Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7b2d90d3-68e2-3717-b486-a69b719d550f.roa
File:                     7b2d90d3-68e2-3717-b486-a69b719d550f.roa (raw, json)
Hash identifier:          SuYR+1m4h5RpJxz/GxzwkMDEpJtxMk2b+6NMDXAOtz0=
Subject key identifier:   20:AE:33:00:02:16:A9:28:2C:39:CE:D9:49:89:42:7F:F8:02:11:03
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584A050A7BF1DB9F15CE3A06EB00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7b2d90d3-68e2-3717-b486-a69b719d550f.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     12083
IP address blocks:        66.216.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7b:f1:db:9f:15:ce:3a:06:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=3f915c0c-e11c-4665-b3e4-118f905c37fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:32:f4:83:0f:c3:cc:41:33:41:2a:85:c1:
                    68:1b:d0:6d:7c:dc:68:40:aa:9f:0a:cf:9b:8f:96:
                    3c:d7:0a:69:e8:af:3a:93:e6:18:f2:00:72:3f:df:
                    45:d0:ab:bc:a8:be:8d:0b:66:24:ba:6f:db:a6:2f:
                    80:54:65:fa:8f:10:15:52:14:05:ea:c1:fd:7f:ce:
                    06:6a:0f:61:9d:36:47:ae:62:f5:29:69:eb:b6:f6:
                    f3:6b:66:af:9d:01:5a:3f:8c:47:df:4f:2f:7d:31:
                    a1:b8:01:f6:0b:e1:87:13:ed:c0:de:3a:f9:f0:84:
                    88:5b:17:1c:74:ad:19:f4:99:63:5e:cb:39:ae:ac:
                    c0:e3:cd:da:39:97:ff:b8:31:26:8f:91:4a:91:08:
                    4d:c4:40:b2:ba:c7:79:7b:f7:95:bc:f5:18:a7:a9:
                    98:8f:60:ff:b0:3b:9c:16:3c:8d:0f:a6:f1:27:43:
                    e2:7f:4e:e0:49:62:5e:66:79:0f:d2:36:98:67:06:
                    f6:b7:e6:3d:3e:79:48:1b:e1:63:8f:87:fa:0d:34:
                    04:d5:4c:34:de:a9:91:13:53:30:82:01:d5:33:2d:
                    90:af:d9:ec:aa:ac:50:ea:1c:37:49:11:fe:4e:71:
                    b0:21:1a:55:15:f3:7f:37:94:a2:7a:51:1f:c3:d5:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:33:00:02:16:A9:28:2C:39:CE:D9:49:89:42:7F:F8:02:11:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/7b2d90d3-68e2-3717-b486-a69b719d550f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:da:96:3a:a3:d5:63:ca:a4:cb:c6:48:e9:05:6a:b1:3a:3e:
         95:93:60:84:a6:6a:57:c8:23:05:31:63:ed:e6:e3:38:36:26:
         5f:6e:ec:99:b3:74:83:50:5e:81:7f:9c:7f:5b:1b:00:08:27:
         33:27:01:66:4c:0e:1f:51:05:bb:bd:49:90:0f:4d:84:02:7f:
         ad:93:d4:50:23:e1:49:dd:f6:b2:db:34:86:ec:5f:8e:ef:c4:
         c3:18:6c:e4:4a:f7:40:f6:21:a0:88:43:aa:2b:97:32:bc:b0:
         63:49:30:11:a1:0a:a1:af:5e:bb:16:ff:8d:21:3b:f1:fa:62:
         66:08:b5:98:e6:f7:9a:15:e5:c5:da:16:7c:8a:02:a5:5b:c5:
         df:25:1b:02:19:73:be:9c:42:b3:74:e8:12:b7:2f:bb:b3:a0:
         4a:f9:e2:f3:14:a9:a4:ff:f5:5c:1f:cb:be:f0:49:00:00:af:
         32:b7:42:e4:9c:a0:07:f8:28:78:c5:7c:5c:67:fc:e0:c5:52:
         70:d5:7e:f8:e2:9b:1e:20:e8:78:3d:e1:e7:fa:4b:56:5a:7b:
         57:ee:4e:29:d4:76:d9:ca:2f:6e:8e:6f:3f:c4:6e:ac:c0:dc:
         11:a4:4e:0b:39:16:7f:74:be:97:fe:92:80:26:0b:a4:a0:8a:
         63:93:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:06:36 2025 by rpki-client