Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb6e312-b7bd-346e-a167-f1b117e6f487.roa
File:                     0bb6e312-b7bd-346e-a167-f1b117e6f487.roa (raw, json)
Hash identifier:          8tO2ObIsWT5SPBeMGszMUBjG/x+G/EpxyPvr1vg3N7A=
Subject key identifier:   EA:8A:28:2C:B1:82:59:7C:07:70:9D:94:18:40:E0:37:C4:1F:CA:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F36DD180F073153F955C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb6e312-b7bd-346e-a167-f1b117e6f487.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        76.96.226.128/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:36:dd:18:0f:07:31:53:f9:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=148ecfcb-a3a8-47d1-9bb2-c311fbd9094f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:ba:52:12:61:f3:98:9e:f6:3b:ed:66:9f:
                    11:03:4a:d1:0f:ce:9a:03:29:3a:e6:28:ad:78:a8:
                    fb:27:29:59:e5:c1:2b:25:79:5e:dd:14:6b:b3:4b:
                    9e:28:95:eb:2b:3f:3c:2c:54:f5:11:17:7a:d1:18:
                    79:6f:4d:9a:48:d8:c8:67:bd:0a:38:5a:08:db:34:
                    b5:fe:3f:52:2e:6e:79:e0:13:f6:5b:e7:f6:5c:60:
                    1d:93:18:c2:f3:2c:a9:f6:28:03:c8:68:21:fb:75:
                    c7:31:2d:01:df:69:1c:cb:f0:ff:c4:59:f9:e9:56:
                    cc:96:c8:4f:a9:3a:10:e6:68:1c:ee:02:77:ea:b3:
                    58:0e:13:e9:38:00:fe:f4:a9:d1:56:e9:95:42:e5:
                    5f:1e:8e:13:b1:fd:b2:87:2e:a5:b7:22:c4:65:17:
                    71:18:bb:0e:6b:02:f5:93:3d:1f:07:6a:8b:95:21:
                    50:34:31:d3:41:72:28:87:45:16:04:f5:97:3c:49:
                    dc:f5:88:a6:6f:67:4f:99:4b:fd:81:5a:a9:ae:9c:
                    02:12:da:86:c5:43:03:83:d0:31:ac:cc:79:39:c5:
                    da:a3:ec:d8:d5:53:db:8f:a1:17:ca:d7:0d:44:68:
                    fa:6a:a9:2d:29:90:a0:50:e0:4e:02:a7:b8:60:6c:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:28:2C:B1:82:59:7C:07:70:9D:94:18:40:E0:37:C4:1F:CA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb6e312-b7bd-346e-a167-f1b117e6f487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.226.128/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:1e:ab:e8:d4:6a:a2:4f:f9:5d:b5:b4:1c:cb:75:69:09:
         1c:65:8d:c2:10:50:08:c8:78:bb:a2:5a:ef:e6:b6:85:89:df:
         3f:aa:96:35:86:88:1d:8b:a3:68:3e:0a:2d:54:86:f6:3e:6c:
         76:31:7a:ba:59:97:1d:61:7e:8a:bd:f6:40:b7:17:0b:c7:ec:
         ba:ad:e6:1e:e7:0f:8e:36:4c:8c:98:ec:c1:82:50:21:9b:ce:
         49:0c:26:e6:b1:04:72:46:c7:f8:80:88:b7:87:74:af:bc:63:
         f2:f6:e6:08:aa:5f:a7:28:88:c1:05:d5:c5:32:35:28:6a:1e:
         0f:8d:42:b6:12:1a:f4:19:36:c6:86:3a:7a:fe:61:36:28:1c:
         38:7e:db:16:fd:97:63:59:df:4a:e8:b6:c7:a6:7a:a0:67:40:
         f6:c2:1b:a9:41:18:13:0b:c1:49:84:f2:10:18:70:0d:8a:4b:
         26:f8:be:f5:da:17:99:1e:fb:80:da:5b:bb:51:a2:5d:65:ec:
         56:c8:fe:26:72:0a:d2:1e:1f:90:2a:eb:fc:1a:6f:ae:71:11:
         d6:07:25:3f:7c:87:fd:15:9e:a3:00:69:5e:5c:8c:8a:da:19:
         82:b3:76:5c:54:bd:cb:b8:78:38:41:01:99:6e:f2:9a:09:61:
         17:eb:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:40 2025 by rpki-client