Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc703da9-59a2-325b-b1cd-59f516ee85f7.roa
File:                     cc703da9-59a2-325b-b1cd-59f516ee85f7.roa (raw, json)
Hash identifier:          MMu+4izDJ8ZBz8Nm6NFQuLy2yeVQszKX2a+JmYRlgGE=
Subject key identifier:   A8:03:2A:F6:56:38:56:75:91:48:61:51:DC:E4:40:43:F0:16:DE:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDB63DF99C4CC978B73900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc703da9-59a2-325b-b1cd-59f516ee85f7.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        76.100.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:b6:3d:f9:9c:4c:c9:78:b7:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2c6e64ee-3ebf-4b4a-9818-2c819b172e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:5e:3f:e6:04:4e:04:fd:30:45:32:37:6a:
                    b0:83:9c:d3:72:c7:a3:06:e8:0e:71:34:89:5e:ac:
                    60:30:88:8d:a2:53:ad:5a:5b:0c:b2:91:e9:14:58:
                    5e:2c:6d:d9:16:50:19:66:b6:0b:3e:8e:78:a2:84:
                    79:fb:dd:09:45:44:8a:5c:88:8d:0c:32:83:33:35:
                    1e:ba:71:f7:9c:1b:dd:5f:6b:f0:c8:ed:62:62:5a:
                    d4:11:54:4f:bf:4a:d9:bd:5a:f6:3d:40:b0:0f:b2:
                    96:be:8e:86:65:fe:2f:97:f5:51:bf:35:35:11:7a:
                    75:46:a8:c8:4d:1c:70:24:8f:52:64:b6:16:c0:b1:
                    95:53:7b:1c:c0:be:ea:56:eb:f9:8f:6f:c4:bc:a0:
                    f3:9b:08:88:f3:0d:29:8f:60:c1:cb:83:d7:9b:0f:
                    0f:e4:9b:55:9f:ed:5a:8a:12:53:49:f9:bb:22:02:
                    ab:fb:4c:ed:d6:2c:cb:69:e7:ee:4d:1a:ef:bd:cc:
                    e5:c9:5d:93:72:1a:f6:07:6b:8b:2c:74:1a:5c:d6:
                    1b:38:a5:c3:fe:ee:c2:d4:1a:d4:cb:42:d8:2e:17:
                    63:e4:86:dd:2c:4c:3c:4f:63:2a:53:c4:89:71:14:
                    e8:df:67:64:9c:71:c8:9c:d3:f9:b8:60:da:6d:f8:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:03:2A:F6:56:38:56:75:91:48:61:51:DC:E4:40:43:F0:16:DE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc703da9-59a2-325b-b1cd-59f516ee85f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.100.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:96:ad:ca:c3:e2:bc:82:f4:af:2e:21:b7:14:3b:36:14:4c:
         d6:75:f1:5c:4e:8b:50:f0:ed:aa:2f:bb:80:a2:a9:13:f1:0e:
         76:8a:43:4c:f3:d7:b8:37:44:93:a6:51:cb:fc:28:7e:4f:0c:
         5f:88:35:49:db:c0:b9:e7:eb:26:c7:cb:7b:cb:0e:54:95:fa:
         52:ad:d5:93:95:f7:47:db:9a:2c:15:d0:35:0d:22:ad:7b:a2:
         91:49:4d:8d:aa:a6:17:64:20:a6:aa:47:6d:63:ca:e4:0b:13:
         ae:33:e9:0f:36:fe:29:36:10:21:c7:43:d7:ad:02:0b:b6:39:
         a0:30:b7:bf:71:49:a9:6f:5c:2a:6e:08:91:3e:2f:d1:32:5b:
         51:eb:da:3d:dc:76:e9:95:17:79:4d:d3:be:18:ca:39:dc:dd:
         bb:8f:3e:5d:fa:d2:a6:a9:0e:37:20:93:5c:bc:13:06:b8:66:
         60:ca:da:25:09:ee:e3:df:a8:2d:9f:cc:02:be:21:d0:25:29:
         76:49:bb:7b:b4:8f:60:e0:80:21:9b:03:cb:bf:6f:a7:37:a2:
         f4:d0:23:c0:1e:fe:c3:db:c6:3e:ed:7e:79:76:ea:d5:60:0a:
         0f:44:27:cd:22:5b:75:d9:09:60:1b:42:89:d1:7e:86:19:5e:
         b8:7d:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:47 2025 by rpki-client