Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3465b9d7-e0e5-3b77-97ed-2bfe1179306a.roa
File:                     3465b9d7-e0e5-3b77-97ed-2bfe1179306a.roa (raw, json)
Hash identifier:          rgMWjPbdH5X5OBKXI8/8kXQ0AqB80f9qtwzwSDBzT/c=
Subject key identifier:   17:15:C8:9E:26:4E:31:A3:68:4C:B8:1C:13:25:1A:28:B8:72:87:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC766DFC89C1C49A482840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3465b9d7-e0e5-3b77-97ed-2bfe1179306a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        76.28.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:76:6d:fc:89:c1:c4:9a:48:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=33266105-f7cc-4ba0-9b08-9ef18965e634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:98:eb:50:5a:4f:98:2d:a4:56:b7:ec:c7:
                    4d:e4:37:46:f7:74:47:c3:81:34:a8:44:f5:d1:78:
                    72:7a:11:58:4f:cb:c3:76:88:92:98:63:d8:b3:19:
                    db:7b:f7:74:25:75:9f:1b:5d:16:5c:02:30:91:b4:
                    9e:6a:92:05:c4:41:8c:45:8a:91:c3:e8:8a:03:b1:
                    09:02:59:d5:95:74:93:69:43:06:93:86:f7:9b:88:
                    21:cc:9f:c6:01:85:11:b0:af:e8:88:57:24:85:69:
                    6e:3e:8b:8c:f5:bf:cc:79:73:1f:d6:b8:c6:0f:b8:
                    6b:4c:d2:7a:a5:9a:17:b0:02:30:a4:56:08:45:71:
                    d9:46:67:3b:a3:5f:7b:05:f9:6d:6e:83:1b:41:e9:
                    80:f1:84:69:dd:c7:56:97:10:a0:56:de:0f:52:04:
                    57:5c:f4:c8:df:dd:5a:dc:7f:f0:98:7f:f1:1b:9c:
                    d3:38:01:1e:02:5c:2f:d5:0e:a4:6e:22:15:25:f3:
                    f0:c8:e5:10:d9:49:fa:86:04:2f:5e:87:bf:27:6b:
                    91:29:68:f9:69:b6:e9:f6:57:09:4f:a7:86:9a:eb:
                    47:2f:cf:fb:51:fa:df:ab:b3:aa:9f:d5:86:1c:5d:
                    1a:b3:f4:05:cd:87:38:aa:8c:5d:a5:64:dc:47:3f:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:C8:9E:26:4E:31:A3:68:4C:B8:1C:13:25:1A:28:B8:72:87:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3465b9d7-e0e5-3b77-97ed-2bfe1179306a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:c7:59:9b:89:29:21:8a:af:fd:32:0c:e9:b6:1a:0b:10:
         b7:35:b4:d8:78:8d:1e:19:e6:74:97:74:69:26:74:e9:7c:87:
         dd:12:45:15:44:23:24:c4:f6:93:b2:a0:ce:a8:12:56:3e:c8:
         e5:a6:59:b6:21:2f:31:d1:71:a4:84:57:31:89:bb:49:54:c8:
         12:32:ba:dd:6c:1e:da:3f:63:fa:28:da:65:87:7b:eb:b9:9d:
         54:f7:5a:7b:48:20:4b:38:8b:65:ae:02:55:90:34:0f:11:ee:
         15:d3:db:fb:d0:4c:13:37:c0:c0:5c:e7:fb:c2:e2:bc:84:44:
         3d:3e:8f:db:a7:6c:20:74:b3:a0:cb:40:9f:8f:c9:82:90:78:
         6a:32:2e:d1:35:1a:c2:ee:27:fa:e8:c3:34:7b:5a:20:03:c9:
         6e:75:90:eb:8e:6c:58:20:67:ad:fb:16:87:93:96:40:ef:4c:
         c3:df:9e:9e:2d:67:81:33:ce:93:5e:89:4b:6b:d7:fa:13:09:
         34:c6:bc:d8:f3:8e:5c:46:90:58:88:91:67:7e:96:5e:0b:e9:
         e2:51:eb:43:9f:a6:39:a7:bb:ec:90:57:ea:71:72:64:31:d2:
         ec:17:a8:c8:aa:c0:8e:23:2a:8b:7a:4c:e4:21:d0:fb:72:bf:
         18:d3:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:51 2025 by rpki-client