Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
File:                     2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa (raw, json)
Hash identifier:          CFkjR8gaQwnm99ru7ErkfBW99nX+KPpYTAhGSnpIqV0=
Subject key identifier:   5E:83:EF:87:49:21:A7:B1:5F:9E:63:43:83:0F:96:1E:BE:FC:8C:65
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584AB220C15ECBAB327CFDCB4E00
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     40244
IP address blocks:        94.26.84.0/23 maxlen: 23
                          2604:7c00:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c1:5e:cb:ab:32:7c:fd:cb:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=c95e133e-7cbc-410c-ae43-00ae0ad53918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:18:fe:d6:a7:75:47:d9:dd:b5:a4:8f:2d:
                    24:7c:6d:e3:f7:39:db:d1:1d:0b:64:72:2c:0b:39:
                    ea:08:7e:43:d0:01:50:f9:ce:1f:ae:60:bf:4a:67:
                    bb:04:22:e2:86:23:11:3f:8c:e4:21:16:6e:a2:1b:
                    65:2d:26:12:52:3d:06:96:1f:b7:92:01:26:1a:3a:
                    66:16:60:bb:ed:9f:18:26:b2:f7:11:07:5f:2b:c9:
                    06:21:f5:1d:a4:ec:1e:14:d1:f3:6e:4c:c2:6d:32:
                    49:54:49:d5:8a:48:9c:84:aa:7d:0f:d8:13:f0:e7:
                    1b:91:89:73:a9:b0:ba:55:17:23:ed:e7:71:1f:bb:
                    ea:38:da:54:af:fe:35:4e:fe:0d:a7:49:82:5f:9b:
                    08:13:ab:0c:7e:bb:53:4f:28:f7:0c:23:cb:83:83:
                    b0:82:fe:80:c0:c3:6b:ca:7f:7f:45:62:c6:b2:aa:
                    6e:df:17:d5:e8:90:14:5a:e8:d1:c4:fa:30:64:18:
                    b2:a4:da:39:90:14:dc:e2:f1:8f:fd:12:63:75:5a:
                    2d:31:b6:88:af:3c:c8:32:10:d1:06:16:f0:20:a5:
                    d2:bb:6a:82:59:64:80:78:6f:b2:9d:79:ac:48:92:
                    33:33:ec:84:33:20:45:b2:44:9a:15:bc:08:d9:c8:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:EF:87:49:21:A7:B1:5F:9E:63:43:83:0F:96:1E:BE:FC:8C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.84.0/23
                IPv6:
                  2604:7c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:45:02:2b:5d:8d:e6:a3:21:7c:42:83:61:0c:5a:b0:90:
         b0:0c:0b:cb:ca:c5:5f:87:74:40:c3:45:17:8d:14:ac:25:d4:
         e1:16:30:ba:c0:f0:ce:ab:ed:a9:ae:71:53:ce:1d:01:34:96:
         1b:50:96:e5:e4:5f:5f:f9:a5:16:bc:03:f2:41:c6:d2:88:6a:
         f9:81:65:22:a2:d5:0b:5f:a7:8a:e8:93:0c:9f:c4:2b:35:e6:
         27:a4:36:12:2e:7b:77:f3:12:84:61:f9:6e:bc:fb:ab:9d:bd:
         d2:6d:d1:b8:70:98:53:a9:b8:62:6b:58:d2:79:42:25:d7:4d:
         17:e8:e1:19:9e:09:1f:03:f1:d8:38:50:21:0e:0c:7e:59:41:
         c2:6a:04:e3:dd:83:8a:45:e7:2f:48:fc:d2:28:06:8e:5f:79:
         a1:8a:20:95:fc:2c:bd:dd:39:34:13:ec:f3:a6:03:74:d1:1a:
         9d:8b:97:fa:09:33:53:7a:70:70:3f:c0:8b:a8:2c:d7:84:e0:
         23:bb:30:74:00:f7:5d:1b:9c:a6:73:d9:12:31:57:5f:b0:4e:
         89:86:7e:e3:c0:71:7b:ff:59:33:d7:5a:5f:e2:8e:48:26:ac:
         da:c2:cd:e7:8a:6e:76:12:03:fd:d1:84:ff:37:c2:28:21:75:
         5e:5b:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:15 2025 by rpki-client