Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9561622-f92d-3101-919d-bc09e5e0d935.roa
File:                     e9561622-f92d-3101-919d-bc09e5e0d935.roa (raw, json)
Hash identifier:          xb1zHoPXafMcZmOiBGcvmUJuD384V/U1K0VRJb+2a3c=
Subject key identifier:   D6:95:B3:59:47:D0:B0:2E:2A:D4:2C:D7:B5:2D:88:EA:B2:0F:55:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05FFEA1ECB02057D663DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9561622-f92d-3101-919d-bc09e5e0d935.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        76.99.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:ff:ea:1e:cb:02:05:7d:66:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5d657dff-8d3c-48a9-a7eb-6722d2dbe7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:14:b0:6c:13:20:ef:fc:c1:3f:46:7f:c1:
                    8b:29:e3:2f:3b:9f:b7:b3:f2:11:84:3e:01:b0:99:
                    3d:32:0e:c1:b5:c1:3b:68:39:dc:1a:3e:68:b9:2a:
                    51:3b:9d:e0:4c:c3:a7:64:63:c5:6a:6a:76:04:23:
                    e2:1d:ca:fb:dd:4b:50:f2:9a:01:07:90:6b:df:d8:
                    56:65:52:c8:a5:03:b4:a3:d8:a9:07:f0:94:cc:67:
                    42:86:dc:bd:80:a0:5c:cf:0c:5d:67:8d:9b:7c:5f:
                    4d:f9:d3:70:b7:50:9f:83:5d:9d:4d:0f:0a:35:c5:
                    82:1d:5c:2e:e7:3e:7e:3e:61:ed:b1:aa:96:3f:5c:
                    64:f1:4f:ab:2d:eb:b9:de:93:fa:ac:cd:a9:11:fc:
                    c4:af:55:f9:6b:79:5b:14:76:c7:44:47:1c:c1:2b:
                    e9:31:3a:22:e9:e3:0c:84:b5:24:87:4b:28:6e:e6:
                    c1:b0:6e:71:8b:4b:ae:6e:35:65:4f:67:89:76:fd:
                    03:41:ba:cd:c7:db:a8:42:79:56:eb:85:c5:28:17:
                    3e:05:4d:7d:74:18:99:82:7d:da:29:8a:ae:83:24:
                    d5:67:b9:11:86:de:11:02:0c:92:43:40:9f:d9:ea:
                    b1:cb:4f:30:52:b1:0e:79:cd:64:c4:2c:2a:2b:ff:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:B3:59:47:D0:B0:2E:2A:D4:2C:D7:B5:2D:88:EA:B2:0F:55:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9561622-f92d-3101-919d-bc09e5e0d935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.99.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:68:4d:ac:92:fb:c8:27:9a:0e:da:18:6e:f0:b5:df:d1:6f:
         cd:c5:7f:8a:22:10:17:f2:ca:2a:b1:fd:ce:18:ed:48:c0:49:
         50:01:af:1d:25:de:a7:20:1d:83:44:25:8e:d5:4b:5b:e4:76:
         f8:9d:c0:44:dc:50:fd:85:87:99:0d:72:23:ba:f8:41:5b:49:
         25:17:c8:f2:b9:89:5e:23:11:19:7a:50:9a:08:d7:41:01:5d:
         cc:6f:a5:73:eb:08:11:a8:42:20:8a:56:c5:20:91:e9:3f:92:
         21:38:04:f0:42:a2:6c:ca:d7:0d:f6:1e:65:f0:e4:be:cc:93:
         85:a8:34:ab:02:76:b3:0f:24:cb:e2:7a:54:5f:70:5a:82:52:
         21:22:ec:d5:de:19:c3:68:5c:fe:04:8c:03:9c:36:b7:67:31:
         44:cf:a4:fe:05:f4:8c:01:36:01:75:86:22:d3:dc:45:88:70:
         7b:d7:dc:af:12:da:bd:32:d8:41:46:fb:ab:7e:a1:e4:1b:7b:
         51:60:0b:b4:31:4c:a9:86:2f:0b:8e:03:0b:70:1d:6f:6c:9a:
         e0:7c:f1:77:0d:a6:b8:1e:3a:12:f7:e2:c5:65:2e:3a:7c:9d:
         29:99:f1:38:b3:52:85:15:5d:38:87:70:64:65:da:de:23:3d:
         97:1f:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:22:26 2025 by rpki-client