Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/2267ebb6-d590-3229-8e1c-458cd7519455.roa
File:                     2267ebb6-d590-3229-8e1c-458cd7519455.roa (raw, json)
Hash identifier:          4zAwSCQbnzzf/7R0/gsBpHSDfn+nZszR+5caPo8aFfc=
Subject key identifier:   07:C4:D2:1D:8F:95:5A:B5:18:26:0A:06:02:24:A9:A1:3F:51:59:24
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584B838211C689466F25A2951B80
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/2267ebb6-d590-3229-8e1c-458cd7519455.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     36734
IP address blocks:        76.77.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:11:c6:89:46:6f:25:a2:95:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=b81ce7c6-1e7a-4f2d-b987-d418ae413b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:d9:22:3a:e4:73:b2:70:fe:4d:8e:a8:f0:
                    96:93:37:51:fc:f9:33:7a:73:f3:f1:09:83:67:c6:
                    e5:d4:44:97:5b:18:2e:f2:7a:e7:46:9f:00:d2:76:
                    c7:dd:fb:65:7c:85:29:4e:9a:c8:9a:48:44:1b:c9:
                    ca:3e:84:31:88:06:53:e4:92:c2:02:a7:8b:1d:24:
                    33:04:8c:e1:72:48:64:c8:e8:80:87:6f:54:ff:55:
                    74:d6:eb:a9:74:9a:f6:4a:b9:1a:60:97:90:21:26:
                    b9:f8:7f:5c:a4:2e:90:1e:70:99:a3:e2:dc:e7:00:
                    7b:46:8d:3c:d1:15:13:8b:1b:6b:8f:d3:83:50:ba:
                    a1:a6:24:d1:90:b6:aa:1c:44:67:9c:eb:fd:a4:90:
                    16:bf:db:82:11:56:e4:10:dc:ec:3f:0d:ff:89:1b:
                    7c:2c:f6:05:3f:f1:4a:92:da:bc:0f:84:06:f6:09:
                    e6:1e:3e:53:76:d0:b7:cb:f9:e5:72:5d:95:74:06:
                    7f:06:44:48:57:d1:89:db:75:f3:99:f2:c0:a2:13:
                    dd:f7:d6:43:a2:8e:e6:58:0e:56:ee:cc:53:4a:73:
                    84:76:2a:90:ed:c9:df:09:6d:74:e9:55:92:ea:c9:
                    a9:f2:2b:a8:ba:f6:14:96:7e:f5:88:7c:f0:40:92:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:D2:1D:8F:95:5A:B5:18:26:0A:06:02:24:A9:A1:3F:51:59:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/2267ebb6-d590-3229-8e1c-458cd7519455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:18:33:65:65:6b:bf:e5:f6:11:f9:7e:48:da:a1:5b:7c:b3:
         34:d0:54:8f:72:50:dd:a7:af:fc:d5:53:70:47:4c:4e:ed:d6:
         c5:75:95:27:75:1b:da:4f:0b:39:41:ef:df:27:0c:a7:78:bb:
         a1:7a:dd:c5:2c:ac:07:fc:65:db:62:58:db:d7:70:2b:81:89:
         f0:16:8c:5c:84:37:8e:4e:6d:aa:e2:05:9d:d8:e5:b9:00:36:
         9f:31:fe:1f:f9:95:02:08:c9:38:9b:e4:49:ea:74:64:38:0b:
         8b:3b:18:5b:58:62:ab:ea:ec:29:cc:82:63:6f:16:2c:32:c4:
         cd:76:44:3b:b8:cb:23:40:15:bb:4a:45:08:e9:b0:bd:7b:d0:
         c8:4a:09:14:dd:8b:b1:c2:61:03:41:7c:ae:9b:0b:ec:da:08:
         d0:fc:84:e8:f2:5d:d5:4f:f1:a1:55:56:33:25:a9:60:34:c5:
         1e:14:2c:dd:85:ad:f4:b7:97:c6:a8:d3:99:8c:5e:32:a5:df:
         59:fa:96:71:5f:59:18:73:3a:2d:e8:ad:f7:90:f9:66:92:41:
         52:e3:8f:9e:bd:48:b1:13:5c:25:51:de:00:35:4a:04:51:73:
         39:db:3f:4b:4f:ce:85:50:51:1c:05:9e:37:8d:33:11:a7:07:
         ac:5c:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:08:09 2025 by rpki-client