Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa
File:                     f8c13836-c165-39bc-9bda-e76385fde4be.roa (raw, json)
Hash identifier:          P8+n8NZfAUM9R8M4qAZKKtaVzr2mL2uX4abetHUhzno=
Subject key identifier:   72:17:F8:2C:67:50:07:26:70:B7:9D:CE:42:AE:33:33:C0:91:42:E4
Certificate issuer:       /CN=1f1c0c08-444d-43e6-923b-55c2d71244e4
Certificate serial:       010D0C9F4328584A497067AF7729522E4B80F900
Authority key identifier: 4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     397711
IP address blocks:        170.76.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:67:af:77:29:52:2e:4b:80:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1c0c08-444d-43e6-923b-55c2d71244e4
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=23affc9f-7d69-4dd5-aa66-d3ccaf5e374c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:5c:23:56:8e:9d:c1:20:9c:ae:46:71:b1:
                    d8:85:21:6b:e0:f7:08:94:8f:50:62:5b:46:8a:03:
                    19:6a:bf:da:8d:38:e2:0d:86:76:75:66:b8:34:00:
                    27:ea:c1:3e:a0:48:2e:37:12:58:13:ea:05:15:97:
                    ff:37:30:3d:57:e9:98:e1:64:67:84:c8:17:f5:a1:
                    18:be:88:47:23:0b:83:c0:10:77:d0:49:12:05:f5:
                    df:40:94:7b:9b:da:e6:b7:20:8d:65:87:cd:55:2e:
                    0a:2b:77:0e:ce:28:fe:9c:37:12:a4:ab:ea:66:8d:
                    34:ca:c9:49:b1:4a:52:a1:3d:67:00:94:b2:17:02:
                    df:9e:04:e7:dd:5f:2e:12:bd:02:9f:e0:20:cc:0f:
                    96:76:14:19:89:a3:27:d9:29:d8:5d:5e:eb:e3:cc:
                    b1:ed:0b:26:af:d3:88:5f:1e:9b:bc:e4:2d:e2:47:
                    22:d1:02:ef:a8:a2:d5:25:1f:e3:10:58:22:4f:a1:
                    8f:5e:2c:1a:80:3a:42:49:fe:48:6b:47:10:66:58:
                    83:d2:1b:3f:af:74:68:2f:5c:60:f9:15:dc:5e:6a:
                    47:f0:99:81:db:98:63:d6:7a:f6:f6:26:74:ea:0f:
                    ac:06:fc:b4:98:27:a0:04:36:00:de:7e:53:c1:cc:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:F8:2C:67:50:07:26:70:B7:9D:CE:42:AE:33:33:C0:91:42:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl

            X509v3 Authority Key Identifier:
                keyid:4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:ca:04:d4:77:c4:ed:21:b7:b4:13:7d:14:ea:ab:31:e0:
         d9:2e:4f:79:f8:2b:0a:af:61:8f:71:43:e1:20:d0:53:05:7f:
         22:7d:e7:45:e3:8a:f4:3b:c1:c2:b3:2f:9c:c8:64:2a:df:fb:
         25:6f:4e:8c:a7:75:cf:fb:15:29:ab:d0:44:f9:10:2b:f1:77:
         43:b9:02:5d:18:86:17:c2:8f:76:23:81:70:ba:c4:d1:62:5e:
         95:a3:72:34:73:15:b0:6c:c9:20:56:c7:c8:7a:94:c1:07:a8:
         4a:df:76:f3:1c:5d:23:7d:92:87:64:51:af:9c:18:c9:c4:96:
         f1:36:d5:43:f9:cc:35:31:3f:5a:00:6a:af:c3:1c:aa:bc:ef:
         9b:19:8b:c5:4d:2c:8c:76:3f:3e:27:87:dd:97:b6:2c:fc:2a:
         ad:2a:90:46:8f:1a:d6:c6:30:f5:ad:58:8c:90:fd:f5:eb:79:
         bc:c6:69:36:b7:28:bf:ec:a8:77:0d:ca:72:dd:91:2a:9b:68:
         b9:57:1a:f8:8d:1f:6b:92:52:03:f9:1a:be:27:80:e9:b9:61:
         e1:cc:2c:ef:de:ad:5e:7f:38:5a:69:a6:19:93:46:eb:9e:5a:
         43:2d:64:f1:20:d3:a4:6c:a3:73:7a:ff:03:25:b8:17:e8:2c:
         0c:75:eb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:35:51 2025 by rpki-client