Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa
File:                     79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa (raw, json)
Hash identifier:          +v4xk/cfmaODuzTi83dazbekydIbybUxNAlQu03ob0g=
Subject key identifier:   0D:50:6E:DB:61:3C:59:5B:7B:55:71:35:74:49:60:F0:CB:52:B5:97
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584B328C435DD3C58135FF9BD7C0
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     23546
IP address blocks:        70.37.248.0/22 maxlen: 24
                          76.77.23.0/24 maxlen: 24
                          76.77.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:43:5d:d3:c5:81:35:ff:9b:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=3221e3df-e3ff-4e07-9bea-3d2e17379b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:38:f2:74:d7:2d:72:8c:83:41:81:57:bf:
                    b9:53:19:33:5c:53:00:dc:17:33:74:95:65:ff:36:
                    3d:20:75:e0:1d:c0:20:b5:46:ae:ad:33:82:e7:86:
                    07:f1:e5:c3:48:5a:ec:54:3a:5d:09:e8:26:b0:97:
                    a7:32:a5:5b:21:e2:79:9a:59:a2:b9:91:db:57:11:
                    ac:0d:cd:6b:98:e3:0d:43:7c:3d:71:27:29:1b:e1:
                    cf:af:b4:2d:37:c1:21:57:b6:f2:9c:00:ad:6f:45:
                    ad:58:dc:7a:7e:72:39:ad:8b:ce:12:cc:fe:86:19:
                    d7:a2:04:23:82:7b:f1:07:38:95:10:8c:5d:37:84:
                    6f:ef:75:be:c5:4f:52:2d:53:8d:56:cb:52:ed:91:
                    1f:31:dc:3b:c8:e9:84:00:f4:b5:f0:64:9d:dc:03:
                    b2:4c:3d:2f:44:85:ad:8a:2f:c4:4f:19:51:1c:f2:
                    bd:f1:a3:6b:fb:a6:98:c6:32:fc:d3:ab:ec:c4:0d:
                    b9:ec:38:2f:81:b1:04:61:15:7f:7b:c7:5f:34:41:
                    0c:62:0a:90:b7:35:d2:09:b0:e4:bd:f9:9b:ab:c4:
                    82:01:43:63:d1:29:e8:cf:3e:c5:a5:76:3a:ad:6c:
                    bb:e7:57:dd:74:59:06:c0:4c:48:09:16:5c:ae:fc:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:50:6E:DB:61:3C:59:5B:7B:55:71:35:74:49:60:F0:CB:52:B5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/79ccfb80-df4e-3da1-93f3-ed22cb90d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.37.248.0/22
                  76.77.23.0-76.77.24.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d6:f3:4f:75:1c:00:f3:c8:f9:f0:45:cc:ba:12:59:9c:f0:
         66:7b:71:81:72:0a:84:36:dc:6f:0d:17:f0:3d:70:f2:5c:93:
         0f:64:11:dd:48:47:c6:06:9b:be:0c:c5:39:06:e3:78:cc:b2:
         dc:ce:9d:dc:2c:e8:2c:9f:76:12:3e:b1:44:99:0b:bd:72:a1:
         86:e7:3e:d4:e9:dd:6a:d0:6c:fa:48:0d:d4:a8:a1:fb:23:d2:
         c0:85:d5:62:50:44:63:21:66:6c:6e:e1:39:0d:ac:ec:95:24:
         13:56:ec:ae:13:fa:43:60:17:1b:55:6a:03:79:56:af:be:67:
         c2:6f:23:3f:8b:dc:56:bf:b3:49:af:ba:cd:68:2e:76:b5:b1:
         e8:47:2c:d8:ba:83:5e:55:5d:6a:73:1e:80:b4:ab:0a:20:ba:
         ab:57:d9:ab:2f:cd:02:e6:c7:ef:7e:29:72:99:eb:1c:f3:b2:
         d0:bb:7d:e8:2d:29:27:2b:9c:08:f7:f5:68:2a:3f:3e:ec:16:
         38:fd:af:f8:06:30:21:c4:24:24:81:a6:c1:56:f7:be:ef:e1:
         ea:d9:17:12:91:3e:4b:02:bb:9e:33:96:b5:16:b2:26:60:0a:
         c7:dd:6c:6e:39:ea:9b:2d:a0:11:cf:92:57:d0:61:70:90:99:
         e6:aa:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:46:34 2025 by rpki-client