Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa
File:                     6aa8862a-f412-3599-9509-e9374348bdd3.roa (raw, json)
Hash identifier:          ZY5TuUeQxvK0VSWiqXdSpdStzCEhJbrMqcy1GSWL8uY=
Subject key identifier:   25:C9:FB:90:16:C2:2F:54:53:D8:C5:CF:C9:94:EA:42:03:8A:18:F1
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584AC87658E5E4A48820597E0B00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     11693
IP address blocks:        216.130.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:58:e5:e4:a4:88:20:59:7e:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=1b2344ee-17ac-4b20-82a6-35d4b00f8399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:67:70:30:fc:7a:70:74:71:60:74:e2:84:2b:
                    63:0c:e7:32:66:ca:8c:93:70:31:c1:63:81:55:24:
                    8c:2b:b4:a0:4b:28:b3:13:cf:a6:a8:2a:fc:64:bc:
                    a1:4d:37:16:fc:c0:19:d4:9d:4e:52:e3:b7:06:6f:
                    b5:6b:c5:a7:99:9e:4f:15:a3:5b:76:da:39:40:46:
                    a5:9c:61:31:d1:76:65:34:5a:d0:d5:f4:e0:ff:56:
                    84:de:c5:25:36:5b:1a:d2:8d:81:5b:2f:7d:0a:4f:
                    d1:30:7b:1a:90:12:a5:05:2d:04:f7:2c:93:51:d2:
                    f9:08:27:b0:ae:ba:3a:2c:f9:de:8e:f5:2f:79:f5:
                    0d:3c:22:d9:cd:01:44:f9:7c:c2:2e:74:df:5b:bc:
                    0c:b0:5c:12:e3:bc:7e:f5:73:c4:16:40:3e:21:00:
                    83:9e:c4:34:bb:ba:c5:65:e5:fb:59:da:13:c6:e5:
                    d0:f5:96:c7:f4:7e:75:c4:01:c9:66:98:a7:1f:9d:
                    ab:cb:4b:84:02:7f:9d:da:e7:2d:7d:a4:6e:dd:2c:
                    d2:67:6a:32:31:7f:37:7a:8b:76:14:20:4d:84:08:
                    c9:3e:22:13:94:08:22:9f:df:5c:1c:29:ef:98:c9:
                    40:27:5b:c3:9f:1f:e8:d6:35:7a:51:0d:47:69:e7:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:FB:90:16:C2:2F:54:53:D8:C5:CF:C9:94:EA:42:03:8A:18:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:58:53:16:aa:31:92:6a:2e:8e:d6:a7:fb:ad:98:c0:57:89:
         e5:37:55:58:49:80:bf:ca:c8:f9:77:94:80:9a:fd:d2:ec:4a:
         90:3f:54:e7:83:d5:3e:fe:2c:68:33:ae:45:d0:5d:6b:18:a6:
         98:1b:80:0e:c4:09:e1:97:e7:aa:0d:6a:7e:b2:cd:80:cd:7a:
         a9:9b:9c:d9:1c:53:17:f2:ae:c0:9a:6e:2f:c4:9f:41:d1:8d:
         69:fb:e5:87:99:d3:d6:24:47:dc:b8:eb:c2:25:d0:d8:84:73:
         0c:66:ed:81:1e:32:b8:e8:62:e7:56:62:23:75:c1:8b:a9:b4:
         58:af:63:f8:2e:7c:92:40:1a:38:d5:39:37:94:4f:49:a9:6f:
         ff:2d:61:0f:59:c9:02:db:92:71:8b:f6:aa:34:6d:3e:73:e8:
         56:9d:ee:5a:93:eb:6e:0e:1b:f1:6a:e4:22:f5:91:f2:06:b5:
         18:8e:da:8e:97:6d:44:02:e4:ed:49:f8:c0:8a:51:21:be:54:
         48:99:73:9f:b0:e7:ac:06:c1:ae:5c:78:8b:91:39:41:1e:c1:
         ed:4a:28:9a:78:21:91:48:ef:30:4f:e8:95:5b:4c:e9:c3:ad:
         df:80:3a:fc:99:4f:04:69:91:d9:77:c5:c2:4b:53:bd:b8:fb:
         0c:bb:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:53:54 2025 by rpki-client