Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a3eda07-01f2-386e-abc6-1d6362dccbe9.roa
File:                     7a3eda07-01f2-386e-abc6-1d6362dccbe9.roa (raw, json)
Hash identifier:          /1Cb6AYhfpskQHjsrXJqyLF1vJ6CNEwdEfGigXH6KDI=
Subject key identifier:   80:8E:37:45:7A:40:6B:2D:2F:19:DE:58:F0:BE:E8:AF:DD:51:1E:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC55D110FDF15ABE362B650
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a3eda07-01f2-386e-abc6-1d6362dccbe9.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        76.126.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:5d:11:0f:df:15:ab:e3:62:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9fce1c0b-2eec-496e-9eb5-a3ae66a78e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:79:75:e4:34:c5:d2:57:e1:ca:a0:cf:72:
                    ca:0c:5a:7d:e8:a6:14:01:2b:e7:14:df:fb:f5:64:
                    7e:17:94:47:52:1b:19:c8:b1:4b:96:42:c6:3a:b4:
                    f3:d7:87:83:9f:d0:77:ae:b3:dd:e3:56:8c:e8:0e:
                    d4:13:83:d9:ad:eb:1d:31:54:97:a9:19:75:fb:56:
                    37:ea:a0:ee:5b:6f:98:d3:e5:db:c6:81:02:fa:1f:
                    a6:c0:8b:a9:46:0e:7b:91:f8:dd:43:92:cb:67:13:
                    f9:26:16:44:5e:e1:34:36:f9:ca:f3:24:80:b9:6f:
                    a6:58:5f:cd:5f:8f:27:f3:fd:5a:27:94:b7:f1:20:
                    bb:d0:18:87:67:96:aa:55:28:16:9c:fe:49:b7:73:
                    22:17:89:51:2a:3c:f7:74:62:72:c7:82:67:d5:56:
                    cb:9b:cc:dd:7e:0d:6e:88:c7:cb:1a:34:b9:0a:21:
                    f2:e3:48:67:d4:dd:05:90:46:93:47:68:e7:98:e4:
                    c0:70:44:b9:05:03:23:74:38:71:47:f3:0f:7b:0d:
                    3b:72:5a:53:e7:e3:76:d2:cc:4e:64:d4:80:15:fe:
                    2f:79:d5:97:e5:4e:f3:9c:98:6f:ee:73:99:b5:e6:
                    11:ce:1e:fe:48:9b:f1:65:1c:ef:4c:44:03:06:ed:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:37:45:7A:40:6B:2D:2F:19:DE:58:F0:BE:E8:AF:DD:51:1E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a3eda07-01f2-386e-abc6-1d6362dccbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f5:02:d2:12:c6:14:28:a0:fe:89:f1:ba:66:00:25:68:fd:
         f4:3c:8a:16:09:34:95:9a:8d:6c:a1:10:ab:17:3b:2b:f0:45:
         7e:25:4f:bd:a5:09:16:a8:1b:5b:57:6d:d1:83:79:8e:00:0a:
         5f:03:bf:81:71:eb:94:d2:81:87:bc:65:39:f9:52:7f:78:dc:
         16:db:a8:ce:cc:c5:e2:7b:fb:f8:7d:64:66:05:27:8c:94:9c:
         df:8d:37:57:e1:68:30:ca:ba:14:31:4d:82:cf:82:82:0d:fa:
         eb:49:0d:a8:b8:bc:cf:af:47:87:99:92:2a:33:77:6a:8c:58:
         03:94:c6:93:ee:87:65:90:0b:97:d4:82:6a:26:69:d0:09:16:
         08:c9:07:c2:a5:2d:2b:51:78:9e:59:10:0e:67:ff:ef:7d:7d:
         6c:9d:62:f8:dd:71:88:58:08:67:5b:aa:98:62:ba:06:29:87:
         a3:24:75:39:c2:04:2d:6f:bc:e2:ec:b1:5e:58:6f:c8:c5:19:
         21:74:d5:61:49:7b:4e:a6:77:da:dd:a0:51:9a:0c:d8:4c:08:
         52:3c:d7:90:1b:bb:0e:75:c4:e8:94:3d:27:b2:77:d8:78:22:
         3b:f1:67:4a:bb:f2:a7:e3:09:89:e1:34:94:73:21:4f:f9:6d:
         67:d0:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:10:24 2025 by rpki-client