Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb9e307a-bc7e-3c6d-87dd-f4b7842db057.roa
File:                     eb9e307a-bc7e-3c6d-87dd-f4b7842db057.roa (raw, json)
Hash identifier:          RzUHjfKuJgNvasdin/DQlJ2YoETRxZK+GI+tYm5BUY8=
Subject key identifier:   4A:1E:A1:17:B2:01:AB:77:1B:2B:A9:36:EB:88:42:93:1F:83:80:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43261679936301A06214F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb9e307a-bc7e-3c6d-87dd-f4b7842db057.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.142.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:61:67:99:36:30:1a:06:21:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4357563f-7965-449f-8053-23b7fe4f226d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:50:d6:28:a8:d7:2b:b0:70:60:df:62:d5:
                    70:96:82:f9:aa:e9:34:c0:d5:43:67:6e:2f:93:4f:
                    24:46:ac:4a:0c:27:c7:e8:0e:97:d2:13:d3:17:90:
                    8d:d5:f5:a0:e7:65:1a:43:9d:45:0c:17:dc:a9:8c:
                    1f:8d:e8:87:eb:8a:3b:03:b5:3e:b4:fd:da:20:6a:
                    04:24:07:c2:0d:34:97:1c:55:30:95:9b:52:db:e8:
                    f9:7c:9b:73:c1:10:00:8c:56:73:77:cf:1a:f2:2c:
                    df:da:26:9c:b7:ac:21:82:69:27:ea:c3:80:6e:ae:
                    70:41:da:9d:c0:25:9a:cd:53:9f:bf:57:d1:34:4c:
                    5d:dc:9e:4b:c9:36:14:d3:f5:54:e7:9e:a8:3d:12:
                    a9:0b:92:6e:50:84:4f:d0:48:e8:6c:75:88:bb:cb:
                    53:44:4f:17:43:e9:d8:7f:f0:28:ec:8b:09:06:37:
                    5e:29:2d:ff:33:96:a3:1d:ee:27:c9:60:1f:99:21:
                    37:3a:a2:56:45:4f:99:d2:e2:2b:80:34:09:54:3f:
                    6a:f0:47:2b:f7:5d:61:04:b1:e5:e8:58:6b:71:8f:
                    54:9a:09:0b:fa:c0:08:10:1c:b8:89:7f:fe:5d:d8:
                    1e:15:52:bf:b8:2b:d8:6a:88:60:af:a5:a1:2d:17:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1E:A1:17:B2:01:AB:77:1B:2B:A9:36:EB:88:42:93:1F:83:80:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb9e307a-bc7e-3c6d-87dd-f4b7842db057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:64:be:83:e9:3e:c4:0e:76:4b:56:12:19:91:97:06:0f:
         e6:43:4b:e7:40:f4:24:63:4f:e3:d6:cb:10:cf:d3:f4:9f:5f:
         6a:b2:f1:93:32:51:88:20:69:57:42:59:30:a2:8e:b1:39:ec:
         08:a4:69:b0:51:fc:b9:25:80:04:ab:8d:29:46:03:67:bf:4b:
         e0:31:f3:2c:c6:f5:01:96:18:08:56:cb:cf:55:9c:01:06:68:
         ba:ef:e6:f0:85:eb:27:de:39:7d:bc:e4:9b:cc:63:74:c8:68:
         3a:5b:b8:60:d7:40:e0:d7:bd:ee:de:9f:b2:48:87:ff:7f:9f:
         a1:6d:74:58:d9:0a:63:46:b3:ea:db:e5:99:a5:fc:f4:aa:11:
         13:30:d8:9c:7a:f6:0d:62:90:b2:ab:b8:b8:86:35:b0:1f:b3:
         2a:86:b7:b1:a2:cb:e5:50:ce:8a:af:10:5b:1e:dc:6f:58:c8:
         74:b1:71:2d:e1:97:3a:08:87:86:3a:a7:b5:fd:4e:63:6f:e9:
         d1:50:29:54:83:1c:76:b8:4a:e2:0b:5d:c7:23:d7:70:c3:91:
         73:e4:b6:11:c6:3c:77:49:28:81:f8:4c:bd:1b:98:dd:a2:90:
         d3:8d:49:c6:3d:d1:d1:53:b9:28:6f:2f:55:65:1b:38:f7:9a:
         52:e3:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:18 2025 by rpki-client