Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa
File:                     c0d3e799-0845-3113-a3cb-e5267a1938d3.roa (raw, json)
Hash identifier:          skWpcCqJN0hkpCKXNah7RdtODtnNTaRKPigw14cVcZ8=
Subject key identifier:   2E:AC:9E:82:9E:79:ED:96:E7:6F:FF:9C:70:33:2B:65:30:52:BB:70
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584A1B6003B58826C9637E3AB600
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     21949
IP address blocks:        76.9.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:03:b5:88:26:c9:63:7e:3a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=5d790328-14b4-4b9c-a2cc-193806cd29ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:e2:cb:cf:c6:d4:f3:d1:ec:f3:30:9f:dc:
                    6b:12:61:f7:36:07:d7:f5:cd:6e:10:05:7a:4c:09:
                    71:d1:22:05:28:d4:ae:ee:0b:32:82:5f:7f:0e:70:
                    0d:2e:58:73:00:04:09:63:a7:dd:74:a9:f0:0a:0c:
                    a8:5c:0f:86:9f:8f:55:0f:39:0f:49:dd:47:9d:11:
                    e7:c8:07:61:fe:b1:23:c9:02:92:f2:ab:78:93:c6:
                    f5:a6:74:87:85:41:da:0a:5c:83:e6:62:65:d6:be:
                    9c:ca:d9:78:07:c1:f4:9f:22:f4:50:9b:ae:e5:91:
                    80:40:20:14:59:59:7c:c2:6a:df:c0:f4:27:76:6d:
                    ca:3f:2c:ee:bc:cf:db:f5:c6:35:4c:f3:96:5b:27:
                    8c:a1:99:9a:8c:12:63:6d:dd:fc:4c:2f:29:5f:46:
                    89:39:ef:a5:d3:98:8a:4b:f2:e4:22:ae:ac:4e:aa:
                    e2:38:a3:2c:f1:a6:c4:0c:75:db:05:c0:2c:da:cd:
                    38:59:66:ed:bb:45:9d:28:61:39:1b:0b:a2:0f:03:
                    6d:a3:3c:17:c0:f1:ac:e9:54:bc:a0:f1:18:c8:71:
                    87:b3:cf:f7:a4:40:3f:d6:a4:70:27:6b:68:1f:18:
                    6b:41:63:9d:46:42:39:e8:ea:85:14:d1:66:54:d8:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:9E:82:9E:79:ED:96:E7:6F:FF:9C:70:33:2B:65:30:52:BB:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c0d3e799-0845-3113-a3cb-e5267a1938d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:77:a5:44:41:5c:08:7a:45:1a:5b:65:9f:f0:4e:33:61:26:
         ea:1c:63:32:e2:0d:eb:ab:25:9a:60:20:86:1c:c1:9e:a4:a5:
         a9:8b:e9:14:aa:78:46:b7:2f:1e:0d:09:1e:ab:e1:fa:a4:fb:
         88:ea:c6:ec:2f:3b:a4:de:85:ec:a5:c7:04:33:6d:62:cd:84:
         a9:90:c0:1c:53:e9:21:77:cb:62:61:97:16:ef:91:98:d8:72:
         d3:ad:dd:0d:57:9b:cb:dc:63:fa:f6:b2:05:05:e1:46:83:b0:
         6f:41:f2:3d:5c:48:ae:b0:53:82:7f:93:a5:16:d8:9b:cf:60:
         e4:ec:19:2e:24:36:c0:a6:f3:ef:db:42:8a:f8:c5:9c:a2:d2:
         2f:5e:0d:c0:7d:c3:ae:37:dd:cf:41:73:ea:54:9f:31:85:eb:
         df:d7:6b:df:7f:00:20:89:0a:2c:1f:3e:7d:80:b7:64:d5:17:
         30:e7:e7:6a:eb:b1:17:82:68:4f:5b:cd:8d:48:8b:23:3b:50:
         2f:aa:bf:b1:e5:cb:14:85:23:dd:76:b6:50:ea:2d:f5:a5:f4:
         51:79:a2:46:b9:4e:2c:70:d6:5e:65:4b:c4:e8:58:c7:42:ca:
         0f:f7:92:cd:7d:78:a8:25:d7:9c:29:5f:b0:ad:57:8d:22:01:
         07:3d:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:35 2025 by rpki-client