Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9a31a71e-046e-3430-afaa-bed90a13ae3b.roa
File:                     9a31a71e-046e-3430-afaa-bed90a13ae3b.roa (raw, json)
Hash identifier:          qEtNIuIq5vrM2EavizAPdwI1AHoftbMQIiCIJ/sVCT8=
Subject key identifier:   53:5F:4F:7E:42:9E:10:75:89:3D:BB:04:74:2D:28:64:B6:57:73:08
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584A0C056D05B2ED1FBB7B501300
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9a31a71e-046e-3430-afaa-bed90a13ae3b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     12083
IP address blocks:        66.216.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:6d:05:b2:ed:1f:bb:7b:50:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=40d7b91b-e30c-4f0a-a5df-0dd722882a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:c4:bf:f3:89:b0:b9:73:07:70:72:fa:26:
                    e4:d2:16:b6:24:92:29:28:37:ad:0f:ce:cc:66:fb:
                    0e:84:08:66:c5:6e:c5:a2:df:45:21:03:5d:55:9c:
                    15:e0:d7:8d:0a:9b:8b:9e:c3:0e:85:17:87:56:7b:
                    6b:6a:21:23:c1:0b:34:aa:8e:2c:21:4f:d0:b7:31:
                    43:cf:ae:bf:08:51:2f:df:e0:cf:68:7e:7a:79:09:
                    05:c8:17:f8:64:e8:46:21:0c:97:aa:bf:ff:4f:94:
                    6b:7a:94:bb:53:9f:cb:f0:05:78:10:bf:66:75:b6:
                    59:69:22:e5:25:d0:4b:4b:f6:14:3a:ef:79:3b:2f:
                    63:20:b2:2f:89:ca:f9:6e:47:04:1d:14:ae:b0:71:
                    15:dc:a3:ba:17:09:ca:bc:7e:fc:63:72:5f:c7:8a:
                    7f:dd:d4:98:38:f1:22:3d:b4:78:6f:69:31:82:97:
                    2c:22:2e:bf:60:f5:b9:ed:87:92:e3:8b:48:91:c2:
                    77:9a:b5:9f:a2:a0:27:08:b8:e1:24:d4:a1:1e:3e:
                    4f:1b:4f:10:16:6e:57:1d:60:d9:48:5f:c2:1b:81:
                    dd:9b:51:1c:77:76:d4:77:07:6e:12:bb:8f:80:b7:
                    53:82:7f:cf:3c:3a:55:e6:42:dd:6a:17:40:48:43:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5F:4F:7E:42:9E:10:75:89:3D:BB:04:74:2D:28:64:B6:57:73:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9a31a71e-046e-3430-afaa-bed90a13ae3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:99:89:6e:e8:4c:01:e2:b9:18:e5:00:42:ba:4a:68:07:
         f1:05:19:6e:7c:31:d4:5b:62:ab:a1:d2:c5:30:42:f7:36:30:
         a6:96:9d:ca:82:f0:9c:bf:f1:c5:23:2c:03:e8:99:a7:99:2a:
         d1:86:f7:da:15:10:eb:97:8a:62:81:b8:65:b0:b4:d2:78:34:
         4a:9c:16:dd:82:02:8a:32:52:e2:40:45:b4:ad:f5:0b:3e:4b:
         03:a0:8d:23:04:40:59:11:00:42:be:ea:23:84:23:bc:98:ac:
         e4:79:ec:54:a6:b7:40:8f:ec:4c:e4:10:f5:cb:b9:33:be:25:
         19:10:00:75:a3:17:4b:25:3e:c8:f4:87:7d:9a:7b:9c:78:02:
         03:03:c3:94:f9:ca:c6:21:7c:71:0d:c0:a8:36:e9:b8:1c:cd:
         a5:f3:fd:20:61:ef:e2:67:6d:2a:fc:db:c7:02:fe:c0:b3:b8:
         26:ae:a9:b0:7d:5e:85:68:06:5d:71:df:27:fb:08:15:20:bd:
         e6:4c:14:d7:06:5b:64:53:3a:77:fc:4b:68:3a:3e:40:c1:ec:
         9f:ec:0d:4f:af:de:b4:da:97:f9:0b:c4:65:39:89:3e:53:7c:
         73:b2:74:7d:31:ee:3f:a5:66:ac:44:3a:15:24:65:dc:d7:42:
         09:18:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:27:29 2025 by rpki-client