Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5745f23-5aa7-3d06-b91b-d839e56aeeb8.roa
File:                     c5745f23-5aa7-3d06-b91b-d839e56aeeb8.roa (raw, json)
Hash identifier:          kMNADF9zkzD9611IGsC21JK9B9e6Aeiiv1ut/etZJYE=
Subject key identifier:   08:27:30:78:3E:2D:D1:A1:5E:F5:35:14:75:36:76:30:C2:25:A3:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858498E64B0E6FC375A9EE6E9AE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5745f23-5aa7-3d06-b91b-d839e56aeeb8.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     33661
IP address blocks:        76.101.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:b0:e6:fc:37:5a:9e:e6:e9:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=17249124-970f-48d9-a639-7994414e3cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:52:61:70:c3:58:63:87:60:43:4f:5c:6c:
                    97:67:61:7c:6b:04:2a:5e:5d:f2:ac:09:6d:70:c1:
                    6c:2e:88:5e:7a:6d:86:3f:0e:23:64:94:ec:4b:23:
                    0a:de:dd:33:62:9b:46:c6:ff:78:53:97:83:a3:8f:
                    02:2b:73:63:45:a8:92:89:57:ed:90:fa:22:70:6b:
                    8a:59:45:5d:67:1a:e9:d3:a6:00:9d:4b:8b:d8:89:
                    43:19:95:a9:c0:c2:2e:8a:47:5e:0b:81:e0:96:d1:
                    dd:f9:9f:04:c6:5c:43:87:50:8c:b2:12:11:66:68:
                    9e:68:13:c5:fe:b3:e3:26:ec:13:b3:ad:76:51:1e:
                    e6:2e:bb:3f:8d:0a:5a:9f:33:28:99:9c:82:44:4b:
                    60:cc:3c:7f:d2:07:b3:5b:96:97:75:ad:14:4b:74:
                    78:27:ca:a3:0d:29:30:99:52:9f:c6:52:8f:d6:d8:
                    35:65:c1:a3:fb:bf:c1:2e:f0:bb:2f:d6:d0:2a:f1:
                    8e:56:6f:76:6c:d2:02:13:5d:51:73:b5:9f:c7:96:
                    b6:7a:70:e9:89:61:f0:31:50:1a:fb:78:e9:22:dd:
                    33:91:c9:09:dc:02:69:91:c9:ad:2e:9b:e8:62:12:
                    22:48:e6:4a:2b:99:c2:fc:32:e9:ae:42:9c:fa:4a:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:30:78:3E:2D:D1:A1:5E:F5:35:14:75:36:76:30:C2:25:A3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5745f23-5aa7-3d06-b91b-d839e56aeeb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:ff:71:42:e8:b2:47:6f:ca:c2:6e:22:be:41:9e:85:ab:
         4b:fd:d3:27:b8:19:fe:e0:f7:6b:fc:54:2d:2e:14:4f:39:0e:
         8b:57:af:3b:b0:a9:0f:14:85:55:0f:d3:fb:88:75:fb:57:44:
         ff:32:2a:a2:ee:8b:82:e1:c8:5f:35:47:73:83:1b:98:a6:6b:
         fe:b9:57:dd:6e:3e:4f:3b:fd:aa:1d:01:41:f4:e0:ee:c3:e0:
         92:c7:25:80:98:87:ae:77:c8:48:08:11:7a:fc:e3:e9:5f:ac:
         59:3d:b7:b1:d2:9d:26:64:f3:3b:30:11:d5:b7:69:a1:a6:00:
         c6:02:46:b5:b4:d0:af:38:49:6d:c1:e2:64:a6:07:7a:96:73:
         e7:d8:6d:1c:99:60:49:90:41:b9:d1:a1:12:6c:0c:39:58:00:
         91:6f:1d:b5:d5:e9:60:b2:5a:c4:64:de:b7:57:4b:01:47:f9:
         e2:37:8f:c7:84:7c:82:c0:0f:68:56:63:08:bb:f0:39:e4:eb:
         da:32:13:fd:ba:3c:7d:c6:80:8d:00:0f:d4:77:28:a8:0e:a0:
         38:ff:34:b2:35:35:3c:cb:32:96:35:9a:42:ad:c8:25:8a:53:
         e4:87:d4:b9:6c:a6:f7:eb:31:11:f7:1c:74:35:18:2e:05:25:
         d4:04:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:23:09 2025 by rpki-client