Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4699a3af-762e-3ba5-acbc-3c5baa2c796b.roa
File:                     4699a3af-762e-3ba5-acbc-3c5baa2c796b.roa (raw, json)
Hash identifier:          2B3hi70MdqGmxnD6h9+8tWPoR0xgkM3rXRDIbNFdGCk=
Subject key identifier:   16:B5:C1:7D:55:C6:E2:6C:A9:E5:99:5C:37:30:AC:7B:53:AC:72:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB614270CADEFCAD532280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4699a3af-762e-3ba5-acbc-3c5baa2c796b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        96.97.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:61:42:70:ca:de:fc:ad:53:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=51338e3d-ec48-48cc-8ddb-ff17f4488132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:7c:e4:f2:95:c2:2e:25:44:16:27:c0:10:
                    86:96:c7:fb:d4:71:d3:fe:31:a7:16:db:8f:18:64:
                    3e:7b:52:f4:1a:c2:1c:a9:f5:84:93:ad:66:44:98:
                    5b:14:b0:89:e0:3d:2e:de:74:46:9e:a6:ba:87:62:
                    b6:80:1b:cf:f9:7b:fb:b5:30:85:82:1e:9d:d9:9f:
                    88:ff:89:03:78:2e:99:11:00:e2:3b:f0:98:e5:ba:
                    94:e1:c0:dd:e4:e3:b6:bc:b6:91:c7:7f:e9:cb:e4:
                    a3:f2:e4:51:df:ed:96:25:91:8b:f1:82:e8:2d:0f:
                    da:70:8b:22:37:f6:e7:c1:60:a2:a2:9c:5f:9a:7b:
                    da:39:45:14:17:79:c0:da:89:cc:76:e1:3a:ec:b9:
                    ad:1d:f7:94:eb:2b:32:f5:de:72:36:a1:24:52:4e:
                    f1:57:25:b9:7d:26:b4:07:28:70:cd:25:e3:68:de:
                    5e:40:45:ea:f0:bf:b8:90:7f:f3:81:38:e6:a1:f5:
                    38:c3:85:c8:89:ed:1a:19:8f:73:1a:58:d4:c6:a0:
                    3d:0e:06:82:9a:0d:f1:d8:45:90:9a:1c:ab:6c:a6:
                    9d:9c:f4:d7:5a:61:99:88:e4:55:df:b6:ba:da:4a:
                    54:ad:ba:71:93:02:24:f2:48:1f:8a:d5:a0:ae:d2:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B5:C1:7D:55:C6:E2:6C:A9:E5:99:5C:37:30:AC:7B:53:AC:72:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4699a3af-762e-3ba5-acbc-3c5baa2c796b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.97.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:40:b2:ba:75:97:cb:e7:e6:97:ae:28:f7:b2:1e:0c:a5:
         95:26:17:d6:2b:48:5b:81:33:af:73:5d:81:a8:52:66:6f:82:
         6d:20:28:7e:e2:08:b8:c6:98:0d:58:df:73:e6:ae:cd:e5:28:
         c5:9e:f5:d2:93:ce:70:55:46:b7:c1:37:28:60:b1:d0:2e:0b:
         b1:88:06:3d:5a:0b:e2:42:94:a2:d8:30:00:cc:eb:57:86:e8:
         84:a6:e7:32:d4:a5:cc:5d:8b:99:1e:91:f7:49:6d:a0:23:dc:
         ad:1e:16:9c:cb:de:1f:ab:24:48:27:69:99:8e:95:90:db:2c:
         a9:5b:0d:2e:54:0e:8a:5d:10:83:d4:f3:ed:8e:32:86:b3:e2:
         36:b2:94:a1:eb:7a:c5:00:dc:70:4b:e4:97:63:f8:c4:98:a8:
         f4:b4:d0:ab:bf:8f:45:35:21:71:25:79:e3:cd:24:dd:e4:20:
         32:2b:29:bb:62:3f:ce:ea:c0:72:c3:dd:f8:66:a9:aa:57:93:
         e8:e9:2c:f7:c8:d7:91:77:03:95:88:ed:05:92:cb:c7:be:19:
         0e:70:0b:b1:d4:14:f6:60:79:d1:c4:b9:05:7b:ae:51:81:28:
         5d:94:4a:50:ed:27:d3:dd:1b:cb:2a:95:37:4d:4d:69:0e:dc:
         2b:4a:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:49:32 2025 by rpki-client