Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa
File:                     c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa (raw, json)
Hash identifier:          HwltjjoGQ65m6MpbcS0ZRga0l1H4ILX3UvdBgKjbKts=
Subject key identifier:   1A:40:AC:13:97:D4:2A:38:CE:5F:C3:7C:88:09:DA:7E:85:15:1B:E2
Certificate issuer:       /CN=6a5786d8-68bf-4c69-b086-11587b550447
Certificate serial:       010D0C9F43285849D85F8ED05F4408F46DA05A00
Authority key identifier: 0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     10935
IP address blocks:        216.197.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8e:d0:5f:44:08:f4:6d:a0:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5786d8-68bf-4c69-b086-11587b550447
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=d1b82ff9-3374-4ed7-aed5-f472d3b14f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:35:31:d9:a1:8e:2c:e5:fb:1a:e5:c0:08:
                    06:34:4c:72:c2:76:da:1b:a9:9f:b9:8a:9b:4e:ce:
                    24:af:56:a8:1a:25:0f:9f:2d:80:04:2d:5f:7d:64:
                    45:87:b3:33:db:7b:3b:c0:b9:c9:d2:ad:e8:90:48:
                    d8:58:2a:58:87:b0:f4:63:4f:d3:23:00:f4:0c:3f:
                    56:d7:7c:ee:c2:77:8b:d4:4b:55:ee:2b:2f:b5:b4:
                    de:84:87:43:5c:6d:89:d8:ce:3b:61:c1:06:8d:49:
                    ee:74:65:1a:0a:66:07:54:15:24:ab:f8:16:d4:ad:
                    dd:27:9c:28:5e:48:0c:27:6f:f5:29:34:f5:17:6b:
                    2e:59:10:98:4c:5c:a4:72:bb:d9:7c:d9:6f:70:d0:
                    f8:ae:27:86:13:0c:c8:bc:b7:71:9e:3b:43:f8:cc:
                    0e:ad:97:30:cf:d9:66:00:9f:89:7f:2c:52:47:5c:
                    08:4a:5d:96:a9:64:68:1c:d4:c4:88:cb:cd:dc:7e:
                    2e:0a:62:c8:5c:4d:a3:22:61:0e:06:36:67:f0:3d:
                    a3:2c:99:45:2f:20:a5:15:2c:08:11:12:eb:ac:3c:
                    79:6e:24:d4:16:6c:64:14:91:92:a1:de:a9:c1:77:
                    b9:12:d5:5f:d0:e4:de:0f:ff:74:c6:09:4c:63:df:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:AC:13:97:D4:2A:38:CE:5F:C3:7C:88:09:DA:7E:85:15:1B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.197.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b5:5c:b2:85:63:96:da:b3:da:9c:4f:7f:55:89:fb:d2:30:
         74:62:56:66:bb:1d:d3:7e:23:5e:40:c4:3a:79:a9:5f:26:f9:
         a5:2b:64:1e:a2:72:86:33:a5:68:06:af:1c:32:d8:64:3b:bd:
         c4:1e:75:be:e4:30:ff:1f:cf:44:85:10:da:81:58:60:52:92:
         df:d8:2d:55:42:db:7b:12:de:5b:2e:7e:13:fe:53:e9:49:b8:
         43:f1:e2:27:ae:d3:66:35:0d:65:2c:24:fa:30:6d:30:c6:96:
         a2:d3:35:87:bd:b7:bc:4e:aa:9f:66:14:06:15:63:37:4d:5e:
         4c:40:1a:39:39:20:29:a7:1b:77:f0:fd:37:51:b9:88:4d:15:
         0d:98:b3:ce:cc:cf:28:90:f4:ff:e9:2a:2e:33:1a:79:1a:90:
         bb:7a:ea:53:e5:ef:1e:14:14:1a:2d:c7:78:f1:4b:9b:e0:fa:
         7d:7d:28:0b:17:64:b7:2d:65:4a:df:b3:77:1a:75:e8:dd:23:
         d6:86:34:38:d4:3b:b0:ae:a6:75:40:0f:fe:6f:e9:53:59:6a:
         9e:90:3d:cf:57:82:24:51:f9:98:07:c2:e9:02:eb:ef:37:d4:
         1a:f3:ee:59:dc:e5:ba:33:88:1a:82:ed:e9:31:f3:cd:f8:9a:
         08:59:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:33:30 2025 by rpki-client