Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2a6257b-6f6c-3148-bf8f-bbc23fe90e6b.roa
File:                     b2a6257b-6f6c-3148-bf8f-bbc23fe90e6b.roa (raw, json)
Hash identifier:          E/0Xb8fPD/Fgtgnahi/oj0N0/oBvzk8zwS+trp4TwPE=
Subject key identifier:   E7:17:03:79:25:CA:75:E6:A4:46:98:2D:B0:BE:7B:5C:81:B1:23:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4306BE4BC66B1026856CA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2a6257b-6f6c-3148-bf8f-bbc23fe90e6b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        75.69.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:6b:e4:bc:66:b1:02:68:56:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=8b9c79b8-b6da-474d-86a8-bfc2d008fc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:a8:0c:c8:02:3c:2e:02:16:86:b0:c2:d5:
                    5d:42:a0:36:82:4a:89:a8:07:a4:d4:1c:c5:7e:fb:
                    19:aa:d8:82:af:65:dd:af:4c:e6:be:f9:2f:cf:2d:
                    43:b6:50:7a:47:4b:a9:74:2d:cb:11:25:3d:db:ad:
                    29:c8:0a:0e:74:02:e3:ea:70:9e:21:2b:31:b8:c3:
                    01:c3:4b:15:d0:24:53:7d:bb:bb:9a:bf:90:91:a2:
                    17:d3:5e:95:4e:e6:b6:83:aa:50:0a:19:c1:84:20:
                    2a:45:cb:0e:9e:da:c1:32:af:bd:d0:db:13:67:a3:
                    68:ce:77:2b:61:1e:8c:93:b0:de:31:3b:73:6d:95:
                    7c:fd:77:bf:7c:83:39:b7:fb:26:49:40:5d:0d:2b:
                    95:30:12:7f:15:34:2f:c3:f9:24:57:b8:95:ea:fb:
                    de:2f:ca:f3:98:0a:8c:4f:c0:97:70:d9:cd:8a:87:
                    90:bf:af:fa:7f:50:ec:64:12:06:71:82:fa:cb:68:
                    0b:ae:ba:0f:f8:e6:60:0a:6c:3a:79:0a:89:dd:3d:
                    e3:a7:a7:90:34:f3:d1:1f:26:dc:af:f7:81:52:6e:
                    d8:6b:46:28:c3:2e:0b:93:5b:45:5e:69:d1:da:0d:
                    79:a9:a5:9d:37:ea:58:bd:d5:6d:5d:e3:18:e5:55:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:17:03:79:25:CA:75:E6:A4:46:98:2D:B0:BE:7B:5C:81:B1:23:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2a6257b-6f6c-3148-bf8f-bbc23fe90e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.69.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:2d:c8:9d:20:8b:b7:bd:34:f8:bd:64:77:d0:b3:a3:0a:
         f7:33:5f:3e:f5:85:b3:21:27:0b:77:20:40:c6:b8:06:75:37:
         61:9c:4b:1d:ca:f7:20:e9:55:23:d0:0e:d5:58:d1:ac:fb:b2:
         92:8a:37:d0:b7:63:06:5d:85:0a:f6:5f:9b:86:62:2b:b5:73:
         70:de:2d:05:bd:98:00:a0:f9:da:2a:06:be:e3:96:3d:29:cf:
         43:5a:06:78:cb:43:a9:7f:14:03:a8:fe:92:bb:5c:f4:63:0e:
         dd:e9:ab:7e:62:42:2f:db:15:23:35:ba:ce:5a:85:66:31:fa:
         29:f0:88:ce:f7:48:f8:da:ec:0b:5e:7e:a1:94:e0:1a:b6:0d:
         1c:29:ab:35:b6:8e:b2:e6:fe:9d:8d:ad:fa:7b:e3:a0:66:92:
         17:10:2b:3e:01:25:d5:5a:44:80:1a:db:e6:6b:6c:19:42:37:
         df:55:4f:c3:83:ad:88:35:e6:94:18:37:ed:7d:3d:4a:0c:72:
         fb:58:f4:36:c8:a8:97:09:15:39:45:2a:91:90:e7:61:32:ce:
         fc:be:15:ec:0f:2c:76:f9:1c:6a:49:bb:9a:d1:fe:be:aa:46:
         08:bd:15:e5:0a:ca:f2:02:55:6d:e8:71:ef:52:29:28:5b:50:
         c0:29:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:32:42 2025 by rpki-client