Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c78f91b2-9eed-3808-81de-0826eb6f7417.roa
File:                     c78f91b2-9eed-3808-81de-0826eb6f7417.roa (raw, json)
Hash identifier:          Uj9Iz9jSeLw6cSBLD+u+BDmrUs8W7alaAnEoSQ6BtkE=
Subject key identifier:   19:83:3D:F9:75:77:83:C2:50:E3:97:86:2E:FB:09:93:5A:7F:25:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC1FBFA26791BC9267ED880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c78f91b2-9eed-3808-81de-0826eb6f7417.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        76.124.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:fb:fa:26:79:1b:c9:26:7e:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=55e3e609-dc9e-48e7-abb1-fe2e09554d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:8d:c0:75:03:56:ea:eb:50:34:7d:0f:d9:
                    81:e9:2d:ac:73:8c:81:17:b7:59:e8:20:f8:c9:54:
                    59:56:b7:48:6a:d1:05:f0:20:12:90:03:8b:f2:ce:
                    25:0b:07:ff:2b:9a:71:06:83:fd:41:4d:0c:5a:aa:
                    f1:db:39:e7:a5:2c:76:80:f4:5c:cb:39:1e:0f:77:
                    fb:cb:45:e4:ca:e3:b3:b8:12:72:30:71:5e:24:12:
                    12:29:d5:18:32:80:b1:1a:7f:04:bb:91:bd:95:d2:
                    bc:55:18:80:9b:8e:29:4c:ff:1e:41:6b:ae:c1:2b:
                    8f:07:9e:ff:cb:8c:08:e8:de:39:03:21:20:cb:df:
                    51:f1:8b:c2:e7:47:cd:e8:fd:1c:80:82:4d:29:be:
                    a2:38:02:5b:f5:22:20:38:79:0b:d2:ee:12:69:85:
                    1c:50:38:be:aa:2e:0e:70:85:de:6c:0e:92:c2:b1:
                    e4:77:ab:87:e6:d7:02:99:14:ee:31:e1:42:7f:1b:
                    8f:d4:7b:9d:ce:b3:4f:56:5e:e3:aa:b3:db:cc:af:
                    6a:f2:aa:00:92:a4:9b:96:3f:15:d8:41:48:da:ed:
                    9b:46:68:57:f1:07:45:39:f5:58:9f:1d:3d:67:e6:
                    32:5e:a1:e3:3b:ae:0c:60:20:1e:3a:3c:1d:20:e9:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:83:3D:F9:75:77:83:C2:50:E3:97:86:2E:FB:09:93:5A:7F:25:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c78f91b2-9eed-3808-81de-0826eb6f7417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:1e:44:33:51:6c:72:84:95:e5:1d:94:d2:be:9c:4c:4f:
         53:01:cd:a1:13:f8:42:9d:56:4c:1e:f0:24:10:15:58:6e:60:
         8e:ba:65:87:60:08:1f:43:20:48:97:98:74:06:ff:cb:9d:ea:
         df:20:4c:40:0a:df:36:63:51:4e:44:3f:ec:4a:e0:10:92:1f:
         1e:66:a6:7c:ca:82:31:b6:10:4e:d9:70:38:25:72:86:aa:05:
         c0:c1:38:f7:fa:1e:55:5b:18:6e:f6:86:3a:a3:5f:bc:c1:9f:
         ba:07:87:01:f0:6f:66:a2:9d:cc:ba:e0:d9:9d:20:a0:64:af:
         55:25:d2:ad:59:8d:d9:a0:1f:07:b1:b8:58:49:22:4e:23:73:
         20:cc:6b:26:8e:5d:ae:07:e9:25:7b:a8:1e:68:d5:d9:03:9e:
         4d:b3:fd:c5:d1:e2:e1:ad:92:53:33:e1:d1:d3:aa:64:e4:44:
         13:a1:50:37:d1:26:dd:e3:7b:31:b6:ef:c6:10:7e:f9:83:89:
         87:56:1a:3d:ff:fb:fd:45:fd:ca:46:64:50:cb:c5:8b:5c:92:
         67:d0:8f:a4:f7:81:f7:32:74:0f:d8:1a:97:f3:25:2c:bc:82:
         6d:a6:2f:90:30:f6:03:e5:8e:bb:92:b0:b8:91:2e:40:a1:36:
         24:2a:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:26:48 2025 by rpki-client