Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa
File:                     7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa (raw, json)
Hash identifier:          88/qo8kW725F9AFEqbfKJ8P62yR7IJoJjNqVJ79PVJs=
Subject key identifier:   E2:4E:D9:9C:C1:3B:A0:FD:65:7C:17:D0:79:DA:8F:BB:B7:C4:1C:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED22B1F1947FFB4DB45C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        76.31.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:22:b1:f1:94:7f:fb:4d:b4:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7c9b6e10-83b4-48fd-8cab-c1797db7b06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:47:ee:2d:6a:70:76:4a:c8:b5:f2:3e:da:
                    e3:2f:9d:77:fc:06:47:04:e7:e5:dc:c5:2e:e8:13:
                    e2:9d:ab:00:4d:e4:7c:cd:17:49:f3:d6:0d:ef:fe:
                    fb:eb:34:66:df:49:93:d9:7d:52:d2:a2:46:84:79:
                    1b:69:b7:ac:e3:fa:d2:dc:df:ba:4c:e1:24:46:5b:
                    84:ea:63:a8:93:75:ae:fa:a7:02:4f:d3:1f:70:79:
                    67:bb:6b:89:68:23:49:71:52:36:13:bc:46:c0:93:
                    71:a9:c1:94:49:54:2f:ea:f4:2e:39:69:bb:44:73:
                    34:c4:70:76:9f:50:a9:45:fd:7f:8a:e2:09:ef:4c:
                    53:d8:5e:66:5e:19:78:fa:d2:4a:f7:ca:3b:ef:9c:
                    69:70:9a:a9:0f:d8:ab:36:af:ee:cc:a3:2b:42:79:
                    bc:6d:49:f5:c2:a4:c2:74:1e:8a:d6:9d:e9:7f:33:
                    0b:a2:c7:55:65:b9:72:c0:ef:42:63:67:af:9d:ae:
                    5b:fc:97:61:cf:71:80:8d:04:ca:32:4c:01:10:de:
                    43:7f:7c:18:35:41:aa:ce:f1:37:b6:1d:ec:43:ce:
                    24:8c:3b:45:7e:85:c6:ec:91:37:eb:97:46:50:36:
                    ba:77:fa:86:9b:ac:37:39:34:0a:a1:d9:57:0e:34:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4E:D9:9C:C1:3B:A0:FD:65:7C:17:D0:79:DA:8F:BB:B7:C4:1C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e16e1dd-ed07-35c5-9a54-552be669ed5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:30:dd:dc:d4:2e:dc:14:c0:f4:6e:2e:0b:34:9f:f5:ff:
         f2:9c:6b:0d:0f:4a:fe:eb:c1:d5:3f:f0:91:71:5c:7b:65:24:
         67:c3:78:af:34:10:bb:bb:b1:31:ac:82:70:53:29:a2:d6:36:
         ca:a7:67:79:9f:69:5f:93:60:75:c1:0c:30:60:e1:e7:9f:cd:
         d1:d0:9c:6e:ff:73:ab:ae:c8:e0:a7:d1:23:36:57:56:27:62:
         a4:76:5d:7c:a6:e2:a5:15:58:c7:98:6e:60:75:43:7e:87:2b:
         25:e3:47:f9:f1:a3:48:65:5b:e2:94:be:d3:b2:8a:97:55:23:
         f8:b1:a2:f4:9e:cd:85:35:b1:1a:7b:b5:cb:e2:79:0e:ca:e5:
         5e:d7:4f:71:92:89:37:e4:de:7c:b8:6f:79:42:ab:a3:39:21:
         a6:9c:5b:56:2a:e3:01:1d:e1:c5:1a:54:e9:d9:8d:ef:65:37:
         e9:86:a5:41:6f:bd:ed:cf:c7:df:3c:f0:07:b5:92:34:ec:7b:
         bb:0c:59:3b:1b:97:03:5e:dc:7b:d5:b7:d1:a9:83:57:49:c8:
         cc:88:1f:46:c6:12:9e:74:4f:68:ac:aa:f3:e6:e9:3a:60:8d:
         35:df:ec:2e:78:c6:bf:02:cc:dc:cb:25:7a:9a:01:d5:6e:52:
         70:ea:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:25:30 2025 by rpki-client