Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ec4e1be-f270-37c4-816a-bb55b50614f5.roa
File:                     1ec4e1be-f270-37c4-816a-bb55b50614f5.roa (raw, json)
Hash identifier:          hdEShV6Pah8P5ViDw5mzxKCcY/Kr2Gr9CkAdSCloufQ=
Subject key identifier:   16:43:EA:14:99:0C:6D:28:E2:95:DF:52:52:86:AC:1F:A3:17:95:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCC6575678625CA09D8280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ec4e1be-f270-37c4-816a-bb55b50614f5.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        76.129.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:c6:57:56:78:62:5c:a0:9d:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=01d2654f-f889-4a39-90ad-2c1479435582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:45:04:2e:24:19:3c:ce:b9:67:f3:45:7f:
                    cd:50:30:b3:eb:3b:01:b0:c1:a1:fb:c5:84:50:e3:
                    ff:79:f8:45:d7:10:fc:b0:82:a9:ea:49:6d:e4:f5:
                    ad:c7:5e:e3:3a:55:a1:38:50:d2:c6:e1:ec:1d:38:
                    19:65:72:e9:e1:13:ce:54:1e:86:96:f4:a4:82:6d:
                    9d:d7:62:b9:5c:cb:aa:04:62:21:f2:29:e5:ed:69:
                    54:63:a5:9c:87:67:cb:24:c1:12:60:f7:b4:7a:75:
                    68:c3:e7:ff:16:bc:0e:fa:32:34:2c:59:79:d3:61:
                    16:eb:18:13:a6:d3:d9:d0:71:7a:4f:41:ee:7b:b9:
                    68:25:4b:dd:06:fc:f3:6b:d2:5c:76:2c:ab:af:18:
                    aa:d2:75:6b:11:85:5d:ba:a5:48:b0:9b:37:c4:7b:
                    68:34:73:3a:61:ad:1a:42:06:16:dd:05:7e:67:0b:
                    df:0f:33:c2:d6:42:d6:2e:e1:69:11:b3:da:a7:13:
                    f7:9c:a8:92:4d:53:9b:b2:5c:a8:98:75:5a:5c:c5:
                    6a:97:b0:f8:1c:3d:ec:a1:6f:c5:c4:92:91:60:be:
                    25:fc:21:89:8f:f8:2e:78:97:cb:6b:a8:6d:85:47:
                    e0:eb:f9:62:56:0e:69:87:a7:b9:e5:8d:f5:6f:53:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:EA:14:99:0C:6D:28:E2:95:DF:52:52:86:AC:1F:A3:17:95:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ec4e1be-f270-37c4-816a-bb55b50614f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:be:52:60:6c:5d:e5:76:91:e1:03:87:67:07:5e:30:c6:
         17:86:de:bd:df:5e:33:8b:fc:bb:fb:5d:fc:1b:8e:52:6b:07:
         b6:33:aa:78:d1:57:fe:b7:6e:01:ea:bb:93:0a:6d:89:f1:09:
         54:04:07:5f:e1:4d:7c:4e:f7:0d:b1:c2:fb:04:c8:11:1e:04:
         47:ad:0e:6f:cb:85:4b:6b:f3:19:e4:49:7d:62:18:a5:b9:9f:
         9f:cf:93:c3:50:9f:99:c2:f6:7b:cf:54:f2:a7:ee:80:10:65:
         45:9a:24:1d:3a:15:79:a2:51:88:f3:dc:6b:d5:00:bc:58:22:
         e9:be:a0:66:59:52:c0:15:71:a7:50:d4:21:17:3c:39:f6:be:
         a4:ef:0e:17:4e:94:47:3f:4f:01:20:3c:ca:67:30:bb:19:87:
         e7:fb:f2:e8:9f:87:fe:a7:59:5e:34:87:e4:d3:67:bd:1a:c4:
         2a:7c:97:19:dc:27:e4:58:44:82:08:dc:44:c3:06:18:e5:22:
         3e:2f:57:84:5a:18:3f:da:ca:0e:f9:4a:1d:2b:46:2e:e5:f3:
         d8:e5:68:f7:de:3e:ff:71:20:b7:bf:a8:4d:2f:c9:31:36:18:
         c8:74:2d:3e:6d:59:a4:f6:06:39:8b:70:d1:1b:30:02:1a:85:
         5a:9d:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:33:17 2025 by rpki-client