Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/301dbbff-cdf3-32dc-b728-bc601cae36e9.roa
File:                     301dbbff-cdf3-32dc-b728-bc601cae36e9.roa (raw, json)
Hash identifier:          IVNjkf43KMfxNZgIz+lGNQP2DLeXJ/f3f3NMAwVlbwo=
Subject key identifier:   A8:79:07:59:AA:0D:FE:5A:87:3C:99:F4:D0:EA:75:89:25:7A:68:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDB65A270369C8B9DC4F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/301dbbff-cdf3-32dc-b728-bc601cae36e9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        76.106.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:b6:5a:27:03:69:c8:b9:dc:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=17daab0b-25f5-4496-8919-499c2ca3591d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2f:06:8f:4d:01:9d:8f:9e:e5:99:1b:0d:b7:
                    8f:21:f6:b4:d4:68:a1:d7:9c:06:49:b0:48:ac:b2:
                    09:03:2c:46:5e:96:fa:19:b6:c4:65:eb:05:4a:0f:
                    f2:c9:fe:ca:b6:e3:54:01:ed:97:f1:17:c7:25:91:
                    f4:8f:70:c4:53:b5:49:b6:ea:a0:b7:e0:b3:39:a9:
                    45:3b:8e:01:9f:5e:d8:b0:87:a8:c9:b7:fd:7e:73:
                    e7:06:62:67:b8:e8:37:73:24:c8:d0:ab:b4:bc:2e:
                    05:79:76:f4:3e:2d:d2:95:47:5a:f8:58:5d:fe:97:
                    e7:c2:f4:d5:99:3f:54:d5:c5:08:11:cc:01:52:94:
                    fd:17:b8:2e:38:46:65:88:a3:76:52:30:9c:1a:11:
                    6d:2d:c3:03:ff:19:52:b2:8f:93:a9:e8:b9:f5:93:
                    9b:1b:6f:f5:aa:cd:42:ea:4e:a9:ee:96:72:b2:8b:
                    de:aa:9d:a2:c1:15:d5:a9:fe:36:36:fb:6e:a3:89:
                    73:22:09:68:e0:70:1d:98:48:34:25:c2:2b:68:88:
                    3b:e6:36:e3:78:7c:ce:a1:79:d2:40:87:9c:5d:b1:
                    fb:22:76:33:26:cc:dd:28:74:b1:d8:91:67:e2:4b:
                    fa:d8:d3:6d:a0:4a:29:8e:9a:b6:e1:4f:ca:bc:fe:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:79:07:59:AA:0D:FE:5A:87:3C:99:F4:D0:EA:75:89:25:7A:68:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/301dbbff-cdf3-32dc-b728-bc601cae36e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.106.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:64:d6:3b:25:87:60:5a:99:c7:45:36:f5:4d:43:ef:5c:
         42:6d:ae:70:0b:82:1f:bb:39:55:91:fb:bd:08:59:f0:b5:11:
         e5:b1:34:91:05:3f:8a:5f:3b:ec:d0:6d:bd:e4:de:c9:9e:aa:
         f5:36:1b:41:c7:f5:0a:92:29:38:ff:cd:37:0b:26:60:93:43:
         e2:78:fb:64:af:ab:33:f0:78:9d:82:b8:7e:be:28:35:99:f6:
         06:4a:8f:34:ac:25:04:24:f6:71:00:3e:95:04:e9:6d:0f:41:
         22:ca:0d:e3:0d:82:c3:4b:81:0f:16:b5:14:e9:4a:55:4b:8b:
         e2:86:d3:42:e1:89:e3:bf:5b:fa:59:36:de:03:77:75:48:ca:
         23:b3:f1:cd:59:3d:0e:08:11:28:41:2c:ed:03:16:f8:4c:78:
         88:cc:12:19:84:ba:9b:97:6e:2f:a9:eb:8f:f7:4e:1b:af:6c:
         55:5b:39:e2:c4:32:dc:48:95:c2:08:f2:04:6d:44:74:39:fb:
         14:24:5e:f9:59:1d:9b:38:9e:8a:06:a2:c7:7e:00:75:16:14:
         5e:59:57:95:d5:0f:4e:1e:cf:1b:19:35:cd:26:bb:a8:04:b6:
         f1:8a:32:8e:8a:93:12:fd:86:85:54:93:d2:ad:70:6c:08:14:
         18:4e:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:44 2025 by rpki-client