Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74036566-785d-36c9-9da0-3b867f59b904.roa
File:                     74036566-785d-36c9-9da0-3b867f59b904.roa (raw, json)
Hash identifier:          zLu/QXfdsikYanMBopoYjMTIXvv/PblAspWrD6Uxl7g=
Subject key identifier:   11:0B:E5:85:FD:E9:E3:F4:65:48:DB:09:4E:C5:FE:B0:83:5B:09:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0317714304A8A02AEF18420
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74036566-785d-36c9-9da0-3b867f59b904.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.17.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:77:14:30:4a:8a:02:ae:f1:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=8d91b9d9-149b-4e27-a758-4aa541deb3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:3d:4b:16:fe:29:eb:f4:6c:19:10:f6:0c:
                    67:7e:1f:e3:77:07:9a:73:d5:7f:5b:6f:d0:11:1c:
                    8e:64:64:f0:2a:b3:8c:3b:37:69:a2:2b:62:f5:31:
                    1d:06:43:5c:86:07:6a:dc:19:f6:b3:cf:62:83:c9:
                    f6:67:a8:ea:dd:8d:5c:fe:f4:76:6e:43:b1:92:63:
                    e4:70:44:1e:e8:33:ea:b3:62:54:20:c1:8b:0f:a1:
                    65:92:18:fb:6d:67:61:8b:62:7f:62:b4:12:75:7a:
                    a7:74:51:64:75:99:c6:a2:47:41:c1:68:29:39:62:
                    f0:30:d0:c6:cd:37:08:24:ec:3d:4d:60:74:1b:3d:
                    34:7e:68:9b:df:77:d0:41:dd:09:43:2d:fd:85:a1:
                    e2:1c:57:32:6c:1e:c8:5b:c3:ac:90:38:8a:ec:8d:
                    3f:60:6c:9f:14:b6:ea:87:c5:63:4b:8c:21:08:f5:
                    55:8a:f5:02:59:05:9a:c6:e6:c3:cc:c0:e2:35:3e:
                    3b:8b:ad:28:66:5f:cd:16:7a:b5:34:b2:3d:10:74:
                    21:6e:58:fa:e5:3f:51:63:48:99:7d:f7:59:00:ec:
                    bf:5b:42:17:64:40:39:0c:11:ab:f9:e1:33:1d:a9:
                    3a:97:44:c3:0c:21:8b:92:3b:27:35:61:0a:e7:9d:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:E5:85:FD:E9:E3:F4:65:48:DB:09:4E:C5:FE:B0:83:5B:09:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74036566-785d-36c9-9da0-3b867f59b904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.17.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ca:f3:c4:03:dd:69:37:23:2b:07:49:4e:6b:b7:01:fa:bd:
         b4:8e:c3:40:16:98:93:1f:f4:0f:71:92:b4:78:79:f4:d6:12:
         58:9b:47:e9:1f:01:88:e1:fb:37:71:17:27:a0:29:ee:ea:72:
         f5:cc:e3:b6:16:1b:be:eb:82:05:dc:62:46:68:29:32:60:49:
         1c:a4:80:54:16:e3:b5:d0:bb:5a:8e:26:2e:78:39:b7:d0:ec:
         43:40:e6:12:95:dd:9d:62:83:44:17:ed:42:9a:d9:64:a8:00:
         2a:d9:4d:22:71:ba:b0:18:cf:43:6d:e4:28:49:76:a9:2f:f4:
         2e:75:df:1a:e2:b6:1c:25:80:7a:43:9c:75:f0:31:89:8e:8d:
         44:55:a8:cc:c3:85:7e:46:a7:dc:1f:26:97:da:1a:f3:8b:fd:
         90:a0:6b:f9:cd:b8:57:a9:e6:55:51:95:8b:10:32:fe:ec:6b:
         0f:c4:e0:a6:2e:75:e8:48:d2:53:75:12:bf:99:f9:c2:f4:3f:
         3c:7d:42:58:60:9f:99:e0:0d:29:8c:28:4d:08:55:5d:bf:c9:
         ba:59:87:9d:35:bf:3f:84:27:92:83:2f:bf:a8:a7:ca:62:97:
         9d:72:b1:23:80:c3:9c:b6:e2:b0:6b:2f:22:45:6a:be:9d:34:
         00:1d:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:31:29 2025 by rpki-client