Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4935527e-b687-378d-aa1a-f664892e6712.roa
File:                     4935527e-b687-378d-aa1a-f664892e6712.roa (raw, json)
Hash identifier:          D6OMhheyUmFxLf9/C4u4qY54K/O/cEKYRyUbxBNNHFM=
Subject key identifier:   97:E1:8C:73:D5:71:4A:EB:89:4E:F8:80:A4:06:77:1F:B6:46:38:03
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584A41105FC1B4EED22488B4BBC0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4935527e-b687-378d-aa1a-f664892e6712.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     12083
IP address blocks:        75.76.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5f:c1:b4:ee:d2:24:88:b4:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=0881803d-1405-4054-a213-e54628352e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:72:48:bf:a3:43:6c:c1:6f:85:1e:a6:f1:
                    2b:69:4a:ec:cc:87:97:9c:fd:11:9e:83:0c:23:0b:
                    ee:64:19:fd:28:27:f3:c1:27:6e:d5:c8:0e:c1:3a:
                    02:82:51:3e:99:7b:92:b5:b5:f5:d5:21:7c:5a:62:
                    5d:4c:48:05:cc:3c:78:22:44:64:92:c1:84:ce:69:
                    8a:72:0f:2c:79:0f:ee:6f:70:6c:34:30:af:b6:c7:
                    e9:03:3b:4e:62:6b:dd:88:91:7d:1a:70:7b:f9:37:
                    70:db:da:6a:da:92:7b:4a:e4:ed:58:fe:c9:64:ac:
                    fc:9e:e4:94:85:e6:28:58:01:aa:a2:da:95:3a:b6:
                    f7:a9:a2:d6:ef:89:4e:3f:d2:6f:e7:9e:a2:cd:aa:
                    d1:d0:ab:d3:81:90:c8:5d:05:91:b6:dd:4e:f8:16:
                    a8:52:c8:d9:14:80:cf:89:d7:73:da:f6:59:ef:76:
                    20:72:b4:ad:fc:e4:00:e7:2d:94:3d:da:6f:b1:98:
                    5d:bc:35:e8:17:4b:b8:dc:11:7d:9e:b5:7f:92:2b:
                    02:a8:a5:d7:cb:dc:de:cd:c5:73:41:be:88:b9:24:
                    5a:77:46:af:a3:58:2e:27:d1:fd:ee:6b:33:71:b7:
                    3d:02:64:15:85:2c:87:35:1b:30:85:ce:f6:82:65:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E1:8C:73:D5:71:4A:EB:89:4E:F8:80:A4:06:77:1F:B6:46:38:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4935527e-b687-378d-aa1a-f664892e6712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.76.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:54:e9:fa:2b:e3:e3:89:36:20:2e:63:89:0a:90:cd:f8:37:
         8f:bf:5c:2b:4a:3c:26:7b:0f:35:7e:49:77:20:2e:c0:d7:09:
         8f:63:93:98:f9:dd:04:8d:99:a9:fb:2d:af:a8:fd:61:1b:45:
         84:fd:dc:83:db:ad:1b:8d:a7:50:e9:15:c8:fa:a1:da:24:44:
         69:13:2a:9c:6c:31:06:c5:31:cb:cf:e3:bb:eb:69:02:bb:b0:
         6e:71:c4:45:11:15:41:05:e2:67:6a:6d:4b:a2:28:3d:19:a8:
         3e:0f:9d:4c:58:1f:6e:09:64:7b:15:69:02:3e:af:87:1d:e0:
         ad:e8:06:be:a3:f7:2f:22:9f:5b:ef:b2:bd:37:fb:45:aa:2c:
         95:0c:bb:f8:2c:58:f0:4a:bd:75:c8:d4:21:8d:d6:0f:59:47:
         9d:05:3d:b6:71:00:1b:93:66:b0:df:ae:95:0b:72:75:fd:fe:
         78:62:90:93:b2:4e:96:b8:88:be:82:29:f4:8e:ff:b0:28:ce:
         b3:04:dd:47:0e:b3:a9:65:33:5a:b3:ec:34:8a:5e:99:c1:11:
         7a:ea:2e:45:99:8b:f8:94:e0:41:53:68:c2:49:58:4c:6f:4e:
         8a:52:0d:08:27:82:6b:8c:e9:db:af:fc:e4:71:93:69:a7:3b:
         d0:d7:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:33:42 2025 by rpki-client