Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e3ac92-1129-3fcb-95f5-ebc8148e0157.roa
File:                     e5e3ac92-1129-3fcb-95f5-ebc8148e0157.roa (raw, json)
Hash identifier:          hCz/lVwp1fJfYGVskeUwOfhLQP6vWOhRJ+TwmpV0OBQ=
Subject key identifier:   03:49:C0:8A:03:65:7B:27:C0:01:DD:AA:47:46:78:12:FE:5B:51:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7566239892611791C6B0A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e3ac92-1129-3fcb-95f5-ebc8148e0157.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        76.145.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:66:23:98:92:61:17:91:c6:b0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=10fc0cfc-3ce6-4d0e-a596-fc63bbd9affc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:eb:76:83:fb:4e:60:78:5e:87:c4:7c:ce:
                    95:78:2c:cd:32:84:16:ec:10:c2:31:c4:8c:f2:b5:
                    e7:01:f1:bb:4f:54:95:d7:a2:f0:e0:26:81:06:54:
                    3b:87:45:27:a8:a2:5c:df:1c:71:ef:8f:32:0c:fe:
                    89:2d:ce:4e:9a:c4:93:98:02:00:3b:15:cd:e9:08:
                    9f:02:bc:12:aa:a8:66:a8:4a:fd:9e:1e:57:1f:f8:
                    74:21:21:dc:be:ca:33:5f:e5:1b:34:b5:97:77:5c:
                    d6:85:54:f9:8b:7b:39:6b:48:42:31:e6:95:30:34:
                    63:9d:98:bc:75:18:e6:ca:76:c8:a3:83:ab:94:06:
                    e8:a0:57:6e:2a:93:a0:55:85:89:d7:32:17:81:d5:
                    97:e1:55:4a:72:ef:55:51:11:e7:91:6d:91:4b:24:
                    c9:3c:bf:77:97:b8:10:fe:bf:dd:9e:a7:ae:7c:c4:
                    90:53:c0:68:37:09:70:c8:da:95:0b:9a:28:2a:8d:
                    cc:25:57:11:00:46:b3:a5:be:5b:48:55:bf:a0:e4:
                    f8:45:9e:d2:7c:de:f7:4f:e7:64:81:79:01:ac:24:
                    32:87:70:86:f8:8e:76:83:7e:9a:48:5e:91:66:d3:
                    6b:dc:31:bf:0a:55:ec:d5:21:60:3e:81:99:9e:8a:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:49:C0:8A:03:65:7B:27:C0:01:DD:AA:47:46:78:12:FE:5B:51:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e3ac92-1129-3fcb-95f5-ebc8148e0157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:8b:b8:77:70:f4:33:e1:53:d2:0d:b2:22:eb:11:76:0a:b8:
         14:83:95:2e:c8:25:aa:9a:95:0e:e5:1f:c7:98:3c:10:28:05:
         15:e5:73:27:26:56:c0:4d:42:b7:6a:94:41:86:9c:8d:8a:6b:
         6a:96:aa:80:db:6e:83:95:8f:e7:46:b2:ff:bb:ea:8d:49:0a:
         df:b1:f1:c2:de:35:ee:e7:f0:8a:9b:2d:20:22:58:4f:86:1e:
         e5:7b:01:bd:4c:e6:fc:89:e9:71:bc:bf:3b:22:73:8c:f4:7b:
         19:1a:d8:99:ef:3b:4e:0d:38:67:cf:c7:27:13:49:98:ac:70:
         e8:33:71:f6:16:a9:4d:b9:19:18:e3:00:df:30:10:3d:a0:f4:
         83:bb:ae:fa:26:e5:43:d2:97:e8:d4:ed:12:f4:a5:e0:28:12:
         cd:23:d8:98:52:b2:d1:83:cd:03:a0:e4:69:51:af:7d:60:a5:
         fc:d0:c6:97:7d:5d:93:10:e7:94:46:d6:de:0a:4c:40:7e:2b:
         eb:f7:26:a6:2b:5f:2e:e4:c4:bb:8d:36:0a:7b:13:ab:30:43:
         97:1d:1c:09:e9:73:d2:42:de:8a:2d:81:14:7b:81:23:f7:bd:
         0d:6f:76:7d:b2:d6:d9:5d:23:55:b7:17:16:02:20:81:bb:f4:
         73:da:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:15:03 2025 by rpki-client