Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00759452-9042-3004-b24f-f450b537efbb.roa
File:                     00759452-9042-3004-b24f-f450b537efbb.roa (raw, json)
Hash identifier:          3tZiil9PdncL/m2XmQhkoZPlPlaJ3UFA7DiZMAj4VLc=
Subject key identifier:   85:00:F5:95:81:D7:40:FA:DD:AC:EB:19:36:C2:67:89:D7:67:46:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBDC5195BB21798D063800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00759452-9042-3004-b24f-f450b537efbb.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33668
IP address blocks:        96.92.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:dc:51:95:bb:21:79:8d:06:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2710ab9e-a35e-4cb9-9a35-55e416ad8182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:31:65:ed:91:8a:41:b6:38:ff:f2:9b:f6:
                    97:75:65:72:d7:7a:e3:da:59:6b:53:58:e3:32:77:
                    ed:b9:8f:f3:aa:03:12:71:1b:eb:6e:30:6b:63:76:
                    d4:3d:06:86:64:e2:83:f8:86:25:7e:e6:6b:c0:ae:
                    8f:64:21:3c:70:01:f9:3c:10:0d:08:e7:9a:f3:67:
                    13:7a:1b:99:ed:4b:ea:db:9b:54:c1:a1:c5:64:b4:
                    ac:61:fb:5a:61:c5:b0:d9:5c:e7:1c:7a:cf:ba:83:
                    c4:3c:d8:23:c9:ba:54:e7:77:22:46:f0:c1:1a:87:
                    b3:f7:a7:0d:8d:bc:46:3f:26:d9:4b:e3:87:d0:eb:
                    4e:b6:55:82:8e:85:75:8a:dd:82:0e:26:c7:0d:56:
                    ae:02:6b:68:aa:5a:4a:e3:34:9b:6b:ef:d7:5b:a4:
                    65:5b:34:9f:1e:bb:ea:be:be:8f:83:f4:7d:9c:bf:
                    f2:8b:33:d9:0b:c1:48:64:b2:b2:08:46:1c:fb:7b:
                    83:28:5d:9a:48:26:04:eb:df:50:45:50:28:b6:2b:
                    10:77:2c:91:a1:0a:a2:d9:ba:ea:9c:ff:ae:79:15:
                    d3:5c:99:66:29:ba:8f:86:e8:38:2d:27:56:ab:4b:
                    f6:b8:f1:ac:9e:3c:36:75:95:f1:0a:2a:1e:d7:dd:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:F5:95:81:D7:40:FA:DD:AC:EB:19:36:C2:67:89:D7:67:46:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00759452-9042-3004-b24f-f450b537efbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.92.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:01:63:a4:d2:c1:60:4c:9e:b8:ac:0c:e6:75:67:5a:3b:
         f3:f7:d9:bf:43:1a:91:46:bd:51:6d:5b:cd:53:c6:0f:82:60:
         97:70:f6:46:b6:0b:f0:7b:28:94:47:0c:89:27:0a:33:cb:72:
         c0:c0:a0:d2:7d:63:e7:f7:2d:17:3c:71:ff:e9:9b:b8:00:95:
         e3:15:f3:02:11:a9:f3:f4:b2:71:b1:ab:39:51:e0:b2:8b:d5:
         8a:3c:36:82:7b:a0:5e:eb:f8:4e:67:af:7e:70:ec:fe:0b:33:
         f0:94:5d:ef:c1:05:51:7c:35:28:bf:07:f9:b2:71:1f:18:d6:
         e0:70:81:9f:23:b5:cb:54:69:53:3c:6d:f4:f5:e2:b7:fd:fd:
         6b:ee:60:87:31:20:98:6a:96:92:d8:d3:55:b2:99:0e:8d:1f:
         06:21:88:2a:b0:c9:79:d9:71:b5:68:cf:ea:0a:6a:f3:32:9a:
         cf:af:1d:03:5e:6b:b1:05:77:95:e9:87:e7:3d:e9:69:58:dd:
         a6:4e:15:52:d4:8b:c2:3a:5d:45:c3:c7:15:c4:81:4b:5e:c0:
         bc:31:8c:e0:4b:3a:0b:27:5e:c3:d4:40:77:e6:73:7a:9a:a0:
         d9:55:6c:c4:c7:86:0e:89:d7:0c:e6:b6:69:ea:a0:b0:a4:fe:
         53:16:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:46:34 2025 by rpki-client