Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3fd24bc-ab45-390b-8f5e-b7a438497d51.roa
File:                     c3fd24bc-ab45-390b-8f5e-b7a438497d51.roa (raw, json)
Hash identifier:          BhlvqAW6GS4UphjQAMTCG/bENmHlJ+mj6NX94OtxSVM=
Subject key identifier:   C1:E3:69:9D:82:55:98:5D:69:1A:01:0B:DD:30:36:CC:9D:10:E8:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4307438C764182EB966A4F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3fd24bc-ab45-390b-8f5e-b7a438497d51.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        76.19.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:74:38:c7:64:18:2e:b9:66:a4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=42d5b3cc-3249-48e4-8b5e-e87a48d480b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:7c:b9:0e:07:19:5c:43:9b:e3:3a:24:3e:
                    79:af:31:3f:20:4c:e6:fa:5e:21:69:98:86:39:0a:
                    12:be:c5:5e:11:aa:10:24:79:6a:31:29:9e:f1:87:
                    32:b0:a8:b3:fa:0f:78:35:9f:2f:30:d9:2f:99:f8:
                    0b:77:dc:26:26:9d:fc:93:d8:98:e0:8f:25:2e:1c:
                    79:30:1f:c3:6b:85:fd:4c:8b:3b:4d:0f:eb:f7:01:
                    51:d7:3f:36:f9:0f:83:86:4f:d0:46:64:76:f4:d6:
                    da:ff:74:90:65:e8:22:51:10:c3:b6:9e:84:ff:1c:
                    03:0d:98:f3:7e:b5:fc:0f:c6:42:a0:18:f5:3c:05:
                    d1:90:99:fe:2b:ae:d3:85:7d:cb:25:20:df:aa:4d:
                    b2:73:6c:a0:53:00:35:8c:38:d2:9d:02:fd:1a:08:
                    33:ad:e1:0f:42:f0:45:97:d8:8d:f5:fc:b4:fb:eb:
                    95:7a:ea:6a:17:ed:12:69:f0:8d:98:f2:c1:f1:a9:
                    27:a6:0d:1a:f2:7f:4c:3a:56:be:2a:fe:1f:e7:c0:
                    6a:79:89:ba:f7:9b:d0:3d:f4:31:76:37:5a:1e:97:
                    cb:94:8a:da:04:60:4c:44:9f:c6:94:fd:0c:45:52:
                    65:88:b8:5c:f9:8a:7f:29:54:1e:1d:92:06:8a:64:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E3:69:9D:82:55:98:5D:69:1A:01:0B:DD:30:36:CC:9D:10:E8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3fd24bc-ab45-390b-8f5e-b7a438497d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.19.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:d4:7c:45:98:0e:70:d0:e9:76:37:55:e5:e8:7c:46:28:
         e6:cf:db:63:d8:b5:84:aa:64:0e:85:d2:d2:d5:e2:5d:c0:84:
         2a:3f:b8:96:83:42:0a:c4:bb:52:bd:51:d0:a8:1f:54:5e:f4:
         bb:fa:71:f1:6e:0c:93:af:32:9b:90:f7:89:2e:65:95:0d:ed:
         08:d7:a5:2d:cc:8e:e0:05:14:43:d4:19:d2:63:b2:24:95:a4:
         05:a3:43:39:9d:d2:f1:74:b2:7e:48:fc:b0:72:5f:f1:a9:d2:
         cb:29:e7:c7:32:b0:2a:4a:4f:76:8d:dd:26:0a:64:6b:c2:32:
         b1:61:93:5b:87:cb:1c:e9:85:bb:92:94:ff:97:af:08:4e:23:
         5a:2c:35:89:f3:ac:d3:0c:a3:77:c7:5f:46:87:3c:1d:5d:86:
         36:94:13:9f:42:93:80:27:fc:52:dc:53:48:cb:2a:9e:8d:01:
         16:d7:1f:0e:5c:19:fd:9e:6a:e5:8e:52:2b:ee:c1:5f:a7:6a:
         2f:5b:fc:a0:c8:89:b8:82:d3:c6:45:44:5a:fe:41:1d:76:5f:
         ef:12:10:b4:f8:a9:03:85:d7:ad:1d:a6:de:16:70:26:f9:dd:
         5a:65:b3:19:51:70:ec:48:21:12:e1:f8:90:44:77:9f:ef:f8:
         60:38:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:05:42 2025 by rpki-client