Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91efb4e3-b24a-34b5-a69b-86826decfaf4.roa
File:                     91efb4e3-b24a-34b5-a69b-86826decfaf4.roa (raw, json)
Hash identifier:          hvXhHk/IT9KFlYdyEUo4QXQcKLXpoLf5eSAHIW1bOg8=
Subject key identifier:   46:1E:45:A1:4B:6E:8E:E6:87:91:E2:56:9C:47:73:D7:2A:8C:62:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2B363B573536F8CEC5800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91efb4e3-b24a-34b5-a69b-86826decfaf4.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        76.16.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:b3:63:b5:73:53:6f:8c:ec:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e4629f12-8c9f-4530-b153-3f33f2ab1b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:0c:20:92:20:94:53:6b:f4:9c:ff:10:53:
                    de:84:51:48:c4:c7:45:be:6e:78:a1:8e:4b:b5:85:
                    25:10:d0:f6:30:36:a9:85:b9:ca:d8:6c:c3:03:2b:
                    5b:d9:36:08:87:fa:25:bb:7b:d2:ea:aa:3d:f7:d3:
                    e0:ec:6b:4a:17:31:71:32:ca:3b:a1:3f:a1:39:04:
                    30:ce:9a:e4:d2:5f:b1:17:a9:fe:74:05:f6:1f:2e:
                    45:aa:af:ea:4e:54:2a:4c:08:37:5b:b5:57:56:4e:
                    62:b3:93:78:86:73:e6:d3:75:fe:c5:ab:39:e7:ae:
                    84:3f:2e:54:3a:84:6d:94:62:30:5f:5c:d5:99:fb:
                    a2:90:cc:18:e3:65:c6:5d:bd:cf:1d:27:0d:b3:21:
                    10:2d:ea:bf:cb:9c:d8:77:4f:cf:a9:21:52:75:70:
                    2d:9d:54:cb:ee:40:18:a0:6e:5e:e8:13:75:85:4d:
                    4c:65:07:e4:99:42:41:f0:54:15:73:93:17:08:d3:
                    68:f5:b0:43:7c:52:3c:22:c0:57:7e:96:7b:bd:09:
                    b3:64:83:c8:8a:ea:2c:50:bd:96:59:15:0d:31:df:
                    53:4a:c3:f4:ee:e1:cd:c3:4c:48:ef:3b:36:14:49:
                    3c:1a:05:7e:6c:0d:99:3e:7c:53:01:f0:2d:29:4e:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:45:A1:4B:6E:8E:E6:87:91:E2:56:9C:47:73:D7:2A:8C:62:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91efb4e3-b24a-34b5-a69b-86826decfaf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.16.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:f1:da:36:ab:2f:2c:06:8c:61:62:36:59:56:5f:7b:24:
         a4:34:32:d0:8c:1b:21:4c:26:08:6b:bb:f3:f3:ae:86:94:7c:
         f9:38:30:5f:e0:17:f3:c3:21:87:3c:1f:b0:ff:d7:0d:a5:ad:
         16:92:6e:a5:b1:6d:90:24:46:76:3c:cf:5f:7c:ca:9c:3b:45:
         55:c3:6c:90:1b:91:6e:b5:24:22:5f:d2:7f:14:c3:91:cc:b3:
         fb:ec:a4:3a:f0:6f:c0:76:8b:e5:1a:75:54:82:c8:cc:9d:57:
         20:16:65:23:73:fc:9c:37:e0:fb:5d:c9:68:fd:56:8c:58:3d:
         e0:a6:4d:37:4e:e6:51:bc:20:83:0e:3f:42:73:bd:18:d6:a7:
         71:5d:d5:31:49:fb:b2:6b:33:55:e9:da:1f:8f:4a:cb:9e:d9:
         61:e5:e8:eb:3f:30:20:bb:a8:b6:f3:9d:4a:b2:c4:a7:a3:aa:
         56:f2:6d:b4:b0:1a:10:9c:9f:ff:8e:00:a2:df:07:9e:af:c6:
         9a:69:9b:f3:b2:a2:d1:e2:86:e5:20:1f:c5:02:a4:00:ed:1a:
         1c:ca:e5:46:1a:a9:d9:c6:01:3d:d5:fa:74:60:4a:af:03:00:
         1d:ed:07:11:33:3b:b1:1d:12:22:8d:9b:9c:32:cb:b3:9a:96:
         fb:87:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:46:24 2025 by rpki-client