Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef9b023-9a53-302c-bb84-edcb6025fb9b.roa
File:                     cef9b023-9a53-302c-bb84-edcb6025fb9b.roa (raw, json)
Hash identifier:          d6IWK3UBMyTVsiSOCQlCAQy2zAda2peMZZonaQAs94Y=
Subject key identifier:   0C:D4:1E:D4:1A:E3:49:B7:8B:C1:AA:6B:0C:1C:CC:A2:E5:92:5A:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCC243C3AB65CB694134E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef9b023-9a53-302c-bb84-edcb6025fb9b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        76.22.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:c2:43:c3:ab:65:cb:69:41:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1711b458-7eff-4b28-9910-5dcbebc57e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:2f:32:f1:05:6e:09:77:cb:81:0d:22:53:
                    7c:8b:1e:bf:ae:9e:fb:d3:3f:48:83:f4:75:e0:e6:
                    63:47:a9:42:c6:df:d8:96:7c:1e:52:94:bc:c1:40:
                    5b:a8:15:3e:df:89:fd:a2:73:3f:0a:39:4a:87:93:
                    78:3a:81:22:0d:2e:27:d7:f9:1a:b0:ba:60:cb:8e:
                    38:20:18:de:2d:eb:c3:99:aa:01:03:80:1f:5d:d1:
                    13:49:2f:a7:66:4b:fd:e0:1a:1b:d1:62:f2:12:92:
                    d9:23:06:c5:f7:9b:ee:74:ac:f2:28:6d:b2:c3:67:
                    7f:0f:16:fe:61:2e:7f:18:9e:ff:11:04:1c:93:e3:
                    41:c6:36:7b:54:d7:de:a3:0f:6f:1a:0d:b8:14:e6:
                    4c:49:15:b4:c8:45:de:45:02:c6:09:01:5b:37:3c:
                    36:f8:14:ad:81:01:0c:70:8f:70:2e:2d:d2:3d:c2:
                    80:06:e2:87:91:6c:c9:c2:00:4a:6a:d0:6a:9d:14:
                    84:11:7a:41:80:22:45:27:a7:83:41:35:cc:b8:59:
                    a5:63:48:2c:a6:cb:1a:79:61:7e:08:03:f7:25:6f:
                    6a:36:9f:64:af:68:b2:f1:54:e1:9b:46:5b:35:51:
                    f9:c4:78:9d:af:bd:69:05:21:bf:61:f1:34:39:97:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D4:1E:D4:1A:E3:49:B7:8B:C1:AA:6B:0C:1C:CC:A2:E5:92:5A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef9b023-9a53-302c-bb84-edcb6025fb9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.22.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:9d:23:59:95:44:26:8d:bd:6b:e1:61:bc:b9:87:e9:9a:
         6e:09:47:16:c7:d9:3e:c1:dd:34:7f:fc:a2:eb:1d:9b:16:22:
         8f:8b:6a:c3:ce:80:a7:f1:38:b4:c1:f4:c3:1b:c4:89:15:16:
         0b:47:bb:83:c6:b5:fa:1b:49:7c:1b:ac:cd:11:14:c3:88:26:
         65:fd:67:10:66:a1:b3:a8:0c:07:a8:0a:16:ba:08:88:76:3d:
         33:20:c3:91:0f:49:27:ac:ba:78:16:e0:78:8a:bf:bd:43:a6:
         58:de:d8:74:c4:b7:1c:ce:54:0a:2d:7b:a8:30:8d:06:7b:4f:
         8c:10:78:4e:da:41:fc:ff:7a:c0:9b:58:fd:77:34:ae:95:a6:
         da:18:66:22:59:eb:bd:af:d9:81:24:5f:ad:f4:ea:91:ac:f8:
         10:18:a4:d6:fa:0b:02:1c:a2:0c:84:2f:4b:bb:1a:1a:8b:b0:
         f0:7c:51:18:9e:66:97:25:e1:17:cb:ef:78:9f:1e:65:ed:22:
         63:51:f4:29:8e:3f:4e:92:be:e3:46:08:e7:cf:db:1c:ce:2e:
         a2:da:5b:4c:3e:b3:b3:68:ca:7b:d6:e9:a9:e9:90:39:6f:b6:
         a2:50:5b:3e:31:dd:64:d8:b4:76:6b:6a:8a:16:a7:e2:3d:be:
         8d:2f:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:12:39 2025 by rpki-client