Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/76dc4cb0-6abc-3714-8899-6f3e134aef6c.roa
File:                     76dc4cb0-6abc-3714-8899-6f3e134aef6c.roa (raw, json)
Hash identifier:          AEIDC9gnCfAo4SaVRNMwVH/SBO/4qXjlxcJObivtJlA=
Subject key identifier:   46:EA:C6:FE:95:7C:B4:B2:0B:FD:70:B3:E8:37:2B:95:87:E6:46:71
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A43DAFF9C1AB118F630C68780
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/76dc4cb0-6abc-3714-8899-6f3e134aef6c.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     32133
IP address blocks:        64.98.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:ff:9c:1a:b1:18:f6:30:c6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=9272ae4f-357a-4713-9b3b-6b0b0a44672d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:0c:8b:0c:06:e3:dc:aa:2c:0a:14:8d:f2:
                    a0:eb:d9:d5:a0:53:2b:b0:73:4e:80:8a:1e:6b:01:
                    4b:fa:13:6d:59:1e:82:59:07:e5:f3:7a:8d:23:2f:
                    72:bb:0e:30:5b:e3:35:b3:68:41:e8:43:9a:a7:46:
                    f7:bd:68:87:41:eb:39:65:91:22:ee:ae:8f:19:b1:
                    76:6a:80:9b:c7:16:7a:eb:22:d8:1a:30:b7:50:cc:
                    47:78:fe:bf:b3:e5:5a:6e:49:47:32:85:ed:89:a1:
                    7f:35:c3:12:5b:bc:d8:08:81:a7:19:7f:be:d0:23:
                    6a:71:3b:90:f1:8a:bb:a3:06:7e:4c:f0:42:d6:72:
                    8e:29:a8:ae:45:40:a3:96:b8:4c:60:37:5d:d5:fb:
                    07:f9:1f:dc:7c:4a:9f:9d:0b:79:d7:84:5e:c4:5a:
                    50:c9:d2:6a:2b:34:dc:87:7f:26:17:22:22:28:e4:
                    94:33:d8:a1:fd:1b:3b:8e:ad:8c:57:49:e0:2d:c0:
                    fd:c7:da:b4:e7:17:9c:b8:3f:48:08:84:e1:0e:ee:
                    a8:1f:b5:bc:7b:7a:c4:ca:7f:f5:d6:62:8b:8a:42:
                    07:7f:ba:8e:d0:58:6f:77:ff:51:b6:44:ca:75:cf:
                    87:38:a2:f5:3f:7e:7a:a1:01:a6:69:32:d6:52:7a:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:C6:FE:95:7C:B4:B2:0B:FD:70:B3:E8:37:2B:95:87:E6:46:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/76dc4cb0-6abc-3714-8899-6f3e134aef6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:ec:c8:28:54:78:55:b8:42:3f:2d:a8:cc:3c:fc:5b:d5:
         d9:bf:d0:4f:d3:42:65:66:49:e2:16:97:6d:d1:f8:01:52:29:
         4f:16:62:ec:06:e1:cf:64:ae:1f:a3:0e:f1:03:fe:25:ec:13:
         23:50:4c:dc:ed:84:3a:53:21:f6:4d:65:75:da:1f:38:13:9e:
         4e:0f:5b:9f:ca:99:51:45:01:d7:ce:45:5e:3f:5d:36:99:03:
         ec:cb:83:ee:6a:7f:02:52:40:6d:0e:0b:10:65:4d:9b:0c:e8:
         23:ca:f5:43:b7:84:6c:73:04:b0:f3:ab:60:e6:0c:fa:ec:55:
         97:4c:86:df:21:8e:0e:0d:f0:b3:26:b9:10:e5:03:4e:46:30:
         67:ed:af:c0:02:9d:ea:78:9c:a0:d4:d1:77:2a:cd:64:c2:f3:
         2f:10:cb:79:72:fe:19:da:27:1f:bb:da:13:28:52:82:49:07:
         ab:a6:b3:3c:3e:b8:4b:36:64:21:4c:1a:af:d7:cf:e3:c9:01:
         dc:d4:ea:03:70:45:22:8e:ee:89:73:d3:aa:01:ff:b9:26:1f:
         a4:d7:62:97:ca:ef:1b:ec:1e:2e:48:39:06:2b:43:7e:7c:a1:
         41:e5:e9:36:79:2d:3d:ce:be:dc:8d:dd:27:09:a2:3f:90:e2:
         b7:f4:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:44:16 2025 by rpki-client