Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eca7a8fc-e898-3bcd-9275-1912582cc711.roa
File:                     eca7a8fc-e898-3bcd-9275-1912582cc711.roa (raw, json)
Hash identifier:          cDKfQA55QXdjDEoADvb/nX0a/9+6G1uweRle0AxmFCs=
Subject key identifier:   38:5B:74:77:48:A0:FE:56:69:2D:1E:6E:80:7D:C3:26:7B:39:2F:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2ACFCE9A54C40D3AEA360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eca7a8fc-e898-3bcd-9275-1912582cc711.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        76.141.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:ac:fc:e9:a5:4c:40:d3:ae:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=d63b275c-a135-437b-9ac3-039d57c200cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7d:3b:49:8f:f0:c3:75:c6:07:c0:82:fb:4c:
                    5d:90:fb:09:bf:fa:03:cf:99:e3:97:98:f2:09:d3:
                    bc:bc:5d:ac:cf:0b:3c:a6:3f:f0:08:66:b4:80:d8:
                    a1:c6:45:87:d8:25:07:62:8a:a4:02:81:47:77:35:
                    6c:f5:b6:f5:cc:53:3e:e0:05:5c:e4:ef:65:cc:7a:
                    d1:d4:83:0e:e6:80:8c:97:b1:bb:4a:70:6f:6d:48:
                    40:e8:8c:6a:57:79:0e:f9:6d:24:c1:45:48:a9:5f:
                    ef:ff:d8:1e:88:89:49:23:c3:59:79:34:df:44:c3:
                    11:e0:80:76:2f:50:08:e7:0e:57:6b:b1:74:91:67:
                    c7:04:6a:90:51:6d:2b:07:47:4e:c4:ad:bb:1e:2d:
                    44:46:9b:8c:35:dc:d2:95:a4:90:a7:f0:8e:f9:ac:
                    11:3c:10:7b:f9:68:4f:b9:2f:26:05:9f:b0:e7:36:
                    d3:e6:2d:7a:0f:11:b8:19:0d:2d:bc:e7:24:68:21:
                    33:66:bf:ea:a3:a6:86:23:2c:67:03:73:b4:c2:53:
                    7f:36:6f:15:e1:b4:3a:82:8a:80:b3:d6:33:58:d2:
                    42:27:48:a1:60:41:34:1b:03:23:57:40:98:0f:ea:
                    ea:37:38:3c:5f:24:56:a8:49:75:a6:06:34:65:2b:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5B:74:77:48:A0:FE:56:69:2D:1E:6E:80:7D:C3:26:7B:39:2F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eca7a8fc-e898-3bcd-9275-1912582cc711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:38:12:c5:d1:b2:1e:99:37:a1:cd:04:16:e8:73:88:20:e3:
         0b:cc:df:b2:48:31:a3:ce:c7:d9:fd:bf:23:59:a9:27:64:c3:
         9e:f9:30:a2:4a:56:9b:dd:ab:3d:a8:43:aa:27:f2:0e:ae:80:
         07:a9:72:db:a9:12:86:80:94:a0:31:af:25:9d:7c:6b:e3:43:
         ac:ad:18:01:57:aa:64:2c:cc:33:a0:6e:c1:de:c8:ae:9b:4d:
         d0:b3:e0:f3:1d:c6:40:c7:09:a6:c8:8b:2e:c8:9d:a0:6c:be:
         9a:ef:98:1d:a6:33:ad:58:e5:cd:ba:6c:4d:a3:8b:0b:87:36:
         fc:15:a9:18:fa:32:30:cc:06:e6:a0:bb:13:f9:31:af:05:62:
         4a:50:cd:b1:46:c8:11:d7:38:7f:4c:85:b0:e5:e2:94:c5:00:
         72:81:56:7e:97:28:31:78:4d:0c:ea:dd:e7:79:cd:44:84:bd:
         e1:a0:54:78:1c:8b:3c:43:0b:8a:e9:45:6a:25:fa:07:9f:57:
         45:5e:f3:7e:df:ba:8e:b8:d9:69:4f:a0:1b:5e:27:4f:d3:16:
         a9:bd:2f:88:5e:3a:c7:57:5a:aa:e7:c0:7d:49:bb:95:5a:4d:
         ab:26:53:24:ad:7d:1f:d4:6c:47:06:37:00:c9:0f:47:7f:63:
         be:40:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:36:04 2025 by rpki-client