Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aefe5766-b228-3208-881b-e830d4bb7d96.roa
File:                     aefe5766-b228-3208-881b-e830d4bb7d96.roa (raw, json)
Hash identifier:          2uNiWtEdm+NiWYci6MPn44CLHwZT5RV+NFrgfWJWFFU=
Subject key identifier:   EE:92:A8:30:C7:B2:33:21:A2:1F:60:CB:07:D3:BE:C4:0C:A4:FB:3C
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584B2066CEFECB882110D57D1C80
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aefe5766-b228-3208-881b-e830d4bb7d96.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     46238
IP address blocks:        76.77.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:ce:fe:cb:88:21:10:d5:7d:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=17e91abf-efb9-4c14-9bfb-036bf6f74ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:a6:42:bc:53:32:c5:c4:38:68:b7:3f:1a:
                    13:73:0d:cd:e9:72:02:1b:c6:81:46:bb:7d:51:cf:
                    2d:f5:ba:55:d3:f8:f7:3c:5d:6e:5e:94:23:69:c0:
                    5e:42:d0:08:97:ea:d4:0a:96:9a:31:8f:9a:76:e2:
                    90:98:1d:c3:7b:21:dd:bd:08:ea:ce:8e:9d:51:75:
                    4b:94:59:48:4d:2d:86:1a:81:d4:a5:2b:b2:6d:02:
                    1e:2f:86:89:84:b1:ca:02:ec:e9:83:aa:e6:55:58:
                    58:a9:68:6e:77:32:f5:d4:74:b0:57:36:ba:5f:fc:
                    95:99:f2:9e:6c:f1:78:6b:01:c9:1e:e3:6f:44:ad:
                    3b:6f:38:1e:51:05:af:c3:c5:ed:4d:1e:b6:8a:55:
                    22:58:bf:82:42:b4:e3:3a:67:58:3f:5a:db:75:ba:
                    12:2e:4b:35:9d:fe:66:03:76:a0:3c:ae:80:0e:fa:
                    90:65:31:a2:8c:2e:54:41:2c:1b:0b:0b:6b:96:b2:
                    91:b2:cf:4c:9d:b9:95:f3:5f:e7:aa:62:54:af:87:
                    86:a1:99:94:48:b8:c2:bf:45:64:f2:36:0f:9c:03:
                    2e:d2:d6:90:3f:df:90:b6:69:85:7c:6b:19:24:ba:
                    a1:a2:9f:c7:44:be:9b:c7:3b:6b:e6:df:7f:c3:72:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:92:A8:30:C7:B2:33:21:A2:1F:60:CB:07:D3:BE:C4:0C:A4:FB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aefe5766-b228-3208-881b-e830d4bb7d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:06:c3:d0:44:ed:d9:a4:43:9c:80:c6:40:0f:d7:db:eb:42:
         91:9e:d0:c8:c3:f0:f5:f8:b6:81:22:81:3d:68:ef:98:d0:3c:
         0c:7a:46:81:29:d3:ae:6f:28:d3:71:92:3e:79:ea:bf:bd:88:
         35:e5:5f:ef:a3:10:70:56:15:7f:e2:f7:55:29:00:7a:93:03:
         b1:f4:f4:ce:1e:99:b6:91:df:05:4d:f2:1b:66:39:c8:65:f7:
         24:3e:63:ab:71:51:c7:67:58:5b:a0:dc:6b:5d:23:88:97:e5:
         d2:22:7f:e7:ac:94:5f:0b:2f:c1:75:74:f7:80:6f:3f:00:43:
         46:07:54:88:ed:80:e5:c9:21:57:4b:6f:5d:5a:18:8c:99:15:
         8d:b8:6b:a2:91:d6:89:33:fd:ed:e2:47:6b:7f:64:57:84:3c:
         92:27:07:e4:d1:03:03:0b:2e:43:c8:cd:df:ae:1e:c2:08:81:
         7e:25:b9:66:e7:ca:ae:06:e2:9c:bd:c6:c0:34:2d:25:b4:8b:
         c3:ba:a0:79:71:6e:d4:d8:aa:84:30:83:c2:59:c1:3b:6c:ee:
         29:59:9b:3c:b8:f1:46:dc:16:54:51:70:4c:5f:67:65:6d:85:
         72:dd:39:27:bd:6a:98:68:4d:d8:9f:9e:60:3e:59:18:47:4f:
         3b:4a:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:14:27 2025 by rpki-client