Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa
File:                     6b0d4b7a-9cda-33f9-a820-773849923e4f.roa (raw, json)
Hash identifier:          66gKfMtkb4keqCzrSum7EH4Yp1vtH6tKv3mqBwvJ1pY=
Subject key identifier:   B6:FE:8A:4B:1E:9D:C1:09:50:04:18:2C:BA:95:80:E0:4A:5D:C7:D0
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584AE9F66A9E3AAD22005A025280
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     13768
IP address blocks:        76.74.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6a:9e:3a:ad:22:00:5a:02:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=0e5cd69a-c979-4790-955b-01f46e73d65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:78:4c:aa:43:8b:b1:17:a7:14:48:c0:3e:
                    a7:17:12:ae:00:87:3b:81:f1:1e:5a:cd:3e:73:d7:
                    cb:52:19:fc:c2:74:5f:75:f4:d9:04:92:f7:b0:8c:
                    2b:76:b4:1e:50:ff:85:73:12:a1:d5:e3:34:aa:40:
                    77:f0:77:44:04:40:24:b1:fe:7f:73:79:d2:c7:5c:
                    34:33:91:48:c9:4b:91:23:ea:0b:2f:db:02:a4:14:
                    9a:9b:ff:18:77:77:06:5c:72:e0:53:1f:43:aa:a3:
                    b8:23:0e:4e:63:56:d5:22:44:39:3e:19:44:65:34:
                    15:e2:0a:23:a8:46:c7:d9:e0:65:8f:a0:88:1a:71:
                    0c:c9:50:ca:0f:41:e9:5d:e8:0f:0f:79:b8:67:39:
                    ba:af:a5:d7:f1:89:52:7c:67:3d:2a:a3:4f:72:37:
                    a2:69:00:5d:a5:f4:9d:07:91:ed:a6:61:56:a8:bb:
                    e8:fe:5a:63:cb:60:a9:00:3e:e7:56:db:c7:a1:f2:
                    4f:57:c1:94:01:22:88:8a:49:b8:e9:24:c7:4c:d8:
                    f8:a0:1e:49:d1:bc:79:c9:fd:9b:3d:e7:cd:d4:60:
                    8e:bd:1b:e8:38:7d:90:59:f7:4c:2d:4a:99:89:eb:
                    61:67:8f:4a:1b:c4:21:63:10:b0:b3:2f:7a:27:61:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:8A:4B:1E:9D:C1:09:50:04:18:2C:BA:95:80:E0:4A:5D:C7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.74.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:f4:c1:5d:ae:ae:ac:a1:34:8b:06:1b:b7:b8:7f:1c:48:
         3e:a4:93:38:12:84:20:f3:c8:50:07:df:7e:ce:20:ac:56:65:
         92:07:cd:c4:aa:b8:fa:4d:d2:26:dc:45:f3:96:02:16:30:1c:
         26:70:63:c0:3f:19:cc:65:52:ed:87:05:8c:b4:69:cb:09:bb:
         64:ca:73:d2:43:99:7d:83:c5:d1:b8:3d:07:6b:79:0b:7e:92:
         75:ef:f2:4b:c3:2a:dd:c6:d6:90:6d:dd:16:eb:8a:b2:cc:aa:
         c4:69:55:ea:45:8d:c6:43:15:f3:4b:0e:2e:ae:56:30:f9:6a:
         ff:d4:5b:f3:3a:c7:6a:3d:1f:bb:b4:56:ae:3b:d4:43:cc:ab:
         81:72:10:b7:77:6f:4f:a6:5d:13:ab:e5:14:ab:a2:34:bb:4d:
         6f:8c:62:95:91:27:51:c0:c3:63:ab:aa:8d:b5:7f:b0:48:59:
         83:b3:b6:d2:a9:4c:41:83:00:d8:2d:2c:68:6e:e4:c7:18:95:
         56:bd:8c:42:e7:b7:ca:ed:a3:07:b1:1b:53:e5:9c:63:8e:46:
         ab:0b:04:3c:08:c0:9d:b5:25:74:f3:64:a7:87:db:28:d3:c0:
         e4:65:35:36:62:2a:73:ba:c6:a2:be:23:db:d7:7c:b2:7e:3f:
         15:af:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:38:41 2025 by rpki-client