Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64ab48b3-f992-3378-9b56-ac7d30aae51e.roa
File:                     64ab48b3-f992-3378-9b56-ac7d30aae51e.roa (raw, json)
Hash identifier:          LDu9cG3yhnSdzcl2UQMl1S7Ke20I1dZWWISU6MNQGCI=
Subject key identifier:   C4:F2:AB:E6:A0:99:4C:F6:D8:35:33:97:1F:2A:86:FD:63:73:B9:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCF0482BC3AF0770CAB940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64ab48b3-f992-3378-9b56-ac7d30aae51e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     20214
IP address blocks:        76.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:f0:48:2b:c3:af:07:70:ca:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e4558850-e1b9-483a-b418-87085e81217f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:30:25:c8:0a:2c:14:b8:aa:27:db:ba:b1:
                    91:88:b2:f9:b4:78:bc:fe:6b:24:f8:44:03:62:a9:
                    c6:60:08:0a:6e:07:8b:8e:b7:9d:10:a9:05:55:60:
                    79:69:55:36:70:6b:52:37:3a:97:fe:40:73:02:50:
                    f6:03:44:99:65:95:17:b7:97:a1:43:4d:02:88:24:
                    c2:56:9b:ca:06:e3:4b:69:3a:9c:7d:1d:7e:cc:0b:
                    e6:3b:31:90:12:e8:64:e0:f8:3c:e0:78:2a:77:15:
                    e1:15:d7:4e:c7:8d:69:86:d0:33:2d:0e:b2:58:4e:
                    74:78:d9:13:93:08:81:bc:1d:3b:d2:ee:bf:a1:3b:
                    01:7f:af:9d:52:ba:c8:e6:fc:63:93:b7:69:a4:96:
                    b0:5b:f0:12:22:32:99:f4:1a:35:bf:f4:bb:a9:b1:
                    88:1a:bc:d1:9b:ad:7f:9a:dc:0f:00:d0:f9:87:d7:
                    9a:de:35:69:17:a3:36:bd:17:f1:b5:55:85:63:fb:
                    6f:fa:0c:e5:bb:9f:49:04:91:eb:5b:5c:95:f2:b0:
                    e3:1e:bb:4b:c7:c2:2b:54:df:09:65:9f:70:7d:a8:
                    25:c5:fa:b7:2e:46:86:4b:3e:09:80:b6:e1:5e:8c:
                    4d:6e:db:1e:9d:18:a0:6c:d8:3c:eb:8d:8b:10:ec:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F2:AB:E6:A0:99:4C:F6:D8:35:33:97:1F:2A:86:FD:63:73:B9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64ab48b3-f992-3378-9b56-ac7d30aae51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.128.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:5a:6f:1b:09:26:c2:9b:99:02:f1:6d:10:b9:c8:dd:30:dd:
         56:18:f5:59:94:70:43:55:db:72:84:2e:7a:6c:e6:fd:d7:51:
         d0:73:5b:fa:1a:58:aa:0e:08:e1:e4:a4:7d:ab:01:ef:37:4e:
         31:4f:bb:13:91:57:3a:d3:d6:e8:4e:81:ba:23:37:f3:bf:14:
         52:18:c5:6a:aa:fd:8e:d4:3a:b4:27:85:08:ee:51:d3:4f:fe:
         fe:36:c8:a3:7a:56:63:58:96:8a:67:54:7a:eb:63:f9:4d:83:
         df:f9:ac:08:a4:71:55:b1:bb:c4:96:4b:74:34:40:3b:de:6d:
         b4:7a:3c:38:f0:0e:f4:8c:94:3a:c4:0d:30:93:56:21:a2:e9:
         b9:8a:98:2e:4a:a7:a5:dd:cf:55:af:4d:23:11:a2:1e:6f:64:
         19:6b:2d:d1:7a:74:42:0c:07:0d:aa:64:66:53:5b:3e:8d:c9:
         fb:76:99:a1:d2:08:33:58:d9:24:cb:3c:39:16:81:da:d1:e9:
         e8:f6:38:65:d6:ea:82:8b:b0:da:dd:4a:d4:5b:52:c0:7a:a6:
         47:1e:10:cb:a4:dd:91:55:87:b5:bc:69:89:e6:73:dc:0b:fe:
         b6:4e:71:af:9f:c9:8f:d0:bc:6e:ce:97:b4:cb:27:9d:53:6f:
         97:09:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:57:21 2025 by rpki-client