Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa
File:                     6aa8862a-f412-3599-9509-e9374348bdd3.roa (raw, json)
Hash identifier:          U0Q2lukpYcHUZrE8NuukSnKoROT+dnCt7DfXgY28YYQ=
Subject key identifier:   FE:E7:AC:DE:A7:46:FD:38:F9:11:44:F3:D0:3A:54:5E:89:9E:AC:D8
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849E7BA86EDC2A5DEDAF631F200
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     11693
IP address blocks:        216.130.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:86:ed:c2:a5:de:da:f6:31:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=4b42871f-3806-4d86-a6ff-b483486e3978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:63:88:7f:cb:f4:4f:12:01:ae:2e:dc:38:
                    fa:2e:b2:42:34:8e:88:0e:b5:6b:97:86:11:ff:9a:
                    a8:88:97:e3:aa:5a:35:ef:94:56:c6:fd:25:95:29:
                    11:eb:29:50:7d:06:d8:8e:b1:e5:d0:69:f1:83:5f:
                    e0:82:44:d3:4c:85:c4:d4:6e:6f:41:9f:6c:36:ed:
                    28:e0:47:1a:ee:0e:25:72:70:16:9c:13:65:6c:b9:
                    63:d6:e1:64:83:f8:e1:b3:f2:8f:ef:c0:ea:a2:ce:
                    50:e4:5e:ca:33:75:5d:a7:a0:84:b4:cb:1c:24:b4:
                    36:d5:92:f9:ae:63:1e:22:a0:45:d7:e2:ce:1f:ec:
                    5a:fc:27:f0:16:f7:b9:1a:f3:73:bc:1d:17:a6:ff:
                    e3:5b:0f:6f:b8:66:9e:c4:c4:ec:f3:c0:5a:e1:2f:
                    58:34:37:11:f7:c7:78:ed:70:e8:30:a0:c7:55:d1:
                    a3:da:3b:93:52:5f:fa:0d:ba:e6:78:2a:f2:a6:09:
                    95:7d:fc:cf:ea:90:96:4d:80:37:6a:15:58:bd:97:
                    d4:2e:cf:17:0f:7b:8e:54:7d:14:61:07:ae:af:12:
                    55:c2:1c:01:a2:2e:66:a6:74:22:a6:5f:bc:cd:bf:
                    d8:3d:db:17:bd:57:af:3d:13:26:06:86:ff:8e:65:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:AC:DE:A7:46:FD:38:F9:11:44:F3:D0:3A:54:5E:89:9E:AC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:11:b1:17:87:e7:6f:35:25:75:0f:c9:79:52:66:e3:e2:6a:
         a5:31:4e:49:d1:c7:7d:45:a4:a3:e7:2c:37:db:85:cc:91:ed:
         cd:ea:c7:00:39:98:e8:fc:b5:ea:45:a0:1d:16:d0:af:b6:b9:
         5c:5d:f0:25:50:f6:ef:6c:74:9a:28:51:5d:80:2e:a8:9e:98:
         41:e8:83:4c:3a:11:a0:23:2c:a4:ab:be:0a:57:f9:d1:f0:bc:
         d4:1d:81:81:6f:6c:70:a5:bc:72:c7:1e:89:ef:3c:c4:26:eb:
         7a:35:fb:fe:a2:11:52:87:9b:cb:1c:93:37:5f:6b:b2:9e:08:
         80:ee:ac:f8:d3:19:db:63:69:57:83:fd:b6:ce:95:43:c4:50:
         5a:03:14:6a:ae:ea:f4:e9:07:89:4b:77:7f:1d:60:af:f4:1a:
         f3:f4:c2:61:6e:a7:1e:17:64:3b:08:76:ba:86:b3:0b:57:9e:
         fe:86:61:72:68:a6:15:ce:33:63:bb:a5:a5:dd:4a:d7:ba:4a:
         1c:21:cd:9c:78:5f:8b:39:fb:b5:44:82:6a:71:2f:33:00:c9:
         e0:86:3f:ee:f9:73:6b:f9:5b:93:f2:5a:cf:ee:8f:a0:96:82:
         6c:11:64:78:46:77:9c:79:a1:8f:f6:43:92:43:00:60:b3:bf:
         3d:95:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:00:28 2025 by rpki-client