Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c891908-4d48-310c-b1fe-94388b71b3f8.roa
File:                     5c891908-4d48-310c-b1fe-94388b71b3f8.roa (raw, json)
Hash identifier:          Lus3qL7bAbdHG1q15MZZnh8YYNJEDXViqq7WQsJYjnE=
Subject key identifier:   02:FB:6E:E0:7C:E1:2D:86:6B:9C:4A:5C:03:A5:BA:39:6D:FA:BF:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB22163378AF500DC79DBF520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c891908-4d48-310c-b1fe-94388b71b3f8.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.66.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:63:37:8a:f5:00:dc:79:db:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=090cc689-1ba8-47c1-8dbc-6718812ee613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:cb:3c:db:9f:6e:16:3c:3f:df:66:b4:78:
                    f5:ae:2b:df:82:4b:04:dc:5f:d4:d1:21:32:5c:9c:
                    3e:f3:26:42:32:f9:50:2f:af:e0:a1:80:d1:e2:9a:
                    92:c2:d9:af:61:84:f0:e1:dc:ca:d5:42:cb:94:b5:
                    e5:1b:eb:01:14:3b:c3:fc:b3:b2:64:d3:64:1d:ad:
                    a2:a3:7b:82:14:7e:a5:3d:1f:b4:42:63:dd:b3:f6:
                    25:df:64:84:25:60:a6:93:6b:bb:d4:03:66:1c:24:
                    d0:a3:c9:02:8c:bf:58:0c:b6:01:ba:b3:5e:66:9e:
                    36:7b:eb:ee:ff:72:68:1a:10:ba:d0:df:62:0a:02:
                    0e:c2:2c:8a:4f:55:83:2a:84:95:aa:3a:2c:ba:dc:
                    49:59:34:a3:01:b9:8d:70:a4:9a:68:83:61:98:d2:
                    5d:4e:43:c3:28:3d:fa:25:95:c9:91:66:d7:3e:d1:
                    2d:bf:39:cd:72:47:3f:3d:6e:1f:bc:f1:7c:16:c0:
                    f6:d4:17:0f:af:b1:05:91:3d:00:c1:30:52:fd:14:
                    64:f9:00:48:bc:ae:a0:16:f3:10:f1:c1:0a:94:b0:
                    c3:ac:2e:df:5e:d7:0b:03:13:91:e6:8a:2b:09:4f:
                    9e:d7:35:f6:f4:4a:62:b5:45:f0:59:a8:21:d3:9f:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FB:6E:E0:7C:E1:2D:86:6B:9C:4A:5C:03:A5:BA:39:6D:FA:BF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c891908-4d48-310c-b1fe-94388b71b3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:43:a8:eb:cf:02:3f:be:a2:64:ad:26:64:36:c1:e1:7e:
         3d:5d:c8:f8:72:c9:15:be:4a:dc:9e:01:99:91:9e:57:5c:38:
         d9:50:bb:7d:e9:ed:c1:a3:5b:03:46:be:73:fd:1f:35:f5:32:
         9e:11:95:81:d7:28:b4:09:62:2d:f0:a0:d4:c3:98:80:4d:6b:
         70:6b:2c:a8:5d:73:48:5c:fd:cb:b9:1b:46:b7:7a:16:bb:15:
         be:51:14:83:91:ca:9b:32:78:ce:c4:2b:87:e0:bb:ae:a6:14:
         ac:bd:41:ed:a5:61:bc:92:0b:83:e5:47:b0:21:e4:fa:8a:62:
         92:66:34:9a:59:b3:78:1d:f3:6c:c8:0b:07:13:55:45:6e:06:
         61:cc:d3:fc:37:75:4c:1e:25:1e:d0:76:65:59:6b:08:c9:3a:
         b0:56:90:7b:ba:5c:53:eb:77:d6:9e:01:2a:1b:5f:48:13:1a:
         d9:cd:65:b4:0f:19:41:9a:f4:83:e8:ab:63:b0:8a:ca:ca:db:
         39:96:23:9c:96:f0:6d:c8:90:d4:31:f8:47:bd:0c:50:ff:d7:
         09:a6:8c:a4:de:54:28:03:12:17:a1:23:b8:5e:47:64:3f:47:
         5e:2d:d5:db:98:b4:ed:61:b9:ea:19:7c:78:6b:9c:3b:a7:85:
         84:44:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:30 2025 by rpki-client