Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5505cbb9-1723-37eb-87d8-ddc24758e377.roa
File:                     5505cbb9-1723-37eb-87d8-ddc24758e377.roa (raw, json)
Hash identifier:          RrlFy2YcU6kC2mrkqbr3TLoUR1tF+tQ/gDeortqCK0Y=
Subject key identifier:   1A:5B:31:FA:28:30:4D:DD:04:A4:7E:B6:D1:67:47:76:38:5A:E6:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC557751591049F58B96400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5505cbb9-1723-37eb-87d8-ddc24758e377.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        76.102.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:57:75:15:91:04:9f:58:b9:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=3c1133d5-f34c-4bc5-b3f2-099fba4ea96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:81:49:e6:7c:14:d1:6e:d6:4a:30:6a:ce:5f:
                    df:34:4e:f8:f5:ff:e4:b5:35:e9:e0:bf:80:6f:96:
                    da:c2:35:06:e4:24:d7:e6:cc:e2:19:97:7e:06:ae:
                    b2:46:b3:84:a6:12:da:09:4f:52:2b:c3:4b:1e:ff:
                    df:fd:51:09:24:75:b0:47:9b:22:81:97:0e:6c:e4:
                    d0:8e:28:81:7c:d9:cf:b5:cc:ba:d0:f4:23:ee:b1:
                    5e:cb:c7:a6:4d:fb:c8:f3:a0:5b:96:aa:9d:2c:bb:
                    10:49:1c:40:a5:db:d8:98:20:f4:f7:96:17:16:d8:
                    83:fd:d9:43:12:7f:72:e7:12:d7:da:1c:89:15:15:
                    a2:f1:e2:39:58:e4:d7:24:27:52:76:72:61:ff:2f:
                    25:1c:1e:64:1e:76:a6:08:56:d6:ff:2a:69:5d:e4:
                    0d:c2:b3:fa:3c:a4:c2:2e:24:c0:14:5c:a1:4e:99:
                    63:c6:af:75:0a:f1:be:8b:ef:3d:b6:b0:10:af:dc:
                    99:70:a7:37:65:4d:1e:94:18:14:2e:7f:d1:22:4c:
                    2a:e3:31:13:d7:e1:da:02:21:85:ae:01:28:58:1a:
                    a8:88:5f:6b:93:bf:37:de:1e:d6:8d:a1:5c:96:02:
                    ba:90:1a:e6:15:d3:34:82:9a:72:b5:ff:43:22:c7:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5B:31:FA:28:30:4D:DD:04:A4:7E:B6:D1:67:47:76:38:5A:E6:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5505cbb9-1723-37eb-87d8-ddc24758e377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:10:9b:8d:27:62:65:93:13:97:d7:f1:71:13:99:b6:55:
         b3:07:c1:60:0a:3d:0c:bc:82:b5:46:f6:dc:5a:94:b0:a7:5f:
         88:f6:94:bb:a5:b1:f8:fe:8e:a2:e0:28:b2:09:85:72:b1:ec:
         ff:45:f1:9f:ff:b1:65:f8:e1:51:93:cd:dc:b3:00:0f:46:ce:
         3a:23:54:d9:98:19:a0:c8:e5:e1:3b:9e:9c:d3:a2:ad:b2:2f:
         b2:e7:db:9d:cc:76:94:ed:b3:61:b1:d1:c9:e1:c0:b3:0f:77:
         fc:46:9f:8d:68:d3:f2:5b:96:9e:9c:71:39:c4:48:b2:25:08:
         00:67:61:ef:99:20:07:9f:4a:dc:a8:65:7b:43:2b:19:69:1d:
         08:e9:0e:55:59:39:10:41:c2:12:2d:c3:d9:5a:ed:19:5d:8e:
         9a:f3:21:ac:44:ea:35:ef:96:06:c2:e4:72:27:f5:97:c4:eb:
         60:04:5e:6a:05:e2:4d:82:1e:68:f4:d3:0c:3d:ec:d4:ae:28:
         7f:05:6e:4e:4e:f0:db:5b:02:c4:a0:33:c6:b7:fd:1f:75:51:
         e5:e7:a9:b5:42:92:62:b3:6a:b5:69:b0:08:c9:12:a2:22:98:
         ba:ab:8d:b1:52:6c:9f:a7:c5:1e:be:f0:bd:b7:4a:3b:90:0e:
         ef:9a:a2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:26:40 2025 by rpki-client