Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa
File:                     b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa (raw, json)
Hash identifier:          hJyourwsdoOx7BgOT7hP4tMldBiVGFYOfgOuntN0Ppg=
Subject key identifier:   33:76:C1:7F:A9:4A:1D:F7:CE:EE:A2:9D:44:E4:1D:E7:D3:A9:71:F3
Certificate issuer:       /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Certificate serial:       010D0C9F43285849EA851C2E5F9A00340C165300
Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        195.85.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1c:2e:5f:9a:00:34:0c:16:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=93ae4205-4ef3-4293-a62f-d144dec591c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:24:9a:92:af:bb:e2:0d:92:59:91:4d:f9:
                    f3:5d:f8:9c:dc:2a:d8:a2:cf:c4:71:14:81:21:59:
                    ed:ae:b3:29:99:75:c4:6c:95:0c:ab:ee:b7:85:95:
                    58:98:1e:79:f4:5a:29:fe:32:58:fb:c5:04:30:a6:
                    6f:c5:e1:ad:59:25:46:7f:2d:de:dc:4d:ac:41:f1:
                    a8:98:d1:4e:c1:f9:f7:b4:50:98:35:8f:44:08:97:
                    71:7e:b1:09:ce:50:de:45:98:1e:ab:51:bc:11:1a:
                    92:ee:62:8d:78:6b:88:33:ba:a6:ae:97:0a:09:f9:
                    2e:f0:d2:18:52:86:42:3f:a2:25:9f:78:1b:4b:97:
                    15:c4:1f:ab:35:5c:51:26:66:4a:fc:4e:fe:04:2c:
                    17:38:96:29:75:8f:ae:e3:10:9a:1b:d9:56:ce:23:
                    83:cc:ae:21:b5:70:aa:62:eb:64:f8:d1:90:6f:47:
                    ee:e1:80:d6:a4:91:89:b2:69:14:7f:57:48:e6:05:
                    a2:3d:87:39:d5:94:b3:a4:c6:85:7c:90:f1:75:91:
                    c7:a3:5c:e1:da:d3:1e:ba:79:9c:85:39:dc:eb:b7:
                    6b:6a:48:60:8c:8f:98:5a:6c:08:49:e4:26:3e:4e:
                    f3:fe:b9:60:c8:4c:3b:2a:53:27:0d:2d:cb:e9:05:
                    a7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:C1:7F:A9:4A:1D:F7:CE:EE:A2:9D:44:E4:1D:E7:D3:A9:71:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:37:2d:9b:4a:5c:be:84:fc:55:76:4c:93:bd:b5:f6:cd:54:
         c0:4d:c8:19:eb:bd:8f:63:9e:e5:2e:b0:23:27:80:3f:27:2f:
         23:bb:36:73:1d:ae:1b:a1:06:e8:67:6e:8f:52:44:8c:49:54:
         6e:02:00:27:21:eb:5e:6a:58:c2:2b:2c:e7:c2:7d:95:96:4c:
         ff:e9:71:75:9d:f6:97:8b:05:e6:9f:76:62:7d:b6:93:2b:b5:
         39:57:6a:5f:18:cd:bc:dd:0c:7f:98:32:45:48:d5:af:95:70:
         69:f8:51:d4:02:07:17:12:53:36:ee:6f:5f:30:89:25:0a:f2:
         c7:21:10:2e:9f:bf:c1:ca:d9:12:e7:ad:85:7c:86:22:26:48:
         34:9c:5e:d4:b8:e9:8f:04:a3:03:c7:77:54:9a:42:38:3f:e9:
         2b:0a:b7:6f:54:1c:ce:15:a2:65:be:f5:4e:50:56:17:09:a9:
         1b:37:ce:1b:7c:e8:9f:e5:90:a5:b4:50:e1:70:c3:84:4b:c8:
         a8:47:ad:ef:4b:fa:d0:d6:ff:07:b8:d3:c5:ea:76:53:7f:2d:
         cf:5b:6b:4b:f1:c0:5e:57:e6:d6:73:2f:b6:fb:33:8a:52:df:
         ae:44:06:e8:fb:e3:30:50:bb:91:7c:ed:8a:55:18:6a:18:1e:
         a9:11:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:32:28 2025 by rpki-client