Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa
File:                     5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa (raw, json)
Hash identifier:          tGUDIYgKDxQy5uHEXXQYK8L7FMrIFSD2F59HVZPNdyM=
Subject key identifier:   15:AB:11:CC:FD:CC:7A:29:14:56:14:F8:EB:40:3B:8D:56:89:15:A6
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584AC87657B87BB9E735AA70C780
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     11693
IP address blocks:        66.216.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:57:b8:7b:b9:e7:35:aa:70:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=2a17055f-4d43-4f44-94d7-50f66ca57cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:28:2e:8c:3b:17:74:61:27:d4:36:63:4a:
                    3e:1c:01:77:6d:74:c5:e5:2d:b2:75:ae:a1:e9:b8:
                    cd:74:c0:70:64:d2:45:9d:05:06:8c:a9:28:6c:a9:
                    ca:4b:46:be:c2:fd:bb:fb:09:a1:39:c6:e7:86:15:
                    56:94:43:65:be:b1:0c:4a:19:17:70:a3:21:ac:4e:
                    e8:94:c9:5f:67:4a:e9:31:d6:aa:05:00:cb:04:c8:
                    ea:09:0b:a8:86:1b:d0:22:e1:f3:13:a9:d2:e4:90:
                    04:be:94:b0:b2:96:96:5c:5f:f4:60:f6:8e:9e:c1:
                    42:92:9a:96:9e:bb:40:f0:39:e6:ea:7d:1f:03:0f:
                    da:a9:b6:48:84:cd:ff:74:69:3b:9a:a1:d0:18:f0:
                    8a:42:4c:70:96:57:40:16:7e:5f:2d:df:71:b5:03:
                    1c:ba:d8:aa:c9:05:b9:02:d3:46:a0:24:05:96:e3:
                    d6:f2:1d:5d:08:24:30:6a:bb:db:2c:19:4a:4e:a1:
                    c5:a3:65:4c:64:dd:0b:45:f4:bf:69:a9:2e:da:7c:
                    df:86:4e:84:10:bd:59:0c:e7:80:89:3d:57:e9:aa:
                    c8:36:7f:bb:46:d8:d9:ed:07:6d:ba:19:80:77:2e:
                    de:95:0a:61:15:87:20:1a:9f:66:10:44:c3:23:8a:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:11:CC:FD:CC:7A:29:14:56:14:F8:EB:40:3B:8D:56:89:15:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:88:0f:6b:90:da:21:07:98:c1:77:1d:cd:96:45:65:7f:67:
         aa:9a:64:1c:d0:b6:17:42:e0:2a:e6:e2:7f:13:4f:14:de:4b:
         46:03:c9:70:2d:95:49:72:65:d6:dd:5b:81:c4:c9:d9:fd:5c:
         eb:8d:b6:08:76:76:99:fb:59:b4:dc:dc:a7:b2:0e:bb:58:b8:
         ab:b2:05:fa:a4:32:02:ec:6c:ee:3e:7b:b2:7a:aa:cb:cd:1a:
         4c:4b:59:92:a5:8a:2c:62:48:21:7d:e2:12:4f:59:cd:95:81:
         26:4f:5c:00:20:21:fc:67:3a:67:19:4c:cf:80:fc:99:11:93:
         81:47:79:e6:ed:b7:46:70:64:49:af:1d:28:bf:19:53:28:40:
         52:86:d4:1f:31:c2:de:8e:df:be:65:62:fa:9b:0b:1d:60:13:
         ac:c7:d6:15:c6:f5:88:d2:6d:90:6e:b3:59:2d:c9:ff:fd:a4:
         20:1e:fc:5a:50:74:d0:fa:a5:ee:2b:2d:11:4a:37:98:7d:b4:
         d0:b8:52:09:86:3a:65:59:6d:28:e5:97:c6:c1:24:b7:f2:27:
         55:93:6b:b7:04:44:de:7d:d6:67:fc:55:28:72:1d:d3:5f:a2:
         78:e2:e1:c4:28:71:65:4d:44:c1:5e:7f:21:7e:58:da:87:dd:
         8f:a7:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:08:24 2025 by rpki-client