Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/a1e8fb18-5df3-3242-b857-0b078ce05999.roa
File:                     a1e8fb18-5df3-3242-b857-0b078ce05999.roa (raw, json)
Hash identifier:          EKLo9w7FomlvEnnm5YxROKoRZonuav7I/wwyLxsHEJ8=
Subject key identifier:   0E:58:F0:E8:DC:63:AD:FB:03:A3:B2:A3:A4:20:EF:B5:74:74:85:57
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F43285849CE9A64E8F7F1065577ADA700
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/a1e8fb18-5df3-3242-b857-0b078ce05999.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     13638
IP address blocks:        76.76.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:64:e8:f7:f1:06:55:77:ad:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=1cdd1782-c096-4236-bce0-6adcefce6f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:12:08:45:84:81:fe:d6:da:a4:6d:41:e7:
                    e6:85:70:61:2b:d0:87:5a:79:4b:e1:49:3a:2d:ef:
                    85:4d:82:cc:c5:81:aa:3b:85:8b:30:21:25:b1:b4:
                    f0:2e:dc:c0:12:72:d9:7f:81:59:86:9f:11:26:2a:
                    4b:37:55:4f:b6:b3:6d:7e:38:72:45:36:59:2f:a0:
                    cd:7e:31:6e:f3:f1:0a:8d:67:5f:3e:78:04:40:62:
                    9c:96:f6:b2:6a:14:8a:24:4d:42:b4:39:bd:b4:48:
                    20:56:73:14:ca:a6:5a:67:de:4b:05:a5:5a:ef:87:
                    8e:d2:a2:dc:14:69:22:b6:a2:cb:97:be:3e:85:4a:
                    89:5f:f3:1e:03:52:b5:77:ad:ce:92:c0:f9:db:26:
                    fe:79:4d:f4:ab:f4:34:c7:52:84:95:fb:2c:e0:57:
                    01:3e:af:5e:72:a1:b9:5d:59:ad:9f:7c:6a:b9:ef:
                    5c:12:b5:e8:da:cd:61:d9:55:07:cb:c0:ac:96:38:
                    de:aa:c9:51:2e:19:b6:bd:42:16:bc:70:a4:18:d4:
                    35:a8:e8:5a:e1:72:c5:46:b6:44:28:16:47:23:28:
                    c8:a0:34:b6:7b:69:0e:44:5a:b1:84:4a:7e:0c:c2:
                    06:1d:3d:a5:af:6a:a2:f7:0e:d6:a9:48:f9:16:0a:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:F0:E8:DC:63:AD:FB:03:A3:B2:A3:A4:20:EF:B5:74:74:85:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/a1e8fb18-5df3-3242-b857-0b078ce05999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:98:5e:04:55:a3:bf:7d:67:bc:8d:d5:8b:63:2e:b7:f2:68:
         99:7d:29:ce:24:90:bc:25:c3:7c:b3:c2:46:63:7f:93:7c:22:
         24:d7:3b:80:24:cb:eb:91:1f:ac:80:bc:64:68:c7:8b:0c:f2:
         ea:06:42:b3:d8:91:e3:86:42:2d:8f:ad:f5:0a:ae:e3:06:8a:
         9a:87:6a:ed:54:dd:ec:37:5c:f1:e7:0d:c0:ad:3b:16:35:f4:
         d7:fd:b6:71:7c:7a:65:7a:94:1f:e4:da:d8:7c:47:56:1d:58:
         16:01:d5:5a:f7:53:7c:9c:6b:34:bc:a8:f4:5c:94:6e:cc:e4:
         c0:33:ea:62:63:0c:c9:ce:59:a1:ba:10:63:cd:27:a6:8f:2c:
         a4:ad:ad:00:c9:ef:b0:db:26:a5:12:8f:13:55:71:66:9b:e6:
         5e:bf:44:74:83:63:a2:79:94:69:83:88:e8:84:59:eb:62:e8:
         05:79:f3:ee:77:9b:e2:da:34:61:ab:8a:df:de:00:9b:f1:d3:
         96:55:8e:6f:b1:b2:3d:20:1e:64:0f:9a:31:bb:1d:e9:7d:37:
         76:b9:0e:83:97:6f:27:1f:10:60:70:a8:a7:9d:97:8d:5e:e7:
         c3:51:2d:1d:9d:fc:ea:d5:f6:31:09:83:6e:00:38:94:e2:5c:
         9e:3b:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:46:47 2025 by rpki-client