Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5cac3d7-95a7-3476-9078-22ea84c55d07.roa
File:                     d5cac3d7-95a7-3476-9078-22ea84c55d07.roa (raw, json)
Hash identifier:          kysHvjeBYsqSsNXVxbDubsT4E8U6u359MnuxdXeYvlE=
Subject key identifier:   98:D8:C4:9B:5A:EE:D1:91:5F:67:5A:1A:CE:83:30:1A:6D:23:15:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07AA5F56C68A2D63508900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5cac3d7-95a7-3476-9078-22ea84c55d07.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        76.124.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:aa:5f:56:c6:8a:2d:63:50:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=86d848ce-9bc1-49da-bf15-e15d1762d5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:64:87:5c:c8:06:c0:b6:71:4c:29:24:8d:
                    ef:e7:8f:ef:33:54:83:eb:ea:07:ec:4a:6a:4d:e4:
                    bf:04:c3:3b:45:42:57:d8:f7:d4:c1:8e:28:31:5d:
                    da:70:fa:30:28:06:b5:c1:70:8d:e5:3e:bf:fc:50:
                    e2:18:a1:26:83:ce:8c:18:5a:ce:a5:00:26:b5:d3:
                    53:dd:80:d9:d5:b0:66:70:b7:38:53:5d:4b:f0:fd:
                    72:50:98:ef:e4:3e:33:39:60:70:6a:07:e4:a5:2f:
                    a6:ec:ff:d3:72:6d:a7:8c:6a:1e:4f:5c:33:3b:bb:
                    e6:21:80:34:ff:ff:b4:e2:3f:b0:7e:a4:f4:98:b1:
                    70:61:5a:d5:9c:6a:39:39:0e:ee:70:7d:dc:09:1e:
                    ad:32:9d:72:93:56:be:a1:a2:99:63:42:92:8b:2e:
                    bf:e6:2a:34:b5:f5:fb:da:3e:bb:91:e4:a4:2a:77:
                    a0:36:b9:78:03:cb:42:d2:02:eb:21:20:d0:65:e2:
                    76:a2:fa:ff:83:e1:12:62:f1:ec:d8:ed:29:df:58:
                    52:9b:1c:6d:ce:da:4c:e4:c0:3c:8e:3e:43:12:39:
                    99:2f:6d:82:86:96:c1:69:91:d5:ef:e5:76:32:77:
                    4a:6d:7e:ca:8a:8e:49:1e:6f:d7:61:3e:3c:bd:d3:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D8:C4:9B:5A:EE:D1:91:5F:67:5A:1A:CE:83:30:1A:6D:23:15:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5cac3d7-95a7-3476-9078-22ea84c55d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:84:9f:1f:4a:47:20:76:05:23:33:7e:a0:9f:15:a1:b5:
         18:de:c7:53:ef:96:a0:c3:0c:40:61:45:8f:2c:b5:17:bb:b0:
         5e:ae:89:f8:93:c2:6f:f7:fb:ed:52:06:79:3f:fb:3e:f2:f7:
         fb:e2:50:03:39:ba:26:13:30:d1:ea:f9:e0:f2:02:b5:1b:8c:
         28:2a:0c:42:d6:28:5f:1b:de:bb:e1:ad:1c:bb:68:f3:b8:32:
         9e:9a:e7:6c:08:2e:93:58:00:fe:4c:41:d8:f0:fb:54:cd:61:
         92:7f:c0:60:8a:ea:b8:8c:1e:9a:16:cd:fe:73:77:7c:5d:42:
         ec:37:31:57:bc:44:33:66:c6:4c:06:62:f5:34:e2:f4:9c:df:
         9d:f7:56:72:c2:26:67:26:ba:58:6b:d4:d5:0c:2a:c4:54:68:
         34:e7:47:ed:69:84:dc:ca:f3:bb:79:9b:92:00:a6:fb:30:1e:
         1a:94:35:e3:ed:24:ab:8d:ad:f6:34:59:43:d6:01:a3:7f:59:
         9d:89:d1:f0:56:72:d1:dd:21:60:9c:c7:11:a0:2b:70:00:f1:
         99:7f:84:52:6b:64:83:2e:09:6d:fc:de:49:50:ef:79:64:a0:
         7b:d6:19:cc:fd:ea:32:7b:b6:cc:f1:c1:8c:2e:25:c9:fd:8f:
         16:73:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:36:28 2025 by rpki-client