Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa
File:                     e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa (raw, json)
Hash identifier:          mGO4XHM0NJ926EJuX/hObAqfmuEirbEYGZWEX01If20=
Subject key identifier:   50:02:03:6E:79:57:6A:AC:ED:D6:10:B5:DA:FF:76:C8:CC:B5:3F:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C070B3E0C12A7125DA010A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        76.126.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:0b:3e:0c:12:a7:12:5d:a0:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=96dae804-90a9-4940-bff7-380f97ab66f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:aa:a2:ab:45:07:22:d4:78:f3:21:c9:58:
                    0b:4e:02:c1:25:57:34:8b:14:40:4f:b9:30:5d:8d:
                    a5:60:06:5c:61:97:dd:4d:7b:37:b1:7b:ae:93:ba:
                    f0:94:46:c0:b3:4b:38:73:81:a1:4f:c2:fe:86:74:
                    5a:be:de:6f:d8:7a:e1:22:3e:21:32:d4:57:a0:b6:
                    80:7b:10:46:4e:a5:66:9e:c6:6e:f5:99:8e:dd:12:
                    f0:55:02:03:f4:ef:28:e9:30:69:44:ae:1a:d8:98:
                    26:d7:62:b9:ed:28:e0:29:cf:f3:79:a4:92:e0:7e:
                    6b:9c:90:5b:d1:2f:25:03:a0:56:25:40:67:aa:01:
                    14:bd:19:db:31:a8:a6:a4:72:6e:f0:77:2f:d2:fb:
                    17:88:57:19:2e:97:55:90:f7:d2:4f:b5:07:24:cd:
                    b0:35:01:3f:d0:08:1f:b5:58:f8:cc:97:9b:1c:8b:
                    33:65:51:8c:98:03:ab:c6:af:45:1c:02:9e:63:00:
                    a3:80:1a:09:22:9f:76:63:11:78:0b:0f:fe:71:45:
                    39:0e:5d:ac:1b:83:47:0b:fd:e0:05:7a:cd:8c:fa:
                    53:27:b5:5b:0c:a6:7a:e5:10:a6:8e:5e:20:ac:17:
                    3d:bb:b5:d9:62:74:a4:12:e1:96:46:71:71:3a:50:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:03:6E:79:57:6A:AC:ED:D6:10:B5:DA:FF:76:C8:CC:B5:3F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:67:94:7b:05:16:54:d4:be:39:56:f1:c2:a9:b7:d5:95:
         f7:b6:18:42:c1:b2:6f:8e:eb:3c:34:5c:c4:b1:f4:88:d6:e7:
         ad:70:b2:1b:30:b2:c9:22:74:8e:50:f4:96:bf:b9:b7:ae:a4:
         0b:e4:e2:45:f6:05:83:36:fd:b4:f8:2a:ca:8f:43:3f:de:d3:
         d4:45:5b:60:db:b4:67:2e:e7:24:3f:07:eb:2b:1a:12:04:8b:
         4e:16:b3:ac:75:37:dc:4d:a2:7a:29:0f:14:4c:76:53:22:49:
         bc:21:d0:35:31:d3:39:26:28:fd:c4:3f:5b:ea:25:51:99:16:
         13:fa:7f:78:52:4e:71:38:68:b8:61:27:96:36:6c:37:4b:34:
         7b:e0:21:b7:cb:b3:61:2d:3e:64:d2:c3:ec:0f:32:34:06:5a:
         0c:0e:f0:85:10:8e:7f:71:27:05:7f:ee:d6:c3:0a:3a:a9:22:
         46:98:af:9d:5d:fc:2b:95:56:8e:b8:fb:49:53:48:09:c6:1c:
         86:aa:88:c8:ae:af:48:e3:b9:08:63:e8:40:41:49:0a:78:15:
         29:5f:09:9b:a8:fd:72:d2:0a:24:c2:ae:83:40:eb:0d:93:bb:
         eb:4b:72:04:32:d0:47:09:4c:63:27:bd:9a:54:cb:e9:68:b2:
         bf:e0:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:19 2025 by rpki-client