Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d13031b-6b14-3a92-abc0-e553caf897eb.roa
File:                     3d13031b-6b14-3a92-abc0-e553caf897eb.roa (raw, json)
Hash identifier:          ITpZUwLnEbgAe8EmWnDE3No/5JBz7cUbIFqLpBf3Reo=
Subject key identifier:   FB:C7:64:5C:C4:8B:D4:64:BD:12:91:B4:8C:53:C1:5E:91:D1:9D:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2215C9389D31C413C5AC0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d13031b-6b14-3a92-abc0-e553caf897eb.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.64.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:5c:93:89:d3:1c:41:3c:5a:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=507e46aa-e2f4-4b05-a589-34645705ff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:22:b7:c7:da:0b:b8:e5:ab:67:ca:cf:b7:
                    55:e4:c2:ae:ff:db:90:0f:14:55:7d:5d:4b:4d:3d:
                    82:f9:2e:2a:03:d1:0e:c9:ee:c0:40:40:12:0e:1f:
                    cd:45:99:e2:64:86:57:ea:71:0c:7b:9c:55:30:b7:
                    c0:0b:af:74:7f:ad:0e:cd:76:b2:05:f3:c9:85:cd:
                    7d:57:17:d3:7b:e5:da:6e:f5:ef:b0:a5:4d:ac:dc:
                    7f:be:e6:b6:e4:4f:a1:cf:c4:c9:1f:d9:75:73:fc:
                    60:96:4e:27:8f:c5:bf:78:de:4b:54:25:74:ed:7c:
                    8a:55:98:83:ff:ed:dd:c7:29:60:c3:dc:ae:f1:73:
                    38:87:11:ca:dc:69:5a:5b:51:de:bf:3f:94:ba:6b:
                    60:20:c6:b8:bb:86:3d:c3:d4:bf:5b:47:fe:1b:00:
                    c6:be:20:38:49:a5:53:a9:0f:79:1d:b9:f4:02:31:
                    fc:70:60:a6:1a:d8:c6:ef:23:bc:02:c0:a8:ed:5e:
                    6d:42:48:05:0f:27:8e:d8:85:30:30:b2:1a:6a:c9:
                    a1:6f:bf:43:f9:37:2f:83:d7:8d:c5:aa:ca:15:9c:
                    4b:58:80:12:b5:f8:5d:a4:d7:da:bc:65:1c:f8:71:
                    4b:51:9e:f6:34:1c:26:27:f3:b8:99:47:6d:2f:3f:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C7:64:5C:C4:8B:D4:64:BD:12:91:B4:8C:53:C1:5E:91:D1:9D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d13031b-6b14-3a92-abc0-e553caf897eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:62:d7:e0:a0:2b:34:7c:e5:dc:e8:97:a8:36:49:82:7f:50:
         d2:2e:48:47:19:72:c0:d2:fa:b3:0d:a1:1b:57:3b:bc:b0:0e:
         70:9c:1a:84:06:fa:6c:9b:cc:ad:54:38:80:f8:90:97:14:61:
         b1:b6:25:99:f9:3a:99:0c:df:2f:64:b8:37:a6:f7:87:05:95:
         da:65:b7:2f:0e:0a:20:29:ae:cf:16:01:ac:58:7d:14:a7:35:
         c3:c5:d0:c5:9d:9b:e5:2f:b2:db:0a:d9:0f:2c:6d:c7:36:17:
         f8:ff:18:db:d4:4a:85:e0:15:11:df:5e:0c:61:f8:ce:14:0d:
         67:43:5a:b2:10:ad:c2:10:84:7a:95:40:f6:05:ba:c8:3e:38:
         28:63:a4:2e:8a:cf:c5:ce:67:3e:24:dd:cd:26:fd:c6:37:8b:
         fe:29:07:61:ca:05:21:1f:4e:96:10:40:c3:8b:8b:18:73:6b:
         0e:3a:37:57:2d:6d:f0:dc:61:f2:3d:73:ee:40:40:48:d0:78:
         69:b6:04:c4:34:29:10:ae:54:20:d9:dc:a9:aa:be:19:1d:15:
         38:1b:b9:24:33:04:ae:c4:d1:7c:a5:a5:a6:33:bf:66:bc:c6:
         cc:fa:6e:44:54:af:6e:39:1f:a5:c3:c9:fd:f6:24:c5:d7:dd:
         fe:e3:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:33:20 2025 by rpki-client