76:3b:8e:0d:15:20:1b:23:b1:00:d2:43:ea:e9:0a:99:6a:d2:
         c6:7c:1d:ad:5a:74:6f:df:19:e0:a2:76:20:2b:ed:cd:e4:a8:
         53:d3:35:3f:a9:61:e2:a1:b3:19:13:c4:e3:01:b8:25:2f:b0:
         4d:d3:03:d2:fa:26:5e:c0:6c:39:81:bd:fa:31:00:57:a2:03:
         e1:21:49:4a:05:17:d8:eb:6d:56:80:c0:c5:37:eb:e7:09:20:
         1d:67:c7:0f:81:76:46:1c:78:1a:e7:80:29:9d:d6:bf:7a:23:
         a1:f4:dd:9b:a1:b5:5d:03:6d:58:24:07:af:4b:16:7c:b2:70:
         99:60:84:e6:97:22:60:d8:da:9f:97:2d:d3:44:79:92:84:dc:
         d6:8e:a1:c5:f9:39:46:7d:dd:ee:96:34:94:7a:45:dc:85:af:
         20:14:b5:27:13:f4:cb:31:bb:62:34:66:db:6a:a2:e1:ed:03:
         18:fe:37:4c:42:ad:a4:e3:d4:9a:3a:34:d9:98:ff:56:aa:1c:
         f0:a1:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:10:36 2025 by rpki-client