Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25011b3-da8c-3091-a413-33081bee75fd.roa
File:                     f25011b3-da8c-3091-a413-33081bee75fd.roa (raw, json)
Hash identifier:          MBCu9jOPD995uJua6xCyTfzXOYpM6DQGix26gbN1aO0=
Subject key identifier:   FC:68:FD:BB:AB:52:2F:9F:68:2D:BF:6A:6F:F1:F6:FA:81:2E:7D:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F37CA8551C6B89A3F0DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25011b3-da8c-3091-a413-33081bee75fd.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        76.96.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:37:ca:85:51:c6:b8:9a:3f:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=022ddb7d-7d2a-46dc-9285-fd9d8d928112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:9f:91:8b:20:9f:9c:06:7d:98:74:c3:06:
                    f5:63:99:a6:05:06:5f:3f:99:68:93:e7:4f:65:f2:
                    da:31:e9:dd:79:a1:d9:c0:bf:b0:50:fe:8b:71:6e:
                    e0:24:11:9b:38:fb:4d:ac:e3:e6:32:41:e3:7e:0c:
                    55:7d:a3:df:b9:21:07:88:e2:30:ab:14:f6:b2:4a:
                    a7:c3:23:68:f7:74:a5:90:bd:e8:b3:ec:a1:e0:9a:
                    0a:0d:10:99:c1:f5:49:2c:f8:d4:27:9f:4f:78:7d:
                    f5:7e:9e:66:55:c8:f7:1b:72:62:a0:78:50:db:8a:
                    e4:6d:55:73:a3:db:c4:ba:4b:2b:b9:89:b4:c8:8a:
                    13:b0:91:ba:5e:e3:7b:dc:10:20:3a:48:fb:b9:0e:
                    11:04:6e:86:39:a6:1e:00:36:93:78:26:fd:27:43:
                    a5:1f:d3:ff:6d:74:ea:af:9e:86:9b:a5:23:d2:50:
                    f6:09:d7:f2:48:7c:4d:23:24:3b:d8:00:6e:90:82:
                    48:eb:b7:77:0a:73:91:9c:a8:fa:05:d2:fc:7b:37:
                    86:18:a9:18:b0:4e:c1:f7:98:9e:57:4e:f4:58:a2:
                    50:93:d5:7d:97:4a:bb:6a:b2:f2:54:1b:d1:6c:1a:
                    8f:72:59:43:ac:33:1e:09:5f:79:c9:fe:e5:be:29:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:FD:BB:AB:52:2F:9F:68:2D:BF:6A:6F:F1:F6:FA:81:2E:7D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25011b3-da8c-3091-a413-33081bee75fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:16:dc:70:39:84:14:19:b6:f9:0d:1b:49:ea:a2:a2:3c:fc:
         f6:7c:a5:c3:dd:ce:17:20:7f:93:95:3b:99:8f:c2:60:a5:d0:
         e6:5a:4f:93:fc:13:1f:f8:88:b6:cb:07:15:f5:a5:b1:6e:ce:
         4f:04:2c:88:f3:a7:34:2f:5a:0b:77:1d:99:c1:4b:94:1e:4a:
         2f:b1:ea:53:4f:f2:ff:25:52:6a:65:e5:1b:3c:e9:df:72:1c:
         3e:36:e9:eb:a3:26:d5:44:a0:c9:9d:db:38:f7:a9:39:7f:35:
         70:be:36:38:34:4e:81:76:e4:e2:ae:8c:ec:e5:f8:7f:31:da:
         73:d8:74:f5:0f:17:f5:a4:03:bb:ad:dd:4c:a6:0b:24:a2:be:
         5f:1b:bc:f4:83:c5:df:a4:8b:6d:9c:e5:d8:da:16:1a:fb:9d:
         42:c7:dd:d3:8d:ec:cc:c9:45:26:39:c3:39:71:fd:78:a2:e1:
         75:d1:34:1c:c6:54:ff:0f:2b:7b:d3:9c:d5:d3:fc:a6:95:bc:
         f8:75:fe:6c:a8:78:8e:47:69:f8:c0:bf:8a:0f:c2:92:21:c2:
         78:28:f6:4f:75:2f:fd:cf:aa:32:61:c3:7d:17:55:9f:f2:f4:
         f0:c7:83:6d:0f:02:59:8b:74:aa:67:dc:21:61:00:4c:12:31:
         6b:fb:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:42:12 2025 by rpki-client