Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77dd9b1e-9da6-347d-a0ae-6c1518c8a4c7.roa
File:                     77dd9b1e-9da6-347d-a0ae-6c1518c8a4c7.roa (raw, json)
Hash identifier:          I2zNleBWGdA/Eb+oYZ6paAwyLDMTDv0MOKjxZkmlC/Q=
Subject key identifier:   BE:7A:1F:41:64:40:F5:FD:44:D2:39:3E:03:6A:55:DF:D3:06:0F:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43263B790C60044E0115600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77dd9b1e-9da6-347d-a0ae-6c1518c8a4c7.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.143.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:63:b7:90:c6:00:44:e0:11:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=420e3363-522f-49fe-aec0-63b5600fd2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:60:4f:5f:ca:06:27:41:46:c3:74:9c:97:
                    70:3a:f0:96:f1:5f:c6:9e:57:7f:aa:7c:73:f9:f0:
                    c6:3f:3a:7f:05:bc:99:f9:42:63:15:45:ee:05:eb:
                    bb:56:75:e4:f4:36:52:a2:bc:93:af:67:be:8c:04:
                    23:69:80:a8:10:78:20:f3:78:b6:07:58:60:0b:f1:
                    e7:b7:d7:55:f1:1b:99:0f:b7:99:65:d6:24:67:ac:
                    53:8e:7a:8e:41:3d:08:6c:9b:fa:c6:6d:d6:5c:c4:
                    c8:fa:fc:ec:7c:29:ec:56:83:60:88:fe:54:f5:62:
                    e2:8f:ab:14:47:1b:07:ce:86:c4:e8:ce:4c:88:0b:
                    be:a2:bd:87:98:2e:33:e8:24:a9:1a:35:7f:61:8f:
                    f6:08:8f:17:27:b1:57:34:55:4f:e8:e6:27:be:82:
                    69:32:d9:e5:26:77:f6:7b:69:73:19:fe:e7:0c:19:
                    63:10:5c:f6:5c:16:7a:17:d6:56:6c:97:2a:69:c8:
                    71:da:47:27:01:7b:f4:56:f4:13:04:1c:af:53:96:
                    e9:52:a8:41:62:a4:7b:f2:72:94:38:3a:ac:66:b5:
                    16:43:63:30:fb:27:bd:68:31:4a:c3:22:fe:32:94:
                    82:c8:0c:77:33:c1:d0:43:93:08:f1:7b:14:fd:a4:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:1F:41:64:40:F5:FD:44:D2:39:3E:03:6A:55:DF:D3:06:0F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77dd9b1e-9da6-347d-a0ae-6c1518c8a4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:ef:4a:5a:3f:1a:01:e2:d0:52:fe:f1:4b:a1:cf:ed:54:4a:
         52:f0:3e:49:4c:85:0e:6d:49:f8:f6:91:33:f4:af:20:00:da:
         87:ff:67:b2:db:dd:0e:7a:1e:b5:df:1d:89:ec:a9:7f:54:85:
         08:8f:5e:9b:ff:75:3c:63:f7:13:7e:25:87:dd:f3:22:23:87:
         c7:85:0b:c8:03:3f:02:5c:52:f2:3c:ea:ca:58:78:c2:93:d9:
         b0:21:90:b4:3b:79:5d:eb:52:de:f2:ed:bd:8b:25:0b:6b:2f:
         4d:99:89:bc:cf:59:c8:48:61:bd:bd:f0:ef:88:1c:9f:99:54:
         06:48:ce:e1:e8:3d:48:fd:9e:b1:9d:d9:cb:ef:a3:ee:5b:d9:
         e5:7a:ed:02:20:f5:70:b7:60:a0:d0:d6:af:59:61:de:28:1d:
         4d:f5:b4:86:8e:cc:9b:b7:e9:13:6e:9d:d1:78:ca:73:fe:28:
         97:95:f3:53:b7:f7:94:ef:3b:4f:f6:0f:fb:e4:39:2a:fc:30:
         82:e5:eb:bb:0f:60:2d:ad:0e:a9:28:7f:a6:b7:e0:42:dc:f0:
         b8:13:34:e3:50:4e:24:e5:1b:7e:11:d3:dc:c5:cb:84:90:8e:
         bb:3e:32:2b:d7:20:54:6b:d0:11:2a:37:98:fc:98:62:3f:66:
         88:10:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:35:36 2025 by rpki-client