Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/776e8e17-e358-36e7-a3b3-699c7e855b0e.roa
File:                     776e8e17-e358-36e7-a3b3-699c7e855b0e.roa (raw, json)
Hash identifier:          tzik3P6znx6PtmPJbXvP4pn3JJE596bC8hohDt0GucI=
Subject key identifier:   4E:F2:E4:AE:AF:3B:57:EC:13:BC:6D:88:32:B0:0F:8F:B7:86:CB:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03178F3FA50321D27AF5980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/776e8e17-e358-36e7-a3b3-699c7e855b0e.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.97.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:78:f3:fa:50:32:1d:27:af:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=7a86a3df-2b35-460e-8078-f19e0dd77d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:83:42:27:c4:e8:6b:b8:3e:40:c8:65:e7:
                    32:d7:eb:03:da:ab:d7:bd:ed:bc:05:be:e6:28:b0:
                    8e:49:92:51:76:3d:a0:0a:78:5f:7a:0a:20:c8:35:
                    0d:87:50:07:94:ee:83:31:b4:78:c8:99:8c:67:94:
                    8c:bf:bc:10:a2:28:48:03:db:eb:2e:9f:c2:dc:54:
                    f0:27:4d:27:c8:a6:d4:be:13:7b:a4:1d:9f:76:61:
                    d0:e4:e4:83:64:fc:b5:61:7e:a3:96:19:fb:4a:8c:
                    4d:4f:bf:12:65:53:74:e4:0a:cb:b0:6e:ad:b2:c1:
                    b9:28:70:89:4f:42:43:4c:43:e6:5a:7a:b8:20:09:
                    19:42:87:68:04:27:dc:4a:91:78:a4:da:05:f6:46:
                    73:52:ba:b8:68:c2:71:9d:09:52:99:69:1a:e7:c0:
                    65:cb:36:2c:92:e4:a8:2d:a4:ce:bc:32:78:c6:79:
                    13:02:76:d7:60:4d:02:32:ef:f7:e1:67:b1:72:b6:
                    fd:87:28:49:e2:2c:d2:cb:c6:ce:33:56:88:94:6b:
                    e4:6a:d1:e4:fb:71:6d:c1:39:03:69:03:bc:4e:a3:
                    ce:fa:66:5c:16:8e:af:c6:48:b0:92:b4:8c:80:9f:
                    01:e4:09:cb:2c:a3:62:e8:05:0a:a6:49:63:a5:1b:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F2:E4:AE:AF:3B:57:EC:13:BC:6D:88:32:B0:0F:8F:B7:86:CB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/776e8e17-e358-36e7-a3b3-699c7e855b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:82:01:6d:64:fa:aa:ed:bc:8a:94:4e:89:c3:fd:2a:b7:45:
         72:c3:90:11:1d:e4:4b:09:07:83:8a:28:0c:dc:8b:92:9b:34:
         ed:0c:1a:d4:0c:e8:cf:e8:fd:e9:10:27:6c:14:63:13:12:fc:
         be:b1:26:a7:df:4b:e9:9a:d1:23:02:dc:f9:91:42:59:c2:32:
         89:dc:f3:3d:2f:75:07:82:23:f1:87:f3:6c:3a:16:ec:99:fa:
         41:c5:24:7a:01:77:3f:b7:90:3a:24:73:48:f9:bd:34:77:d9:
         b3:eb:ed:a5:69:91:9b:7c:3a:cd:a4:7f:70:0b:7d:4e:81:ae:
         b2:2c:e0:14:ac:e4:35:fc:40:25:f9:f1:92:01:cf:7e:4e:d7:
         f2:89:a8:5e:72:7f:89:10:f6:9d:b2:94:0f:ed:38:86:51:9e:
         70:1a:44:bb:06:b5:89:9c:74:a4:6a:be:94:3c:98:6c:51:68:
         d8:89:6e:7a:a0:11:2a:d2:37:89:22:46:c9:a9:6d:ba:6b:98:
         f5:f0:7a:03:ca:11:b7:67:47:14:d6:db:84:30:11:e1:34:ef:
         2a:a6:5d:18:fb:91:6e:dd:d7:5c:ac:7e:66:6d:73:2b:ff:a4:
         1d:90:dd:4a:d4:66:37:f7:ff:2f:cb:6b:48:cd:fe:8a:02:52:
         aa:6b:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:04:08 2025 by rpki-client