Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6df13dd6-9e9f-3e56-b561-13542ed34caa.roa
File:                     6df13dd6-9e9f-3e56-b561-13542ed34caa.roa (raw, json)
Hash identifier:          KN6oW9KGS9J5Mm+DJKVgPhpvwB7uy0kcW1umH5v96Ic=
Subject key identifier:   77:29:FC:16:55:69:A5:84:E3:B6:72:21:E7:03:D1:D3:22:73:E6:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AACBB1630430B67E123580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6df13dd6-9e9f-3e56-b561-13542ed34caa.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        76.142.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:cb:b1:63:04:30:b6:7e:12:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=036381cc-00da-45c1-91ca-b8f09f90b08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:d0:fb:2a:99:77:c4:68:40:10:79:c2:9f:
                    78:6b:ba:c3:8f:9e:4a:e0:1c:2e:85:d2:d7:41:7f:
                    7d:46:8f:eb:a3:b5:93:8b:82:8e:cb:92:f1:89:af:
                    2b:2b:bb:4c:6c:6d:f5:91:82:9f:87:c8:30:8f:60:
                    8d:5b:76:cf:de:66:76:29:32:45:a4:49:b7:ab:b1:
                    3d:b9:21:91:15:eb:86:d5:fe:cd:f8:b9:fe:73:5b:
                    12:6f:18:f9:98:26:88:5d:59:b3:ab:8a:47:40:20:
                    6b:2d:91:92:b8:0a:94:b5:f5:07:60:87:e5:f7:aa:
                    5f:84:3d:c2:eb:d9:8e:ae:41:1b:76:e0:81:db:a9:
                    73:c4:55:05:e9:1f:3e:3c:7b:10:98:e5:e6:f7:fd:
                    42:0d:ec:83:8d:b3:1a:e5:90:d5:f6:79:b7:1a:3e:
                    74:19:7e:51:ec:05:29:22:b2:e2:06:7a:a8:99:05:
                    93:9d:6b:14:3a:e2:2b:59:d8:45:e2:33:26:8c:e7:
                    69:40:7a:87:9d:fe:56:91:d5:0a:52:e5:2f:35:e9:
                    15:cd:06:67:f8:03:3f:f4:82:31:01:a7:01:1f:e7:
                    2c:33:8f:63:39:68:40:1c:4e:6e:0a:8a:13:dc:f1:
                    c0:d1:10:2e:c4:e6:80:b8:45:e3:a6:be:53:ae:0e:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:29:FC:16:55:69:A5:84:E3:B6:72:21:E7:03:D1:D3:22:73:E6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6df13dd6-9e9f-3e56-b561-13542ed34caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:ef:95:62:09:ce:bb:1c:33:63:e7:23:a3:2f:14:6a:e3:01:
         ee:f0:84:ef:7b:4e:3b:40:e6:1f:fd:94:3d:d3:aa:b5:30:31:
         87:41:0e:a8:79:0a:63:a6:f2:36:c4:c2:99:06:a5:4b:35:02:
         21:81:22:48:a0:1a:59:8b:18:4b:f8:70:02:a0:f1:d7:c9:e9:
         5a:9a:c8:6a:5a:63:02:e4:b7:e6:0c:43:de:41:f3:b1:a7:ee:
         7e:45:7b:c9:6a:90:e4:b4:a6:40:52:51:02:e6:a1:f3:e8:e8:
         45:09:3d:43:72:3b:d9:db:27:ea:42:e3:60:3d:a5:61:21:26:
         c8:8c:63:d7:8d:29:5a:05:7f:69:9a:1c:6b:d4:36:7d:49:96:
         d4:42:ed:f7:82:ed:c1:bc:f7:0d:aa:7f:53:a0:19:8a:e3:b0:
         3a:b7:0e:ad:d5:20:2c:2b:65:c8:83:1f:07:05:23:99:eb:b6:
         36:df:19:58:13:67:0d:dc:a9:e8:96:3d:18:85:8e:f9:dc:7f:
         eb:7c:c7:4a:55:d1:74:ce:03:12:a9:a7:a0:f5:50:32:67:17:
         62:ab:6e:af:d3:61:c8:fb:b5:37:b2:1d:1e:2d:82:3f:1c:4b:
         53:0d:2c:71:00:40:ff:28:de:bf:51:f8:21:5d:76:a8:8f:56:
         a4:10:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:32 2025 by rpki-client