Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f80a5149-5c21-3e3a-9841-3d82f1dd4fcf.roa
File:                     f80a5149-5c21-3e3a-9841-3d82f1dd4fcf.roa (raw, json)
Hash identifier:          XQBkneBwL0FK64y0dRrcnqGN81J6ZCHEr/ZKT9AXPsE=
Subject key identifier:   16:65:15:3F:CD:78:63:77:2D:CA:7A:BC:04:FA:74:6F:41:3A:13:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031ED7916594207210B4B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f80a5149-5c21-3e3a-9841-3d82f1dd4fcf.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.17.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:ed:79:16:59:42:07:21:0b:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=5c57444a-2016-484f-a963-fd3d0cf2cf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:23:3b:67:ab:76:91:31:00:48:b5:79:3e:
                    20:17:30:2b:c3:1a:41:11:ea:8d:2c:69:ff:49:b2:
                    4f:fe:4d:09:75:9f:5a:25:bd:19:05:0c:44:9f:9f:
                    53:03:34:6e:46:f0:24:76:ec:e3:24:a6:ce:38:8d:
                    e6:5d:52:03:1c:e4:8b:dc:72:97:a9:7c:17:b2:55:
                    a1:46:59:0a:ce:1c:7a:45:74:72:74:11:78:48:84:
                    69:1a:ea:6b:81:8c:98:81:6b:4e:7e:82:5f:39:cc:
                    76:30:6b:35:14:ab:17:e6:79:4c:66:8e:8a:04:e7:
                    ef:ba:c8:e4:44:f1:3f:0c:43:78:1f:ba:c4:ac:e3:
                    3b:37:32:a6:e8:1e:7d:8e:3e:5f:5e:d8:c1:7b:e0:
                    ac:19:59:21:c5:fb:9e:7c:24:f1:13:32:27:39:b3:
                    0c:d9:c6:3d:fb:da:a3:09:7b:76:18:24:57:ef:06:
                    32:64:87:6f:a1:fb:0a:9c:7f:ed:e6:0d:40:c9:3c:
                    71:e0:7e:92:55:ec:5d:7d:44:0f:35:da:37:d9:6a:
                    41:6f:5f:5c:2d:52:f9:68:6b:f2:c5:50:d7:69:75:
                    46:95:3c:02:4b:2c:7e:b5:aa:84:d5:31:4a:62:5c:
                    d0:1f:65:ea:2e:93:bc:99:09:9b:f8:b2:85:1a:58:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:15:3F:CD:78:63:77:2D:CA:7A:BC:04:FA:74:6F:41:3A:13:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f80a5149-5c21-3e3a-9841-3d82f1dd4fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.17.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:61:2d:18:2a:8b:21:e5:20:f8:e2:f2:69:be:e6:ed:a8:aa:
         fb:8e:a3:cf:6f:8f:a3:88:ec:4f:e2:25:14:59:0c:d6:fe:9f:
         2d:6e:74:f2:9f:69:83:af:1a:1b:84:3e:67:66:61:11:cd:c1:
         63:60:00:03:f0:4f:b7:f3:0d:53:15:24:2e:be:5f:e7:d4:be:
         c6:08:9d:dd:3d:52:fd:85:04:6c:24:3f:ea:eb:bd:35:a6:7e:
         ed:c9:31:31:0b:25:4c:46:91:0c:03:55:15:df:26:ac:47:04:
         89:5c:4e:fc:7b:cc:a4:c7:16:41:e9:8d:0b:83:ea:7d:d2:4c:
         aa:ad:ad:f3:1b:fe:dd:f3:f1:ab:dc:2c:f2:2e:69:a5:7d:05:
         54:7c:39:b3:7e:ac:9a:e6:1c:98:fa:d6:79:bd:f5:86:1d:b4:
         a5:a3:ec:19:2c:23:74:bf:87:85:4f:4c:50:a9:4a:f5:16:74:
         8c:4a:0c:85:e9:45:37:ce:9a:a6:80:ce:d5:70:78:29:91:e1:
         ba:2d:77:8c:3d:26:d3:57:67:c3:03:0c:30:b1:ae:2c:db:24:
         2c:09:1b:3e:0d:68:56:aa:59:31:0a:af:fe:e7:6c:08:34:3f:
         08:7a:94:b5:5b:04:54:61:3b:06:01:dc:77:5c:32:6d:02:38:
         91:7d:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:26:30 2025 by rpki-client