Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bffc9d6-3852-36f0-811a-50266878ff3b.roa
File:                     8bffc9d6-3852-36f0-811a-50266878ff3b.roa (raw, json)
Hash identifier:          zy23babdgmE+GK9KG/ifaRzz9PDruhWv+EBokqyzlng=
Subject key identifier:   85:C1:FA:1D:A4:58:42:54:21:86:02:0F:F5:B9:52:F5:1A:6C:DB:93
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE27A36312677E896CC1B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bffc9d6-3852-36f0-811a-50266878ff3b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        76.127.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:27:a3:63:12:67:7e:89:6c:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ea6480d2-6826-488f-b13b-f1290c8e8fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:21:5d:85:a0:d6:cf:df:c9:68:22:04:3f:
                    c6:38:c8:e8:b9:3e:6e:99:fb:f4:34:c9:0f:5f:79:
                    32:d9:51:39:3e:3c:bd:4e:85:2a:c0:de:36:a0:f2:
                    c6:f8:31:af:86:bf:04:3f:1b:62:a7:ad:8e:33:ff:
                    fa:d7:53:73:c4:46:71:ed:34:74:5e:81:51:d9:65:
                    3f:d3:7c:d9:3d:05:1c:44:5e:bd:a7:e6:4e:d7:47:
                    64:8f:d0:8e:27:11:57:db:02:64:5f:41:e6:f5:bf:
                    a8:95:0a:9b:72:d4:b4:d3:97:0f:aa:b7:bf:78:2e:
                    e0:6e:28:1a:46:ed:6d:e3:7c:10:1d:f9:65:65:1d:
                    87:48:c1:43:41:71:90:20:b6:57:f9:6c:4e:d7:09:
                    ad:ea:aa:69:cb:cc:c9:33:a1:35:9b:48:9a:25:4d:
                    c0:15:9a:c4:e0:19:c1:23:e5:ff:b6:1e:56:61:f9:
                    ed:e9:86:37:40:d5:39:d5:c9:6b:0a:59:52:86:76:
                    19:60:b2:3e:c8:43:65:1e:7b:aa:3b:3c:36:dc:12:
                    a2:a3:07:56:95:8f:76:94:87:44:c3:c8:e7:27:01:
                    b6:5b:7c:a9:03:5f:72:78:d9:6a:d4:dd:d8:60:fb:
                    f1:77:fd:6e:77:ba:59:27:b5:99:1d:5c:38:10:97:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:FA:1D:A4:58:42:54:21:86:02:0F:F5:B9:52:F5:1A:6C:DB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bffc9d6-3852-36f0-811a-50266878ff3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.127.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:58:ad:25:8f:97:94:d0:8f:f4:19:bb:5c:60:21:6a:12:d6:
         bc:4f:10:36:c6:4f:8e:a2:bb:ef:ec:04:cd:3a:2a:b3:5e:64:
         10:2a:38:1a:f2:21:93:34:68:31:53:6e:24:c5:e9:65:30:87:
         92:ee:2d:fe:42:14:d1:57:b7:29:b4:d7:12:ba:4d:cd:10:b8:
         f3:e0:34:83:97:0d:a2:97:11:5c:fb:12:12:8d:d3:f3:e5:55:
         0a:15:60:7d:0d:a6:5e:e8:5e:05:e1:71:7f:21:82:3e:27:c7:
         1e:79:c3:bc:1b:69:76:85:9a:0e:66:e7:fd:a2:11:34:f5:88:
         0d:95:d8:ad:a4:b9:6a:39:a0:00:29:0c:8b:58:67:8e:c3:87:
         c6:f7:b7:5a:3c:95:3a:af:0b:91:75:f8:a5:28:21:a9:ac:94:
         0a:f0:bf:ca:79:6c:e2:88:70:84:1b:61:2e:97:12:17:d3:c3:
         73:49:91:49:a7:c7:50:31:73:a6:20:32:96:69:c2:dd:14:62:
         88:24:31:c8:25:63:fb:f4:44:70:33:d0:25:2f:d1:f6:fd:73:
         af:6e:e6:93:3d:e3:f1:ed:38:89:de:22:3f:83:57:90:3d:75:
         50:8c:54:c1:47:be:04:78:47:b3:c9:92:e0:cc:be:2a:42:04:
         bb:d3:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:40 2025 by rpki-client