Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260c1ab9-3305-3a28-8771-954370f5ffa1.roa
File:                     260c1ab9-3305-3a28-8771-954370f5ffa1.roa (raw, json)
Hash identifier:          DNRuKmTha0saxbjII8ETnshW3evCMHMz2ioltcN6Ml8=
Subject key identifier:   64:56:30:1E:C8:D5:28:78:27:08:09:F6:F1:26:38:92:45:D1:1B:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1653BFE7044BFC676F1CE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260c1ab9-3305-3a28-8771-954370f5ffa1.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        75.65.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:3b:fe:70:44:bf:c6:76:f1:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=41f3df03-57d2-4fcc-9480-196a67dd756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:6f:c9:1d:98:a4:41:90:01:b4:c7:04:5a:
                    dc:b8:95:f4:9c:64:f1:de:f5:ff:49:32:d0:71:0e:
                    f8:f6:c6:17:b8:ed:b5:17:f7:6e:40:af:18:bb:b4:
                    13:44:bd:5b:89:df:e1:69:9f:28:10:1f:79:85:02:
                    3f:19:58:78:16:29:2a:fe:76:11:ef:11:e4:41:84:
                    93:da:64:38:e4:06:22:f2:04:68:8c:d4:aa:67:e7:
                    ec:31:cd:62:01:01:6b:34:5a:05:48:93:e1:40:f1:
                    2e:73:d3:21:fc:12:69:59:ae:57:f3:08:35:40:df:
                    b0:d0:7e:85:85:5b:f7:97:7c:ec:4d:df:79:85:bb:
                    13:22:eb:62:df:b3:9e:7d:bc:be:56:b0:11:9a:ae:
                    88:9c:60:91:17:2f:48:15:15:0c:30:15:65:e4:84:
                    61:7b:5e:cc:92:4d:c5:83:bc:39:50:59:60:d0:d3:
                    7e:8d:11:b9:02:0a:44:ce:d8:b3:17:af:4c:4c:ed:
                    fd:b0:e1:ca:6b:2a:68:fc:1e:00:92:d2:e9:61:5d:
                    83:67:dd:d1:27:75:f7:c1:48:11:15:cc:f7:b0:58:
                    41:52:09:c1:58:bc:e1:aa:7b:05:25:93:a8:2b:e5:
                    47:c1:37:fd:d6:dd:b5:fe:6d:95:6c:01:32:30:a5:
                    62:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:30:1E:C8:D5:28:78:27:08:09:F6:F1:26:38:92:45:D1:1B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260c1ab9-3305-3a28-8771-954370f5ffa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.65.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:53:ba:e5:20:01:12:ec:32:92:9b:a2:9e:d5:cb:5d:f4:15:
         24:db:10:39:61:a8:31:ed:51:e3:fb:7a:5f:c5:70:04:7e:cf:
         1a:6a:5f:9d:17:93:e6:b1:53:78:7f:18:bb:96:2a:29:ee:79:
         11:4d:43:5e:17:72:e0:e0:c6:8f:a0:bc:7b:b3:d6:01:8e:45:
         f9:85:7f:75:b5:cd:a3:c5:41:e0:80:37:d7:b6:98:11:fe:ff:
         2b:68:4a:2a:c5:af:02:3b:c7:10:bc:4f:6a:fd:25:93:ec:b8:
         32:04:4c:20:01:a0:ab:17:48:07:f6:91:f4:34:08:fa:3c:7a:
         40:9d:af:b7:57:b5:53:8a:1f:8e:21:79:36:ee:f9:9b:bb:78:
         49:7c:45:f3:f6:84:c7:ad:fc:0e:ba:8c:26:93:cf:c8:01:d4:
         0b:a6:51:53:26:28:9e:0e:fa:e8:4e:56:19:c8:5f:4a:ca:af:
         ea:b5:7c:20:7c:7c:17:6b:cd:72:58:4e:09:1d:2f:62:b5:d4:
         41:0d:fa:82:64:06:24:e4:18:44:01:2b:a7:f3:cb:1f:59:8d:
         db:8e:be:f2:24:54:ce:47:2b:51:40:6a:c4:18:85:d8:1c:bf:
         31:30:18:66:c7:c6:34:ad:c1:0c:20:e0:c2:74:41:1b:7a:6b:
         66:43:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:12:06 2025 by rpki-client