Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e350738a-63cf-3294-9c4f-98225673db7e.roa
File:                     e350738a-63cf-3294-9c4f-98225673db7e.roa (raw, json)
Hash identifier:          LLLxnIy2GwpPiBHEEoAcRTmPKX2AUBJ2nOHGUfMa6VM=
Subject key identifier:   37:36:2D:91:0C:EA:09:6B:05:70:17:81:3E:35:46:E1:C5:F6:C7:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C084B7720CB5129679C0C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e350738a-63cf-3294-9c4f-98225673db7e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        76.139.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:4b:77:20:cb:51:29:67:9c:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=feab212f-b40f-4ea5-b2f1-785b0b247b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:3c:f4:b1:65:82:c7:10:ff:c6:bc:47:5f:
                    7b:ff:3d:60:d4:96:4a:23:e0:0e:50:28:bc:13:cd:
                    65:4b:56:4d:4d:ac:c3:3c:7f:19:69:38:d4:4f:a6:
                    5b:c8:66:85:e0:3b:bc:24:b4:e6:19:0d:90:44:ff:
                    ed:4a:04:d2:0b:ff:d1:42:3b:45:42:f8:47:f4:66:
                    a6:5b:b2:0e:2a:2f:8e:2b:c2:98:c4:d1:8b:a7:87:
                    ef:da:1e:23:da:62:cb:61:1d:11:2c:63:f1:64:8d:
                    c3:d5:b9:d6:57:a0:a7:05:8b:a1:89:f5:01:56:cb:
                    6d:79:de:b8:fc:e9:0a:9e:b3:68:7c:aa:a8:25:6b:
                    38:cb:d7:79:57:5b:5c:53:a1:3d:71:9d:47:2e:e3:
                    ad:52:10:49:96:e9:2c:6e:35:ff:4f:22:15:aa:86:
                    5c:50:4a:b6:fa:a7:51:f4:ba:98:7f:ed:36:07:03:
                    61:16:5e:f4:6c:8b:8e:33:57:7f:55:79:63:c1:50:
                    49:53:13:65:5c:35:ab:26:37:fc:53:c4:c2:86:02:
                    c2:c0:7f:5c:2e:d8:51:9f:5f:d7:ec:c1:25:96:5d:
                    6b:7d:82:75:4d:3b:5a:4c:b3:17:97:63:a8:59:29:
                    ff:d9:b8:d8:e0:1d:07:30:ab:b0:15:e6:5c:bc:ca:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:36:2D:91:0C:EA:09:6B:05:70:17:81:3E:35:46:E1:C5:F6:C7:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e350738a-63cf-3294-9c4f-98225673db7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:d7:af:16:6c:81:aa:4f:dd:e2:74:da:63:f8:f8:a8:23:
         41:6d:d4:34:bc:71:2f:cb:9c:b6:27:37:3a:f7:05:aa:f2:20:
         42:0f:11:be:a6:2a:2a:a2:46:38:cf:e5:28:25:16:18:35:60:
         f4:bd:2d:d9:4a:9a:b7:c9:38:da:a3:23:fc:99:42:e8:49:fa:
         75:95:c3:cd:a3:10:b0:a8:05:5f:1b:e2:e7:f0:f9:6b:3d:76:
         9e:45:9d:9c:b7:5a:f2:45:da:69:54:49:d9:a0:32:86:8f:6e:
         7a:67:7e:2b:84:77:a9:10:e7:40:a1:87:9d:e2:90:d9:c5:5f:
         b6:54:a4:19:16:50:68:3c:aa:49:aa:06:8a:6f:0b:bf:09:f0:
         f4:18:03:f0:b5:fa:df:00:7b:ee:77:7c:44:06:6e:95:1d:f1:
         ce:6d:36:1e:83:54:e3:5c:05:5c:f2:fa:71:aa:c4:26:31:cb:
         38:81:f8:96:f5:65:df:89:fb:b0:6f:44:4e:80:57:1b:87:94:
         bf:5b:89:e3:d2:91:e5:4e:ea:65:27:24:08:7c:b7:4c:04:da:
         8c:0b:d7:5b:e6:e7:ce:e8:6f:90:4d:9c:e8:fc:4f:69:3c:95:
         95:f5:c8:2c:fe:53:69:c1:9f:ce:d6:8f:1b:9f:14:ae:75:35:
         ee:ae:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:24:20 2025 by rpki-client