Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3567b92-7182-33b9-bae2-77f6bdca6120.roa
File:                     e3567b92-7182-33b9-bae2-77f6bdca6120.roa (raw, json)
Hash identifier:          0uGGZCh2sujuph/TyqXH2OsvBNUox9j93FIico8FWY0=
Subject key identifier:   87:FC:6B:72:92:8D:55:78:1E:9A:98:F7:EF:9A:3B:A5:79:46:6F:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECD134432BD9943EDBBF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3567b92-7182-33b9-bae2-77f6bdca6120.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        76.112.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:d1:34:43:2b:d9:94:3e:db:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=c32ebae9-b6d6-4edb-bf8b-acab6661a054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:7a:43:a5:d5:15:23:8a:86:e4:1d:0e:9b:
                    ed:47:8a:6f:f4:94:35:98:61:9d:ff:91:73:d6:ec:
                    a7:67:38:29:ab:c9:90:66:23:e0:d5:6c:19:bc:db:
                    78:50:e4:54:c5:b9:2c:dd:ed:f5:b9:16:87:27:ce:
                    54:2f:5a:a2:b0:be:b6:cf:49:45:68:80:8c:92:b1:
                    52:df:36:74:cb:9a:75:98:90:6b:92:1e:cd:2e:2c:
                    c8:e8:9a:ac:d3:a5:a3:73:f8:cf:a1:4b:af:cf:54:
                    ee:61:6c:9e:4e:9e:c7:ad:36:cc:0e:d7:38:dc:9c:
                    e6:ae:f7:a3:ff:a6:3f:f1:9a:8f:59:55:40:eb:23:
                    76:4f:5f:28:b1:cd:ad:0b:0a:99:31:ad:63:26:72:
                    a2:4f:3b:17:0b:39:28:b3:54:5c:32:e6:1d:6c:51:
                    a8:17:a7:89:07:69:2b:28:30:ec:5d:5c:51:df:9b:
                    d7:19:35:04:78:d1:e3:dc:ad:10:cd:c9:8b:29:6c:
                    2d:71:ff:ad:7d:42:fd:f3:fd:44:a2:ca:33:96:66:
                    d2:fa:93:47:f2:dd:72:b8:e7:03:85:d6:51:2e:49:
                    ef:0e:7b:41:e4:4b:26:72:00:40:78:c6:1c:99:85:
                    5d:1d:c1:93:ce:37:a1:79:4b:75:c0:45:fa:31:ee:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FC:6B:72:92:8D:55:78:1E:9A:98:F7:EF:9A:3B:A5:79:46:6F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3567b92-7182-33b9-bae2-77f6bdca6120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:86:bc:44:26:b5:9c:20:58:9f:b9:eb:09:d5:10:12:04:12:
         91:37:13:2d:91:3e:93:3d:4a:41:e6:5b:11:a4:fe:4e:68:aa:
         36:a7:fd:98:b6:de:b4:a4:2f:c8:eb:9e:26:e7:68:d1:a7:eb:
         a0:6a:c9:6f:93:10:a9:1f:c6:cc:64:e0:81:c6:5f:ca:99:98:
         8d:18:41:30:19:08:68:9e:ed:74:0b:96:f2:fe:a5:ea:d4:27:
         d5:6e:2e:90:dc:0d:1e:17:e5:2f:12:66:17:e3:53:78:7c:8f:
         b2:10:19:08:b0:f8:c3:0a:a2:ac:46:3b:63:c6:6f:03:71:f0:
         e4:e8:bc:7c:ff:30:9f:94:62:50:14:8f:b2:f6:2b:c4:74:70:
         8f:38:d8:a1:ae:b5:76:9f:48:ba:52:49:50:b3:a7:42:f1:18:
         04:10:25:8b:dd:c4:6f:5b:4c:65:5d:fd:f0:09:c6:70:2e:d2:
         b9:18:24:6b:e8:f0:4d:82:00:46:6b:29:06:a0:81:b5:01:1c:
         c3:77:7d:b2:72:64:29:42:e5:93:6b:b9:71:6f:7b:bb:7b:30:
         c6:ee:e3:55:a5:d4:c7:b6:5e:56:f0:ae:48:3e:b4:88:47:77:
         00:c9:6d:72:53:34:70:82:14:4a:10:07:07:2b:73:46:38:d8:
         f7:b2:d3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:19 2025 by rpki-client