Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/69b50640-054d-3cd7-8b68-f3101cbabc4f.roa
File:                     69b50640-054d-3cd7-8b68-f3101cbabc4f.roa (raw, json)
Hash identifier:          kkJ9p4EvwZUFm1urY+hIUL9Y5B5WsLl8IFksdlDEcm8=
Subject key identifier:   83:45:A4:D7:41:7E:E5:19:50:88:06:5C:6D:C2:F5:5C:B1:95:CA:82
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849E7BA85B34D4A08156A6D92E0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/69b50640-054d-3cd7-8b68-f3101cbabc4f.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     7265
IP address blocks:        216.47.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:85:b3:4d:4a:08:15:6a:6d:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=d3d70a70-9843-4dd8-a0c3-772e0869cbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3f:de:94:57:50:4b:7e:56:58:c2:1b:0d:1c:
                    dd:5b:73:95:dc:2d:65:1b:95:4d:ba:23:4e:c1:e0:
                    0d:ab:55:6a:ca:7b:35:52:08:5a:30:52:a6:38:01:
                    80:23:5b:62:f1:15:fd:c5:31:97:0c:84:81:1b:d9:
                    19:a2:54:0c:7a:66:23:bf:ab:3d:e7:8c:cd:c2:1c:
                    01:1e:2a:d7:c3:2b:c7:ad:9b:e2:8b:bb:88:47:54:
                    96:33:4f:86:75:9f:82:c0:dd:fb:b3:d1:0f:2a:02:
                    6b:4b:64:b7:ed:91:f7:75:ce:c8:f0:5a:c7:f6:6d:
                    ec:fa:10:c6:a1:33:7c:a2:24:64:b8:a9:75:92:50:
                    84:c8:c1:00:cc:dd:52:b4:65:24:05:f6:09:25:8f:
                    02:37:35:2c:78:c9:46:c5:74:36:c3:02:11:d6:56:
                    01:8d:52:b6:02:d2:03:56:fc:46:66:d1:04:d9:91:
                    70:53:fb:74:fd:cd:d7:4b:ea:f7:7d:59:cc:0a:4e:
                    93:bb:fe:ef:d5:62:a2:0a:ad:64:7f:e8:2c:b8:b7:
                    17:35:25:19:aa:a9:7b:aa:7f:c4:3f:5d:53:92:33:
                    65:ca:63:9b:84:bd:7e:75:38:d9:36:17:a2:76:76:
                    62:d3:19:ed:6c:3d:e7:eb:88:e5:15:d4:93:33:22:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:45:A4:D7:41:7E:E5:19:50:88:06:5C:6D:C2:F5:5C:B1:95:CA:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/69b50640-054d-3cd7-8b68-f3101cbabc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:d8:54:d1:43:11:f1:dc:3c:e3:07:44:b9:20:34:01:1b:
         de:30:c8:50:5c:1f:e8:83:72:52:ea:5f:ab:a9:b7:8f:2b:e7:
         2e:ba:1c:90:f9:dd:5f:85:ca:93:80:8e:79:aa:8b:8b:58:bd:
         e4:0f:b7:38:55:7e:3f:5c:12:23:01:b0:cf:4f:66:81:9b:c5:
         c1:a0:43:d0:01:18:8e:6e:5b:69:84:a6:c7:0a:9f:a4:4d:a6:
         10:c0:5e:e6:80:6a:98:e1:66:f4:38:0c:a9:fb:b4:b7:7a:3b:
         23:c1:01:0d:fa:77:2a:a8:3b:1e:04:68:3d:e4:78:77:ff:98:
         d1:29:97:d6:93:11:e0:8f:b6:57:41:6e:ad:68:9b:77:78:18:
         f2:50:12:13:6d:6e:24:f3:29:e7:8f:e9:b2:59:b6:4b:5d:5b:
         36:c5:88:5c:5b:d6:ae:ae:4b:60:ed:99:ac:e5:6e:66:8b:d4:
         bd:96:1a:d5:1f:cb:6a:24:ad:c5:b8:96:2b:1f:93:87:bd:5e:
         69:4f:56:95:24:bd:9a:a3:1e:85:dd:d9:eb:98:48:8e:7b:82:
         18:df:a7:c2:3f:1b:97:80:df:f4:14:9b:2f:a9:1c:ec:62:9e:
         f0:24:50:d7:c1:9a:23:c2:5a:ef:dc:21:1c:9f:fb:03:40:4a:
         10:15:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:06:41 2025 by rpki-client