Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25456d29-fb4c-372f-98fc-3e87c6c713b7.roa
File:                     25456d29-fb4c-372f-98fc-3e87c6c713b7.roa (raw, json)
Hash identifier:          Zcp2sfqLXujHjMrYpVLr1AbeOtXNOpAMbKY14NJ8CQg=
Subject key identifier:   B7:5A:3C:60:49:46:14:97:38:88:6C:B3:9E:82:0F:9E:AE:5D:46:30
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967B00DEE5C8943C33A200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25456d29-fb4c-372f-98fc-3e87c6c713b7.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        76.65.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:7b:00:de:e5:c8:94:3c:33:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6c9a36c1-e7c4-4c59-abca-cc04a878b7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:a7:96:dd:64:54:1d:19:dd:f4:00:93:ab:
                    38:92:5e:d2:0c:84:15:bf:55:78:77:9d:6e:8b:03:
                    0c:a3:c2:4a:46:8f:17:e5:58:61:38:4b:5b:56:e0:
                    4c:38:d3:64:5f:07:d6:de:95:3f:1b:ad:93:0f:1c:
                    64:23:b3:a8:73:cc:d1:47:3b:d8:4d:fc:55:45:13:
                    65:ac:f3:97:b4:e3:ab:2c:9b:a7:1b:77:07:a2:29:
                    12:33:f5:e6:ca:45:0d:23:17:a2:3a:44:7d:a8:2d:
                    4f:b1:55:a0:c3:38:8b:ad:86:6a:5a:0f:fe:5f:d6:
                    15:f5:e4:e2:4b:0e:75:10:1e:1f:6c:56:56:a2:15:
                    f8:a8:c6:71:3c:24:04:61:75:42:fc:cb:c2:7a:94:
                    c3:f4:dc:38:4e:49:5b:7d:1f:38:15:53:76:ba:8c:
                    51:d0:32:ec:e1:2c:67:08:82:4e:58:10:8b:2a:a8:
                    a7:8a:1f:dd:7e:2f:6d:1f:0c:ef:87:39:2b:f0:ae:
                    6f:ca:08:a0:45:71:8f:4c:9e:69:e0:47:fd:ff:ee:
                    b7:99:ba:46:ba:3f:1d:14:98:ea:24:f3:4b:55:d2:
                    55:ce:8d:7a:bd:e0:3b:b5:54:0a:9d:4d:71:ad:e1:
                    77:f6:82:b9:34:26:80:78:16:60:bb:73:8f:e3:b3:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:3C:60:49:46:14:97:38:88:6C:B3:9E:82:0F:9E:AE:5D:46:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25456d29-fb4c-372f-98fc-3e87c6c713b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.65.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:7d:7e:9d:5c:5a:a6:bf:d9:0d:8a:b3:4b:a0:5b:ce:8d:
         c6:21:b1:ee:44:f4:05:28:f4:13:08:76:05:cf:68:8c:e3:2c:
         8b:29:2d:c2:d4:a4:56:b4:03:0f:6b:ef:b9:12:49:dc:40:91:
         b2:58:5c:29:e6:2e:4e:a2:9c:d8:b8:50:d5:d9:ea:5a:54:6a:
         3a:fd:a1:49:3b:24:15:e4:eb:80:98:63:95:07:35:cd:8f:79:
         f1:a9:b2:a8:47:c9:44:43:69:ae:b8:26:ee:ed:b9:c0:5c:2b:
         a9:39:2b:b2:78:ff:d1:0d:3d:73:bd:be:3c:05:5f:23:47:32:
         97:65:c0:da:dc:4f:e9:08:a8:6a:ab:03:b5:7a:42:9f:a8:d4:
         fa:bc:65:75:91:ff:09:d7:19:73:af:50:a7:03:f6:95:3c:c4:
         92:b2:39:6c:32:81:d1:6d:d0:41:fb:10:a6:33:7c:ef:84:96:
         12:07:6d:5e:13:60:20:24:57:e0:ce:07:fe:1f:e6:ff:75:63:
         d6:d8:67:e2:c8:47:18:e3:1e:bc:e6:03:fc:a8:cf:2c:bb:0f:
         6f:92:38:26:66:34:81:1e:8a:ca:53:f2:be:06:ae:96:55:91:
         68:2d:5e:1e:82:9e:8e:56:7a:37:76:35:3f:18:93:14:e4:57:
         a9:cd:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:40 2025 by rpki-client