Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa
File:                     79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa (raw, json)
Hash identifier:          tpTqyHvQ/W0VsMWr9UjI6RwMUkd5ETTK57rWd1dikJs=
Subject key identifier:   00:DE:AE:28:DE:BD:E8:78:14:8A:D3:55:88:DC:2B:0F:43:CE:96:64
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584A51D07512D198DCC91E196500
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     23546
IP address blocks:        70.37.248.0/22 maxlen: 24
                          76.77.23.0/24 maxlen: 24
                          76.77.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:75:12:d1:98:dc:c9:1e:19:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=25e281e7-cfa5-4e4b-bb33-f83b999d517f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:7d:ad:d9:26:5e:a0:84:bb:92:e4:d1:57:
                    b4:a8:ba:bc:21:4a:e7:92:73:14:28:26:08:0e:c3:
                    db:90:36:53:83:ce:06:cf:19:e5:6b:b8:45:56:d4:
                    b9:cc:f5:22:a9:b9:b0:14:41:98:50:3a:67:2a:cf:
                    87:3e:0a:fa:65:0f:f4:72:40:9a:28:62:62:6b:15:
                    4d:46:34:09:97:ff:ae:a3:d8:b0:33:50:56:f2:06:
                    63:c4:df:23:b2:56:f4:84:2d:a1:0f:f3:a6:ee:4e:
                    92:26:d4:83:0a:67:df:13:c7:57:1f:1a:d2:c3:e7:
                    19:0a:dd:e8:85:59:a0:7f:a5:fc:e8:52:7c:33:9b:
                    6b:c2:c0:e2:80:7b:c1:f9:a6:f6:bb:5a:66:16:4a:
                    33:23:c6:63:d5:29:94:df:e1:a9:cf:11:d5:d2:87:
                    28:8e:a4:b6:fb:84:70:e8:b2:ba:94:7c:1e:81:20:
                    1b:af:d7:9f:3b:03:35:32:e1:15:0e:8d:a5:f8:e1:
                    44:8a:f8:ba:e6:bf:0f:34:bc:bc:91:20:81:d8:41:
                    76:a7:9f:7e:0c:9d:56:45:f5:94:27:1a:5f:18:22:
                    ee:b5:8d:4a:4c:b5:15:0c:8b:ab:0d:66:26:5a:24:
                    0b:e9:4b:74:a2:4b:2e:70:e4:38:a2:77:bf:9b:2b:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:AE:28:DE:BD:E8:78:14:8A:D3:55:88:DC:2B:0F:43:CE:96:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.37.248.0/22
                  76.77.23.0-76.77.24.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:da:6c:e2:39:d9:bc:94:62:1f:8e:7e:9b:be:a8:05:6f:
         e9:38:a5:01:4a:b1:54:b0:27:85:3b:a8:80:63:b8:eb:4a:a0:
         36:58:df:86:56:2b:c5:db:70:78:af:d0:50:f0:39:0a:b5:23:
         4e:c7:3c:24:ed:0d:d0:37:f9:7b:4a:09:99:21:8b:a8:3c:d2:
         4a:bb:21:a7:a3:3c:b1:e4:64:1b:d8:c6:12:4b:59:a3:97:61:
         c9:ee:ec:e2:68:54:48:08:c3:01:bf:85:8f:cf:42:61:cd:d7:
         cf:6e:a9:7a:b5:f2:75:4d:d0:85:c4:d1:c8:5e:df:aa:cc:4b:
         d2:68:83:9b:fd:a3:32:72:39:de:13:0f:98:2e:1a:c2:dc:84:
         44:4c:0c:a9:8f:35:43:c8:10:24:00:07:86:f6:23:5e:f6:ff:
         72:94:2a:dc:1a:23:da:b6:09:a7:a6:86:99:b9:7a:13:5b:49:
         8c:aa:3e:21:c7:9a:dc:e4:cb:9c:e7:39:19:6c:0e:e3:a4:f2:
         5a:52:0d:a1:64:11:c6:87:fd:31:0a:b4:74:61:71:a8:57:a7:
         83:b5:7e:3d:5f:55:4b:62:37:02:f7:7e:4c:d2:61:60:a2:42:
         e0:d8:78:7f:33:7b:a4:11:00:23:12:73:31:6a:0d:71:31:ee:
         ed:cf:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:06:56 2025 by rpki-client