Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da887ca-a2ff-31f4-a782-008f8b53378c.roa
File:                     2da887ca-a2ff-31f4-a782-008f8b53378c.roa (raw, json)
Hash identifier:          h7z5SkHgri/tkL0d6S0ROwCoZCtceUlT3HMC2yzmktE=
Subject key identifier:   FF:E6:5B:83:EF:DA:0F:6F:C4:FF:4C:53:07:29:61:9B:C9:62:3B:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2A6A9A63DC4226B4148A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da887ca-a2ff-31f4-a782-008f8b53378c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        76.136.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:a6:a9:a6:3d:c4:22:6b:41:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=1d2dd9c9-61f3-49bf-826a-75fee2df6622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:b5:49:c8:14:71:11:30:6d:66:9d:c4:f3:
                    c6:df:ef:5b:12:49:ea:71:02:0f:54:32:43:64:e1:
                    99:08:04:b5:5f:8b:ee:5f:84:9d:1d:a2:81:7e:77:
                    43:01:eb:21:cc:0a:04:10:1d:03:84:6d:eb:af:21:
                    c6:f8:a6:1a:0e:9e:ad:6e:1e:1f:19:36:dd:cb:48:
                    fb:2e:08:b0:dd:58:2e:7e:85:e3:79:46:c6:e3:03:
                    bc:27:6a:01:d7:a8:25:54:85:82:93:07:b2:14:66:
                    23:e2:57:6a:46:14:a8:19:14:76:0c:e7:6d:64:75:
                    11:c3:ab:22:80:2c:38:6b:1e:e3:6c:b5:02:ea:c4:
                    78:2a:95:f5:93:5c:50:8c:78:0e:e8:ce:6f:c2:7c:
                    ff:80:87:03:f3:db:dc:45:cc:68:89:56:fc:a5:92:
                    df:a6:3b:6c:89:38:7f:ad:e4:2c:98:68:c4:70:7a:
                    88:09:e9:70:f5:a7:a8:21:9d:68:e2:9f:4c:2c:17:
                    d3:ef:a4:cb:cc:87:b0:ec:ef:43:61:dc:9d:a2:34:
                    b6:ea:68:5d:8b:76:88:3c:d0:6e:4d:52:dd:ae:2f:
                    b1:87:8c:3c:b3:94:f1:80:57:93:db:16:ac:6f:64:
                    a5:ec:a0:b9:8c:4d:71:7f:2b:0c:b8:da:e1:32:05:
                    f7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:5B:83:EF:DA:0F:6F:C4:FF:4C:53:07:29:61:9B:C9:62:3B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da887ca-a2ff-31f4-a782-008f8b53378c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.136.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:c9:2f:d5:cd:ad:59:ec:ac:fa:89:36:1b:f2:73:f3:6e:
         69:9e:33:63:f0:18:b7:df:13:d9:c8:88:3d:69:45:bf:24:6e:
         84:75:ba:2a:2d:29:a6:87:62:44:89:2e:ca:91:f5:72:95:3e:
         a8:04:62:dd:74:89:20:18:55:e4:a8:ed:87:ad:c8:b3:37:b3:
         8d:47:34:18:32:ef:fa:dc:f9:4a:8e:4f:47:0d:ea:b3:20:d7:
         e1:79:c5:ef:f9:52:c0:18:5a:c9:1c:cf:a2:60:ea:0d:84:d8:
         95:1f:8d:2c:94:55:33:a4:6b:4f:d0:a0:c5:3b:5d:96:c3:cb:
         b7:b7:ce:af:b1:54:c2:f2:f0:08:07:94:03:ca:e2:05:c6:fb:
         4b:5b:75:5f:75:cc:f7:dc:19:b3:08:02:55:8c:0f:fb:c2:9e:
         06:68:e4:ea:70:82:4e:3a:3c:25:54:38:a5:e3:1e:f3:65:5b:
         9d:4e:a1:56:e4:c2:e2:3c:88:cd:1d:6f:ae:3e:a7:01:c1:72:
         b0:cf:2e:5e:05:84:22:07:41:3d:c9:09:d6:2d:40:c3:08:bd:
         3d:48:42:b0:b3:90:60:8f:6d:f0:99:90:75:74:3d:e1:a2:ed:
         48:83:fc:8c:bd:3b:20:51:d9:3f:0b:16:95:36:98:12:63:2d:
         6c:d3:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:27:04 2025 by rpki-client