Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b8696e-bede-363f-9dae-269029941227.roa
File:                     75b8696e-bede-363f-9dae-269029941227.roa (raw, json)
Hash identifier:          4wo7uCy7nuJtH8WZbMgvn2fsNlMeaAE4fBcLiJZjZZ4=
Subject key identifier:   92:A2:9E:76:E8:C9:05:19:8C:DA:F3:3E:2D:1A:3E:75:99:ED:16:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC5C5EFCB6CCE085CED080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b8696e-bede-363f-9dae-269029941227.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        162.150.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:5c:5e:fc:b6:cc:e0:85:ce:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=bf4d922a-41dd-4581-a7c3-a91208dd3f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:d4:68:16:7f:8c:a4:88:6e:45:a1:55:55:
                    04:58:a8:b5:65:ed:32:d4:ef:2e:dc:81:6d:d3:69:
                    e0:d1:1f:b5:3c:63:d8:99:d3:56:ef:da:cc:30:1d:
                    01:2e:39:db:73:6f:91:52:43:bd:6a:81:eb:2c:37:
                    0e:c7:36:76:ef:b4:9c:ec:90:6b:b8:e1:1f:13:5f:
                    ab:18:9d:da:81:56:87:60:ec:c7:9f:9c:b3:a5:91:
                    e9:d0:5e:9d:6b:ad:a2:5d:bd:12:28:d8:a8:df:2e:
                    95:e2:1f:2f:ac:a5:d8:27:11:95:a6:e4:97:3e:8c:
                    e0:25:02:dc:98:6d:2d:6c:d5:5c:63:38:b6:7f:89:
                    98:31:e3:91:bb:34:ea:e4:2d:6a:5a:b2:61:d8:32:
                    8e:16:e2:cd:6d:97:61:a6:bb:1a:77:d2:e3:ce:c8:
                    13:6c:dd:9f:ee:b2:ac:08:a8:15:6c:0d:cc:b9:ee:
                    23:8b:73:fe:3b:dd:39:fe:1f:c4:41:f4:7f:04:d6:
                    eb:05:35:65:94:1a:1c:14:4f:17:19:69:bb:08:bb:
                    9c:79:9c:ae:d3:1d:08:56:6e:c7:6a:bc:01:e1:ed:
                    5c:e0:5e:15:49:58:c0:02:44:51:0c:af:d0:29:34:
                    47:41:6e:d2:10:38:89:ed:46:28:7d:61:0c:a8:a6:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:9E:76:E8:C9:05:19:8C:DA:F3:3E:2D:1A:3E:75:99:ED:16:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75b8696e-bede-363f-9dae-269029941227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.150.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:d6:21:6c:29:f8:00:bb:48:6b:56:90:72:e0:57:94:d9:
         d0:36:28:02:e7:f7:98:58:cc:02:93:b7:ba:f0:a5:5d:7e:90:
         09:4c:a9:f9:c8:77:54:79:e0:0c:ab:ff:7b:78:c2:cc:a0:d1:
         e6:e4:3c:4a:6e:40:70:7c:f8:a1:c9:16:ac:a0:e2:28:9b:35:
         cc:73:e8:de:8c:d9:12:9f:fa:14:10:8a:b6:fc:ca:f5:65:9a:
         f8:05:de:50:ff:ea:27:bf:4a:bd:ec:a6:01:58:4d:dd:ba:f8:
         57:fe:d4:60:68:fe:ab:a0:e0:14:0d:1a:39:12:ce:b8:9c:b1:
         f8:c1:1b:88:cf:1f:49:41:a2:47:21:0f:d9:2f:d2:d6:f5:7c:
         e7:85:43:bc:40:c4:8d:b5:0f:99:bc:97:d5:7c:fd:b0:e9:bc:
         fa:9f:5f:11:43:a9:e7:8c:e3:05:a7:56:87:e1:66:67:0f:0d:
         9f:20:d0:c0:49:78:71:e3:59:d1:66:4c:c1:ab:00:b2:b8:0a:
         55:77:41:d1:a7:70:14:fb:6f:56:dd:58:04:08:e2:32:55:86:
         a5:70:84:9e:01:4a:cf:d5:36:bc:33:c7:1b:d2:73:6c:3e:fe:
         9b:17:b1:9f:67:17:9c:fb:8f:7e:df:0a:5f:42:3a:2d:ed:1c:
         51:f6:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:18:43 2025 by rpki-client