Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc6619be-07b6-339d-8475-2ca4de6ab4d5.roa
File:                     fc6619be-07b6-339d-8475-2ca4de6ab4d5.roa (raw, json)
Hash identifier:          AjVMBfkzfJlAeaWfRX6q8laGGIVawWP2c1KXbphkhxo=
Subject key identifier:   8A:6E:04:C6:9F:F9:A9:92:EB:EE:CE:97:0B:EE:74:F4:30:80:CC:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031F167C62328BA2816F480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc6619be-07b6-339d-8475-2ca4de6ab4d5.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.97.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:f1:67:c6:23:28:ba:28:16:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f1da62a2-a814-464b-80df-eebfb8297f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:da:c3:c3:f9:c0:9c:d4:a3:00:28:2c:28:
                    49:ad:e3:46:6e:d8:17:89:59:59:3c:73:f8:4b:c5:
                    73:a9:6d:09:d0:ed:6c:24:5e:f0:03:d9:cb:ea:b4:
                    7e:f2:06:b6:94:07:50:c4:bf:03:9e:94:ad:2f:69:
                    e9:90:7d:de:05:e6:b5:c2:2e:33:77:74:32:88:65:
                    be:f1:35:fa:33:46:c9:91:9a:c4:1e:58:bb:35:ca:
                    73:af:1e:0a:01:cc:63:d6:17:68:18:61:a9:40:75:
                    ad:76:e0:e7:11:16:94:11:b4:fa:09:f7:6d:d4:50:
                    e6:dd:37:5b:99:13:64:67:14:b5:8c:bb:c6:4c:16:
                    6a:56:3a:53:06:f9:36:d3:36:5d:c7:40:62:fe:ae:
                    20:3c:90:6b:68:ec:fe:42:0c:85:0f:6b:ac:1b:b9:
                    7b:31:28:6f:7e:83:41:48:be:22:70:be:ff:1f:7c:
                    fa:79:c1:88:b9:52:e6:f3:de:aa:08:91:3a:1f:29:
                    20:99:3d:90:39:11:d9:24:f5:a2:5d:1e:8a:25:27:
                    82:4f:d9:c2:ba:e4:5b:36:82:5f:b0:fc:51:47:c5:
                    d0:eb:5b:8d:9d:cc:a5:84:39:49:8f:c2:ab:7f:44:
                    39:56:c9:f4:eb:aa:0c:f0:3c:25:41:97:31:7d:d1:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6E:04:C6:9F:F9:A9:92:EB:EE:CE:97:0B:EE:74:F4:30:80:CC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc6619be-07b6-339d-8475-2ca4de6ab4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:75:f4:1d:a7:66:d6:bd:9b:20:3f:03:8a:3f:3f:7a:d2:2b:
         71:79:11:46:05:dc:ba:ef:ec:65:77:7a:16:34:b6:ac:59:db:
         55:20:d2:16:7a:60:7c:ee:60:a0:db:d1:a3:14:5c:c5:95:60:
         e6:ba:0b:5d:bb:47:a8:0e:b7:c6:bf:18:30:7c:13:43:67:d7:
         60:05:f2:de:6f:0f:30:13:da:0c:52:ee:8c:67:b8:6b:73:ed:
         e4:a7:f4:4f:1c:c8:da:1f:c9:da:8b:f5:f6:19:71:21:d1:70:
         8b:17:21:07:ce:3e:97:75:3f:93:05:62:4f:6e:b4:aa:c0:4e:
         e4:71:46:1a:d2:bc:56:44:0f:33:16:ae:6e:4c:78:70:68:90:
         ec:6f:d0:dd:cd:b3:68:e5:b6:51:1f:27:0f:e6:85:e2:fa:6f:
         b4:fb:ef:15:6e:bf:d3:9f:6f:28:9b:73:97:d8:fd:7e:a6:a2:
         02:63:f0:e9:78:f9:54:89:6e:e8:3c:82:90:09:d2:fd:93:51:
         86:5e:d8:9b:84:06:f6:de:04:0b:ca:b9:f0:7b:d8:87:f2:ac:
         bc:2e:29:bb:50:77:56:aa:c8:e0:a9:fe:ba:f9:a9:2d:53:9c:
         e4:c7:2a:30:cc:47:bc:10:5b:bd:3a:1c:68:b6:b5:b2:4d:03:
         d1:6c:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:28:48 2025 by rpki-client