Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/07c8249d-3825-3421-abe8-2182d29734d9.roa
File:                     07c8249d-3825-3421-abe8-2182d29734d9.roa (raw, json)
Hash identifier:          6X47yQH9A81w7qiYvc44fUTpJ2uBrrhIJPQ6IaV94Zs=
Subject key identifier:   75:92:41:C5:9B:B2:42:18:E2:F0:54:CF:7D:9F:1E:F1:6B:D5:D3:57
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584AC8765627D36DE0902A349C10
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/07c8249d-3825-3421-abe8-2182d29734d9.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     7265
IP address blocks:        216.47.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:56:27:d3:6d:e0:90:2a:34:9c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=32f975b7-3c68-4fa3-9f96-a739b6abfd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:91:99:d8:53:66:a7:b6:1d:65:d0:b0:c1:
                    94:d6:ff:ec:bb:45:86:9a:54:86:bb:fe:d0:f3:3d:
                    24:d5:f8:ec:d2:13:46:0c:49:31:ff:bc:ee:cf:7b:
                    5a:39:03:6f:ae:26:de:ba:9e:a8:fb:26:1d:6e:70:
                    aa:dd:63:b9:f2:78:51:0d:5f:de:a2:7d:1d:f8:6b:
                    2c:9c:f8:95:9d:f9:e6:88:91:09:99:32:52:de:f1:
                    bf:1b:7c:66:a1:7d:fa:8a:52:57:1c:18:80:e8:a9:
                    15:27:fe:5d:50:1d:c1:7b:a5:e6:0f:c3:4f:c7:51:
                    cb:85:0c:dc:d5:20:87:16:23:3a:85:75:11:91:82:
                    db:e0:d0:80:a9:87:52:44:57:aa:63:d5:09:5a:34:
                    ce:ae:44:bb:5f:52:4c:50:dd:d9:82:e8:9c:47:ae:
                    08:8d:6b:e9:dc:41:ac:90:ab:ce:02:9c:53:07:62:
                    08:6d:28:7d:20:b3:36:46:9a:90:c5:24:4f:11:f1:
                    95:d3:cd:00:be:9f:ff:36:04:cd:40:b3:36:31:68:
                    52:2a:cb:b5:39:ac:ac:f6:40:32:c9:99:e1:7a:2d:
                    2f:d0:9f:c4:dd:97:d1:b8:36:4e:47:4b:df:42:cd:
                    7e:be:9d:77:3f:d9:dc:18:49:d7:8b:b5:00:7e:a2:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:92:41:C5:9B:B2:42:18:E2:F0:54:CF:7D:9F:1E:F1:6B:D5:D3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/07c8249d-3825-3421-abe8-2182d29734d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:a2:cb:a7:f8:26:40:26:9f:29:27:35:58:93:0b:7f:a6:
         81:a5:3f:fe:97:df:0e:6b:7e:9f:a2:43:a5:95:bb:57:1c:50:
         e3:89:50:1b:5b:13:74:0c:2e:43:35:0f:7a:8a:90:fa:9e:12:
         f5:65:79:d9:a4:5d:dd:a9:bd:f3:59:ca:43:53:5d:bb:a6:46:
         1e:35:26:36:fa:d4:e1:f4:3f:29:d2:93:6d:33:ba:d9:36:f5:
         fc:cb:10:7c:8f:24:12:6c:91:21:80:80:f0:92:c8:7a:cf:c1:
         91:98:36:74:46:d9:0f:47:98:1c:63:42:77:3c:c3:18:23:71:
         4b:a2:dd:4a:2c:c0:ac:87:e7:fc:2b:6e:73:57:42:9d:91:66:
         5e:c8:61:3e:65:aa:25:a3:02:97:d8:01:3a:a6:4d:4f:36:06:
         2c:3d:01:85:5b:96:87:73:c6:ed:28:1e:ae:53:2f:d7:d2:51:
         ee:41:78:79:7e:0b:d0:82:59:d0:9d:03:91:80:a1:d4:26:10:
         45:81:8e:ae:1e:8c:c0:3a:11:b9:ec:17:5b:3c:5d:0e:54:f5:
         f9:7e:e3:37:36:67:0d:10:14:47:08:7a:1a:22:8f:8f:3a:d7:
         86:33:e4:8f:fb:9e:b0:65:0a:c3:73:f9:9c:ba:08:23:09:99:
         db:b1:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:53 2025 by rpki-client