Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd300894-a5be-32ac-baec-de7c22b9cdb4.roa
File:                     bd300894-a5be-32ac-baec-de7c22b9cdb4.roa (raw, json)
Hash identifier:          wqP9Ri4UaoONuQrsJA/zt/NJj8rYcMtzFEAy8laksms=
Subject key identifier:   A2:A7:A2:0A:F7:80:E6:2B:DB:91:D4:DE:D8:06:90:DA:34:66:90:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBD61484C3F2176D4CC120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd300894-a5be-32ac-baec-de7c22b9cdb4.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33667
IP address blocks:        76.20.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:d6:14:84:c3:f2:17:6d:4c:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=fc8d18af-7410-443f-a99d-26c336d7954b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:02:94:13:6c:aa:40:9f:e9:63:bc:0c:98:
                    f7:57:cd:45:f7:13:26:6b:ff:dd:ca:7e:78:9d:01:
                    24:ae:b3:5c:77:a1:fd:b2:5d:0c:fe:d1:04:b9:21:
                    11:37:eb:6f:7c:dd:bf:e3:85:19:eb:7f:c9:c8:d0:
                    bc:03:b7:17:98:c1:89:a1:50:fc:79:7c:85:51:b5:
                    17:81:73:b3:10:e0:64:b8:6c:ca:80:f7:ff:26:18:
                    01:7e:c4:de:5e:16:d2:95:59:37:53:72:d2:4b:fa:
                    6e:8b:d2:f9:66:c9:91:b0:ba:0d:41:59:79:d2:84:
                    68:c5:55:91:fb:ac:2c:27:9e:3d:76:60:60:dc:eb:
                    d7:6a:84:f4:b1:c9:4d:0c:f1:f2:75:22:32:57:e4:
                    52:9f:04:36:bc:69:57:5e:a0:84:3e:e7:a9:1c:3a:
                    47:5d:6e:c5:c0:3a:f7:7d:b8:85:f7:41:fc:92:99:
                    d0:38:91:90:2e:06:2e:bf:a5:40:a0:57:ae:0d:a4:
                    d8:5c:24:63:4a:2f:31:ed:97:a4:49:53:19:34:b7:
                    37:be:ea:bd:0a:e7:3e:76:c1:0d:8f:8f:f4:81:04:
                    d7:d7:5b:09:75:53:a6:3b:fc:ce:1a:58:2b:ba:ed:
                    b9:6d:92:7d:a7:da:ce:5b:e2:3b:b0:c0:39:fa:af:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:A2:0A:F7:80:E6:2B:DB:91:D4:DE:D8:06:90:DA:34:66:90:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd300894-a5be-32ac-baec-de7c22b9cdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.20.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:e5:50:ac:a0:ce:29:d0:e5:a9:25:37:cc:32:12:5c:1c:
         87:ce:38:d3:bb:61:1c:4e:2c:c2:eb:24:ad:97:7a:72:bf:e7:
         94:ae:37:9b:83:70:36:b2:38:b5:f2:41:68:20:fb:f4:f6:e9:
         ec:78:62:86:2f:79:b6:10:64:96:4d:03:69:11:56:8b:43:7c:
         fe:c4:ea:8a:a9:4a:cd:22:39:de:a9:15:91:a0:6d:1e:b3:10:
         df:23:3b:7c:1c:d5:5c:33:95:74:ff:8f:de:57:22:4c:18:09:
         a6:20:2d:8b:b7:04:6d:24:12:e0:0a:74:ad:55:a7:15:d3:23:
         72:f3:94:f5:2a:ad:db:54:2e:68:cc:7b:36:76:90:cc:2f:dd:
         e3:50:4d:5e:48:c5:f8:5b:1a:94:ef:d9:03:c1:ed:fc:55:b8:
         50:bd:dd:d6:c2:a3:9b:1b:4c:00:c5:aa:ff:9a:b5:47:2b:5c:
         fb:98:c2:56:a4:b2:56:a0:88:cb:4e:64:9c:0e:9b:ff:c1:f1:
         ab:1a:80:50:81:93:1e:70:42:57:6d:34:bb:25:27:77:d6:71:
         4a:88:cf:b3:01:b1:5b:59:c3:98:16:2d:8b:11:72:25:6c:0f:
         b7:4d:c0:8a:9a:86:01:2a:ab:65:ed:a7:47:1f:65:76:68:8e:
         27:08:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:51:20 2025 by rpki-client