Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa
File:                     f37b0714-1ede-3dcb-b67f-5210b56493fc.roa (raw, json)
Hash identifier:          /xAcajlTGejmU0uaB30Sfn73AP+GWkyRl9sR0kHoDnI=
Subject key identifier:   8B:9C:49:2A:F4:02:5F:92:1A:2C:1A:3D:A9:60:F9:A1:53:CD:22:FD
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584A374AE1C85F7D5DEBBFC7D4C0
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        76.164.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e1:c8:5f:7d:5d:eb:bf:c7:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=760a78f3-cd01-444c-9444-dc04fa8874e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:58:48:e8:c4:3d:d3:7c:c0:a5:c1:1a:3a:
                    16:e2:8f:92:32:86:e7:ed:7b:c0:4a:35:74:af:7a:
                    3d:90:cb:fe:ef:f1:b8:28:42:1c:c9:ed:57:64:0f:
                    df:26:0d:d7:e6:6e:0d:cd:bc:f0:92:ee:db:3b:8c:
                    71:2a:81:bb:af:e1:6a:7c:f3:e0:a9:d6:c1:8c:2e:
                    0b:df:bd:d0:8f:4a:87:11:60:3e:c8:d5:10:49:da:
                    df:de:2e:33:52:8b:4c:84:9e:60:8f:dd:30:19:21:
                    2d:46:b9:5f:e7:c3:df:c0:cb:10:9b:99:36:89:b5:
                    40:57:67:22:90:71:ca:79:95:15:89:97:90:d2:6f:
                    af:22:83:be:2b:fb:f1:5d:65:06:18:5b:3c:8a:07:
                    48:53:41:f7:93:ef:0b:23:b3:27:47:ba:0c:87:9f:
                    96:55:89:e7:48:9d:93:e9:4e:92:36:bd:a3:30:3c:
                    2c:0a:4f:46:e1:c4:d6:9f:ff:d1:bc:38:4a:d1:39:
                    59:c0:4f:d5:75:6b:e1:46:b7:1d:10:27:c9:61:e4:
                    5a:c3:cb:91:67:09:db:8e:64:aa:e1:d9:14:d2:c4:
                    c4:33:88:ef:2c:3e:35:03:1c:e3:60:b0:44:70:08:
                    d4:fc:a5:20:08:c8:5b:68:6c:dd:ca:ad:57:bd:7c:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:49:2A:F4:02:5F:92:1A:2C:1A:3D:A9:60:F9:A1:53:CD:22:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f37b0714-1ede-3dcb-b67f-5210b56493fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:de:a1:7e:92:b8:33:c9:e7:6c:72:96:36:df:22:75:a8:
         54:6c:ab:31:5b:2c:df:74:07:bc:44:61:ad:02:3f:1b:1f:ad:
         64:89:38:b2:dc:d6:2c:6e:e7:45:7d:f9:a3:ec:1b:dc:82:8f:
         f9:b6:f7:4d:a1:b4:c4:bc:c1:be:94:00:ea:23:43:58:92:92:
         5a:0e:e6:60:29:67:87:30:58:9c:d5:ad:c7:6a:75:04:09:ca:
         b4:ea:67:f3:a4:e3:45:d9:f7:2c:91:3e:33:f6:8c:d9:b4:2b:
         d9:e2:2b:a0:b6:21:1c:b3:34:77:98:0a:9d:86:96:24:46:91:
         28:28:ae:cd:22:a3:dc:bc:f4:9e:e6:a7:ad:40:82:70:8b:66:
         4e:24:40:bc:d9:35:3e:eb:b3:87:a1:ed:0f:7e:97:3c:61:d7:
         f8:fa:e2:cb:44:94:59:24:6d:55:0d:7d:b6:16:bf:9c:61:99:
         36:44:69:f7:e2:37:89:7a:8b:a0:3c:97:cf:22:9c:d3:e2:d3:
         56:18:50:7d:e4:45:86:f2:03:90:b3:2e:b0:81:8f:26:b1:d1:
         dd:ca:c7:a7:f0:ee:33:b1:4f:d2:0b:aa:e8:f5:a4:05:44:55:
         b2:69:ff:f4:3d:1f:c3:56:9b:f5:09:03:dd:d2:b4:9c:8e:78:
         ae:fc:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:23:02 2025 by rpki-client