Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e924a98f-5355-3704-ac1c-41856f219945.roa
File:                     e924a98f-5355-3704-ac1c-41856f219945.roa (raw, json)
Hash identifier:          72L+PqWPXM0/bU+iGABazvvGFgk+KWYnK2LUibmAR8A=
Subject key identifier:   99:E2:66:22:00:6B:9D:97:AC:C2:A0:EE:19:3A:8E:79:3B:19:53:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB9948D5203A4658BD0980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e924a98f-5355-3704-ac1c-41856f219945.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     20214
IP address blocks:        75.147.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:99:48:d5:20:3a:46:58:bd:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=45758d0c-55cf-4eac-85d2-4581da897b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:27:d8:75:9b:e7:26:0e:62:5e:fd:3a:65:
                    2b:87:7e:14:8a:90:6d:74:6a:a9:a1:00:77:0b:e3:
                    b1:c3:2a:43:6e:78:7b:7d:35:ad:60:22:43:1f:78:
                    01:9f:32:f0:d7:fa:2c:e1:c4:70:5a:b3:df:ba:67:
                    65:1f:fc:49:2e:e9:06:55:3a:a2:4c:18:92:d8:27:
                    6f:58:6b:00:18:06:41:c7:1d:21:8b:1d:0a:da:43:
                    94:b0:e4:2a:2b:3c:59:28:2d:88:70:66:f0:f1:7b:
                    13:5d:5a:53:6b:88:04:8b:26:f0:d8:07:d9:84:f4:
                    d3:0b:5f:f0:ba:c7:cf:60:21:e5:82:24:78:99:63:
                    87:e4:e3:5e:ef:8f:f9:e9:9d:b4:61:8f:f0:7f:e2:
                    b6:cf:68:e8:8d:c4:30:e6:3e:84:39:07:e6:a2:c7:
                    86:b8:ed:41:06:87:51:d6:1e:46:18:07:c8:cd:27:
                    86:99:ed:ca:3a:0b:fe:40:10:51:a1:d3:83:e2:34:
                    bc:d3:41:e1:74:10:9f:a7:8f:dc:84:40:62:50:80:
                    dc:46:c0:01:9e:45:f0:f9:77:b7:ce:37:94:4e:0f:
                    8b:8b:a8:82:6a:b5:a4:00:f0:5e:5e:ed:f9:cc:04:
                    ae:6e:cb:ae:a0:69:c8:5b:fd:9c:74:da:3b:ae:f2:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E2:66:22:00:6B:9D:97:AC:C2:A0:EE:19:3A:8E:79:3B:19:53:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e924a98f-5355-3704-ac1c-41856f219945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.147.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:84:41:c3:c5:29:3b:e9:ee:41:b6:bb:ab:f1:52:75:5d:ae:
         52:41:d9:85:38:99:e4:c8:f2:e1:e9:dc:e2:44:a4:4e:7c:d4:
         40:db:4b:12:db:d5:9e:34:39:94:32:b1:2a:ee:1d:a9:94:c8:
         8b:41:a3:90:ba:15:b2:39:8c:d9:eb:ed:48:99:ef:67:bb:f6:
         5b:63:71:b5:aa:6f:e5:02:f2:3e:be:b9:47:01:45:e2:6d:f7:
         1a:19:10:05:58:fe:eb:b7:13:ed:35:60:5a:08:32:d8:1c:e6:
         e8:21:11:a4:c3:d3:35:06:b9:6f:f7:70:6e:04:4f:33:c4:f1:
         77:e3:cb:9c:0c:53:c5:c9:17:b3:db:d7:f0:96:64:c1:7a:ba:
         a1:ce:cc:81:dc:c9:9e:3c:d8:d4:02:01:5a:2c:e4:c5:97:b5:
         dc:87:c1:3d:56:ca:30:c7:1c:10:05:7a:64:bb:b0:98:72:18:
         2d:3e:de:86:08:b0:ab:b1:db:df:3c:28:bc:1c:ce:ab:eb:15:
         1e:21:c4:3f:92:11:fa:81:05:83:41:37:8e:b2:71:7b:90:cd:
         89:84:a0:b5:b7:cc:01:49:3d:86:a6:cd:9f:41:3b:0f:be:7c:
         db:1a:cf:20:ad:1b:15:30:c9:df:b2:29:3e:d6:ca:f6:ef:e7:
         2b:73:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:00:06 2025 by rpki-client