Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/c5390e88-e601-33a8-a34d-e2501b349cdc.roa
File:                     c5390e88-e601-33a8-a34d-e2501b349cdc.roa (raw, json)
Hash identifier:          BFQBlPGl7X9Xt2UoKLH3NcI/8hw5d0pdPTJMgqAbnKw=
Subject key identifier:   81:49:4C:BB:35:A3:47:B0:1C:72:6F:D4:FB:19:9A:F6:15:B2:55:33
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849E7BA856651A645F693FB5F60
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/c5390e88-e601-33a8-a34d-e2501b349cdc.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     7265
IP address blocks:        216.47.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:85:66:51:a6:45:f6:93:fb:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=95a5129e-9f7f-4fc5-b650-b13e594b796d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:b8:65:55:dd:9b:79:8c:fd:39:f9:bf:0d:
                    c8:aa:27:c5:b3:04:ba:94:ed:6a:56:20:5b:5f:c1:
                    53:0f:bf:cb:4c:e0:0e:da:bf:9b:05:3d:c3:c4:fa:
                    41:1a:84:1f:e4:b9:b4:9a:9f:04:ef:d0:00:de:44:
                    f4:ff:b5:ec:15:88:24:b0:0a:b5:d2:8b:d7:3a:3d:
                    5c:d6:a9:75:57:b5:1f:6e:c6:53:96:fe:2d:53:45:
                    61:d9:c0:71:b2:96:6d:52:32:78:9b:90:9b:77:3d:
                    61:36:1c:8d:ae:05:92:f7:9d:81:27:d8:65:07:1d:
                    9d:2b:b6:f9:90:07:02:49:1a:c3:60:12:5e:a3:e1:
                    a5:d7:fd:b5:fc:b4:0f:d2:cd:00:a8:fe:f4:7b:fc:
                    7e:82:4e:c7:b8:ed:99:2f:cc:b5:6c:b1:c9:39:58:
                    e9:d9:59:de:58:71:41:4a:02:e2:b5:35:f1:57:34:
                    42:4b:b9:7d:c0:e3:3e:11:04:ab:73:d2:17:47:49:
                    3e:23:a9:9a:34:62:f7:47:08:20:ab:3a:2f:11:9f:
                    6a:d3:25:66:7c:18:96:d3:42:68:91:22:25:58:fc:
                    01:3b:c2:74:f8:03:93:ba:e8:6a:b7:6e:52:0e:ef:
                    e6:c4:2b:03:65:af:8a:ba:ec:90:7b:b3:78:c7:c4:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:49:4C:BB:35:A3:47:B0:1C:72:6F:D4:FB:19:9A:F6:15:B2:55:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/c5390e88-e601-33a8-a34d-e2501b349cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:71:93:bf:f9:c9:72:0c:aa:72:76:75:5c:18:4f:1c:9d:ba:
         e4:ac:6d:2d:00:b8:1a:b9:f0:2e:ba:af:76:db:1e:c6:1c:8d:
         b1:76:86:c9:de:87:10:20:89:15:74:c4:f9:89:d2:c2:ce:1e:
         28:f9:03:e6:bd:69:2c:11:a0:3e:f2:bd:3f:1e:8b:27:6b:35:
         9e:4b:62:a6:0b:d0:09:ab:d8:05:33:9c:8d:a7:e7:d1:34:5d:
         65:fa:f6:34:8e:de:51:39:2f:c2:cf:ab:37:20:11:75:86:fb:
         a7:ce:89:16:99:f6:f5:ea:a2:f8:b6:e9:d6:17:da:2a:90:66:
         99:5d:db:f7:18:57:90:0f:62:7d:15:95:b7:09:90:78:b0:4e:
         e0:9a:74:50:ec:e8:4b:c6:a5:7d:b5:e9:5b:e0:af:4f:d6:7d:
         7d:0f:c1:2a:ec:1c:65:1e:ad:30:b5:37:9c:96:c1:5d:8d:37:
         86:0d:24:6c:79:7f:8c:aa:c5:4f:ff:cb:7b:f0:d0:7c:17:df:
         ca:b0:ee:3a:fe:03:65:c9:1d:1b:17:0d:ba:8a:43:94:d0:cb:
         13:15:c6:29:a5:db:8b:a3:95:27:f4:d7:3e:e4:23:29:90:f8:
         09:41:bd:4d:ab:b2:1d:52:db:6d:a2:3b:15:39:d0:1c:7f:4a:
         85:b9:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:35:10 2025 by rpki-client