Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa
File:                     04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa (raw, json)
Hash identifier:          WvNZTWxqy/M7ZbJcTDyiLhpPIuX0nNRtWFtPQqkB2l0=
Subject key identifier:   CD:58:80:62:E5:DC:F1:C3:39:89:F5:89:2C:B7:C8:96:BE:4D:CC:44
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584AC87658C0780311CDB30C1C80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     11693
IP address blocks:        216.130.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:58:c0:78:03:11:cd:b3:0c:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=4129bd0f-b711-4133-86a4-801ca9d0d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:c2:bc:05:31:12:86:a9:08:7c:43:ee:2a:
                    ce:5f:eb:57:cb:68:62:29:cc:48:b0:b0:00:7c:d6:
                    71:b7:47:8d:91:34:73:4b:ea:4f:39:1b:41:61:a6:
                    8d:61:b2:ae:96:93:97:7d:e2:b5:15:c3:d9:a3:0f:
                    24:81:25:c2:13:22:ec:b6:d8:ba:ee:54:f3:e6:6e:
                    b5:5b:6f:97:db:4b:92:23:22:ea:6b:e0:15:a9:df:
                    b1:3a:c3:83:61:84:51:5d:59:0b:3c:d1:ef:38:0d:
                    48:c3:70:18:9c:75:d6:81:dd:6d:e0:0a:14:3d:b0:
                    ba:d7:83:d5:b4:6c:c7:50:97:59:76:4e:77:cb:df:
                    72:52:5c:98:e4:95:08:85:0c:68:46:ac:09:25:6a:
                    54:1b:bb:17:fb:57:9d:21:be:d1:9c:59:f4:27:e2:
                    3b:15:a4:6b:0c:e0:0b:6f:1f:c2:40:4c:49:e1:15:
                    37:1d:e3:d0:03:f3:68:80:87:b5:e1:bb:4f:f8:a5:
                    0d:36:66:ef:56:68:66:7f:ca:47:5f:5c:5d:80:fc:
                    fb:f2:21:22:b9:29:e0:fa:95:ea:b6:a6:11:ff:06:
                    2b:a9:32:7f:b7:21:1b:8f:31:b4:24:c5:8e:e3:e4:
                    56:f7:4a:53:88:ba:7d:f9:93:13:0d:4e:e4:59:7d:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:58:80:62:E5:DC:F1:C3:39:89:F5:89:2C:B7:C8:96:BE:4D:CC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:18:eb:46:05:0e:16:53:be:78:c3:ab:74:d2:48:bd:27:
         30:f4:c1:24:b0:bd:92:3e:d1:a7:d2:95:7f:86:f7:4d:7e:22:
         50:0b:ee:e3:20:ca:74:72:99:56:25:80:ae:3e:52:66:8f:a0:
         6a:64:ae:4d:3a:73:6a:55:90:13:f0:00:1c:c4:ae:a1:ed:21:
         23:4c:f1:7d:d1:b1:d0:a2:e9:4a:00:53:5f:d9:c8:fd:85:ab:
         68:37:a6:02:f2:c2:52:35:37:ab:1c:29:08:08:04:a7:6a:fc:
         bb:37:91:66:6d:bc:fa:2e:34:26:2c:a6:13:59:ad:82:67:5a:
         a6:04:de:08:17:07:53:cb:04:72:92:8a:e6:ef:b1:eb:03:30:
         bd:8f:93:b0:3b:96:7b:5a:56:68:74:e0:b6:b9:0c:68:5b:6d:
         2b:98:61:6f:f7:b7:f0:2a:ce:8a:0f:66:90:bd:c0:fc:13:39:
         ae:99:5c:78:a2:ef:fe:aa:33:55:d0:91:54:f5:aa:41:1f:18:
         aa:80:07:ef:8a:e4:de:d4:5e:bf:06:a9:63:76:6a:e3:64:30:
         d8:55:ff:ec:10:4b:a5:42:53:3f:37:55:81:1c:51:03:75:cb:
         71:04:79:b3:3b:a7:2d:f3:dc:6a:a6:f2:aa:00:92:26:fa:b1:
         ba:71:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:24:59 2025 by rpki-client