Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f086d862-0608-3c70-8645-4c4efd66949c.roa
File:                     f086d862-0608-3c70-8645-4c4efd66949c.roa (raw, json)
Hash identifier:          yn0Z8QAAqTA+npUzXvgjcH/suPU2wbOyRIgvD7+BzrU=
Subject key identifier:   12:B4:55:E1:0D:87:84:1E:84:FB:FC:A7:FE:DA:F8:7C:5E:F5:E9:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432640ED9252F48A5DE1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f086d862-0608-3c70-8645-4c4efd66949c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.143.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:64:0e:d9:25:2f:48:a5:de:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ae3661be-5407-4b85-b23d-45687f1fefd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:92:e4:1a:44:ab:fb:bb:ea:1c:a2:40:e5:
                    e4:e7:5a:9a:a2:7d:0b:b4:d7:d0:fb:e2:62:c3:0e:
                    1d:e6:91:63:f0:ae:b4:c2:50:ed:b2:49:c1:de:54:
                    2c:87:ca:41:e9:07:ce:a3:28:b8:58:f2:97:16:2a:
                    1d:47:34:33:d5:f9:af:85:a6:d2:73:1a:7e:5b:b3:
                    08:06:53:49:c0:7b:e6:30:68:ba:4f:08:1b:99:b0:
                    b2:ed:ce:ff:c3:89:e2:d4:eb:8c:bb:90:cc:53:2c:
                    cc:73:a4:3b:33:65:d9:e6:e5:12:75:04:c1:30:6d:
                    ab:30:bd:d4:98:8b:be:5c:f9:b0:74:fb:65:98:65:
                    b4:28:ac:75:e9:1c:f6:33:85:3b:a8:73:2a:46:11:
                    86:ba:dc:4c:32:cb:88:ac:79:79:01:77:1b:59:6a:
                    4d:96:8d:66:70:d5:5d:96:ff:15:c6:01:82:4f:86:
                    1b:7e:a1:12:c2:06:cf:7e:d0:b1:29:10:ed:68:ba:
                    84:5a:7f:ba:bc:45:a6:fe:af:05:b4:a8:1e:8f:bb:
                    59:b8:c5:01:5a:69:e9:0e:46:ad:8d:d3:93:3f:17:
                    54:62:4d:27:18:3b:bf:4c:f7:88:a1:07:02:2d:74:
                    ee:dc:84:8c:46:08:33:6c:ee:a7:06:99:fa:06:08:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B4:55:E1:0D:87:84:1E:84:FB:FC:A7:FE:DA:F8:7C:5E:F5:E9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f086d862-0608-3c70-8645-4c4efd66949c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:28:ab:e2:81:f6:ee:15:66:f2:95:29:f5:63:46:53:8f:
         67:10:9f:fd:8c:5b:bc:59:b5:3a:eb:8b:2b:11:9d:2b:99:61:
         d2:71:3f:25:2a:4a:ca:14:e0:79:85:e0:7c:36:01:d2:8b:58:
         1f:52:92:07:a1:c4:33:71:79:ab:97:7c:b4:f4:77:a4:2f:93:
         1a:b5:4b:8c:82:ea:e5:03:c1:88:7a:20:67:39:a2:b5:7f:fd:
         35:3b:24:01:7e:94:c5:fc:35:e1:0b:41:0c:d8:db:5a:82:73:
         68:75:5d:6d:95:34:ef:dc:c9:b1:dc:03:fb:b9:9a:12:54:e6:
         a5:24:f5:87:89:9f:4a:d0:d6:1e:a7:74:cc:65:68:75:d4:3f:
         18:1f:8a:15:6b:d3:c5:42:3b:7a:15:a0:7d:37:b7:75:bc:28:
         d3:aa:13:c2:38:72:f1:04:f3:2a:ce:73:e5:a6:23:fd:6e:35:
         86:56:5d:f1:be:0e:16:ac:1d:49:ae:63:20:2b:4b:74:8d:d6:
         87:a7:43:4c:42:5a:a3:cc:16:13:98:61:d2:8d:fe:62:ff:4a:
         e4:c0:ee:06:ab:64:3f:20:1f:76:01:30:cc:f9:87:8c:51:d7:
         cf:e8:66:26:39:ca:c5:4a:ab:68:3a:f3:2e:1e:7c:90:66:f1:
         7c:25:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:06:53 2025 by rpki-client