Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d3e6b0d-fe2a-3ff2-b32b-c3aed980ee3d.roa
File:                     3d3e6b0d-fe2a-3ff2-b32b-c3aed980ee3d.roa (raw, json)
Hash identifier:          zNp3uHvx7D//XSDKD4dxpkyiJS+ksMoCZnKooQsOSyI=
Subject key identifier:   0B:94:45:7D:B7:E3:BB:60:C7:A4:90:F8:22:9C:21:23:4B:75:50:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031F1CAF4BE7124970CB780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d3e6b0d-fe2a-3ff2-b32b-c3aed980ee3d.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.97.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:f1:ca:f4:be:71:24:97:0c:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f39e96a9-bb02-4f4f-8703-43044cdcd2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:6b:c7:51:f3:c3:80:af:bc:9d:f2:cc:70:
                    ff:a4:7d:02:45:85:4d:80:24:48:86:0c:df:5d:88:
                    1e:64:84:3d:2c:a6:9b:40:2d:32:e2:e5:8e:42:fb:
                    89:81:48:07:f9:bd:f6:c8:08:65:52:0e:9f:e2:fd:
                    b5:fb:12:1d:f7:22:34:ff:32:70:97:70:07:f6:2c:
                    b6:38:5a:1b:d9:eb:80:41:f1:db:53:7e:b1:2e:a6:
                    61:58:4e:b7:d7:9f:bd:56:d4:1e:ac:2c:1d:37:9d:
                    9a:f0:9a:1c:f8:c2:3e:47:2d:f6:e1:8c:7b:f3:73:
                    95:10:76:cb:70:58:6f:dc:16:c8:61:f4:1f:69:20:
                    fe:7a:1b:31:ed:a0:3d:40:38:14:e0:d2:51:d9:1d:
                    e7:d6:6f:63:66:0a:31:87:a5:b0:bd:45:39:74:57:
                    c0:72:18:43:62:9e:f7:33:06:f5:df:dc:d2:bf:d7:
                    d0:65:02:18:46:cb:5f:8f:ff:3a:78:bb:21:97:f9:
                    de:d6:3b:16:22:b7:e1:26:7c:63:f8:56:4e:b6:f0:
                    54:9f:21:95:46:42:c3:21:6a:e9:58:3e:95:ef:96:
                    34:e7:86:98:d4:60:ad:80:f9:ce:36:1c:5a:84:10:
                    77:f2:f1:ff:99:43:77:79:e5:78:f5:2a:f3:6d:cb:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:94:45:7D:B7:E3:BB:60:C7:A4:90:F8:22:9C:21:23:4B:75:50:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d3e6b0d-fe2a-3ff2-b32b-c3aed980ee3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:d3:09:d3:df:c4:b8:12:ae:19:7f:55:c9:12:b7:78:6d:
         a1:1f:ed:34:80:96:0e:a0:8b:6f:3a:0a:3d:22:21:d7:a9:c7:
         6f:45:38:c1:37:70:2d:fc:f6:49:4a:d3:71:2d:fb:8a:8b:57:
         ee:87:55:52:cf:fb:23:26:76:73:37:40:10:8c:32:83:c4:5d:
         cc:ce:06:bc:7e:a5:10:be:45:0b:a5:af:60:58:f0:a3:ca:14:
         38:1c:02:b1:b8:64:6f:96:7b:0d:3f:2d:73:ca:7a:53:f1:75:
         2d:80:25:43:0b:1f:22:59:78:e4:a5:d9:89:32:4a:46:1b:ac:
         15:6c:d4:c1:d4:55:1f:66:c1:4a:d9:bb:15:cd:42:16:de:79:
         6b:77:3d:df:de:a1:20:be:59:00:a0:b2:24:a4:33:78:2a:8d:
         20:6d:f1:b1:46:36:20:a7:0c:94:9f:20:70:c9:56:45:06:a3:
         f1:c1:86:f5:dc:72:81:f4:f0:4a:31:8b:48:94:5a:47:cc:70:
         4f:9e:ca:8d:c9:f3:4d:95:53:e1:aa:84:20:e0:00:ad:9b:b6:
         c9:db:3e:36:95:2d:1c:37:df:ae:70:f3:e7:d5:30:7f:0a:9d:
         48:92:59:5c:55:4d:93:ea:6e:c9:e8:a7:df:92:d2:13:36:a1:
         a2:6c:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:15:15 2025 by rpki-client