Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bce5e60-41bc-3beb-9d17-28033c462e29.roa
File:                     6bce5e60-41bc-3beb-9d17-28033c462e29.roa (raw, json)
Hash identifier:          3hB2/e8F+1QqF+7Du8aU3LnuPbauJ0xQEs8s6bxzSZo=
Subject key identifier:   66:0C:44:F0:65:D0:B5:12:8F:E1:D9:FA:C5:F5:7D:2A:1E:41:3F:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD767218737A9C51063D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bce5e60-41bc-3beb-9d17-28033c462e29.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        75.72.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:76:72:18:73:7a:9c:51:06:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9c313632-ebc3-4fb8-9f67-01736fb72727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:ff:4b:f5:a6:b5:8e:6f:34:00:84:da:0c:
                    09:de:00:fb:0d:e4:da:7d:35:d6:b0:78:66:d5:ad:
                    1d:19:f6:c9:80:f2:0f:41:7b:8b:b0:84:c0:62:ac:
                    72:ad:21:04:d5:2c:a0:1b:6f:41:95:e0:4a:e6:8a:
                    84:f7:2c:79:08:43:d4:65:28:bd:8a:4d:19:c5:d2:
                    8e:d2:40:76:07:6e:35:7c:35:bb:27:ab:cf:db:a7:
                    7d:88:79:08:94:17:8e:6a:64:93:38:45:3e:49:e9:
                    20:31:43:a7:8e:e2:c0:b4:e6:42:bf:93:5e:1f:55:
                    45:0c:48:c7:c6:78:11:88:cd:ea:dd:4b:cb:00:67:
                    8c:7e:6f:00:32:7b:7d:c7:87:c5:11:45:f7:5f:39:
                    3e:33:ff:5a:26:22:36:68:e3:91:65:6f:f7:b0:92:
                    07:03:81:a8:ab:56:f5:c9:98:04:fc:bd:5f:25:34:
                    13:7c:2e:a4:f7:94:1e:20:2b:8e:ff:4c:b6:6a:75:
                    76:80:d2:04:41:9e:4f:08:0a:2b:c4:a8:c6:e8:bc:
                    8e:ac:a2:34:f6:b2:27:b1:f1:67:2a:9c:8e:c3:ea:
                    f0:e4:ff:36:5b:cb:89:91:7e:9c:85:d7:e9:8e:bc:
                    6d:79:5c:b3:c8:80:bd:df:6c:af:24:cf:5f:c6:3c:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0C:44:F0:65:D0:B5:12:8F:E1:D9:FA:C5:F5:7D:2A:1E:41:3F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bce5e60-41bc-3beb-9d17-28033c462e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.72.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:54:0c:85:b8:e9:46:ac:af:fa:01:e1:24:2d:55:07:5c:0e:
         37:59:db:de:b7:f6:b2:4c:c9:35:6a:6f:51:b3:5d:aa:a5:df:
         cf:9d:c5:5b:ea:92:87:ea:2d:a7:42:2e:b6:b1:34:6e:6d:cd:
         19:20:97:19:7c:20:24:eb:b6:ea:09:12:cf:f6:19:74:4f:e3:
         81:dd:59:94:0c:4a:de:94:a1:13:0b:cf:33:81:a8:cc:7e:80:
         75:d9:cd:58:e1:24:b6:97:e8:48:9d:2a:c8:e3:e5:b9:7c:68:
         68:9c:09:f5:17:d5:67:d0:9a:49:87:7d:70:6b:dd:87:39:d2:
         0d:42:75:85:9b:55:07:b9:d4:f1:e5:bb:d4:c8:39:d4:ed:c3:
         a8:e0:80:4f:ae:51:83:2d:59:d0:ac:ab:15:cd:ad:5a:06:de:
         dc:bb:7e:a8:b0:8a:cb:5f:69:1c:76:47:b9:66:14:6b:21:05:
         4c:af:c5:34:b2:23:31:50:70:0b:89:88:7d:83:a2:3f:68:b1:
         d3:0c:e9:fe:1c:79:f5:c8:a4:18:a6:2b:97:08:d2:76:12:46:
         19:47:c0:9d:80:fa:c0:5a:61:5e:97:eb:00:df:5e:8d:f5:79:
         7c:16:cc:c1:ca:c2:5e:09:61:09:3c:b6:55:58:67:38:22:ef:
         54:d5:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:44:33 2025 by rpki-client