Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ebc741bd-bdd6-3adb-96c7-39d32a5e0c9b.roa
File:                     ebc741bd-bdd6-3adb-96c7-39d32a5e0c9b.roa (raw, json)
Hash identifier:          lcV4rW5bjC4q08O4QwldkTM6COWcpFqi8qytGW36nus=
Subject key identifier:   44:50:C7:1A:03:55:D3:B7:E0:B6:F1:D6:74:30:24:14:8D:CF:3C:C5
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584AC87657C8BFEA2626A4A10680
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ebc741bd-bdd6-3adb-96c7-39d32a5e0c9b.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     11693
IP address blocks:        66.216.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:57:c8:bf:ea:26:26:a4:a1:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=460c9c30-e3e4-41b9-9f3f-bdda8513f111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:c8:c9:f5:f5:09:1c:f2:08:9a:87:04:b1:
                    6b:a0:00:65:de:5d:e8:6a:0e:e1:a4:10:72:9c:5f:
                    8d:2c:14:dc:0e:17:a8:a8:ac:32:b3:73:b0:76:9b:
                    c0:69:90:66:3b:c2:61:e1:42:d5:57:96:91:05:29:
                    14:39:db:45:36:8a:df:9d:74:e1:01:f3:5c:6e:53:
                    6b:60:21:7c:34:70:5b:5d:51:5e:46:b2:47:68:de:
                    ca:d9:f0:bd:b2:2e:cf:8d:d3:7c:e2:b3:95:b0:c7:
                    0a:0c:d0:c8:f6:2d:44:cf:6d:86:40:57:57:82:b1:
                    60:41:45:10:a6:db:69:53:d4:b0:47:17:db:ae:81:
                    74:d5:cd:fb:4e:d5:8a:28:6e:21:08:9a:3c:aa:61:
                    51:9a:94:27:e9:be:a5:9f:97:2e:5b:63:a4:5f:c6:
                    7e:95:7e:b2:0c:1c:08:df:d0:12:65:81:ab:5c:86:
                    1b:1a:19:9d:72:8f:4f:93:2a:26:7f:7d:14:19:57:
                    30:5c:89:11:a4:af:85:be:45:9d:81:bb:6d:9b:8a:
                    34:97:4b:fe:98:9d:6e:61:8b:b2:08:17:e9:5b:56:
                    86:e0:e0:fa:01:07:e9:6a:0c:6e:9f:8c:ea:dc:fc:
                    a6:3c:a6:61:d4:79:c4:98:10:71:19:65:e9:0c:0e:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:C7:1A:03:55:D3:B7:E0:B6:F1:D6:74:30:24:14:8D:CF:3C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ebc741bd-bdd6-3adb-96c7-39d32a5e0c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:30:67:ba:eb:89:00:b0:47:e2:62:98:51:39:ec:94:19:
         f1:c1:81:47:82:3a:6a:09:b4:4b:60:99:e0:75:36:f8:6f:b3:
         cf:27:91:bc:24:75:cf:af:70:61:16:f1:ad:fa:f4:b8:09:f4:
         4c:8d:ed:6a:86:33:67:17:2a:a2:9d:1d:bc:1b:e7:e2:8e:62:
         dc:0c:bd:fd:f6:2e:b6:e9:cb:eb:11:71:eb:de:b0:e5:54:b1:
         39:0c:57:c8:a8:3e:64:3b:9c:94:60:f3:bf:a4:2f:73:99:f2:
         0f:58:db:7f:f0:dd:67:11:85:63:5c:f7:5b:cf:f6:65:08:ba:
         6b:0f:b6:b8:70:63:a9:03:d5:e2:ca:96:3a:85:2d:c0:1c:3c:
         dc:fa:87:f8:90:61:ed:39:62:37:0a:57:09:2b:2e:a8:43:5d:
         9e:02:81:7b:2c:e1:d9:b8:02:08:0d:64:42:97:fc:37:b4:86:
         11:69:7d:76:56:17:13:f0:82:d9:fa:01:29:e7:e2:2b:4d:9a:
         78:85:75:90:d7:fc:88:81:de:e8:00:57:55:8f:ca:b4:1d:c7:
         96:83:64:8c:a9:b5:d2:a1:84:e7:d4:87:a5:3a:82:5a:e9:30:
         20:90:76:46:20:30:0b:ad:ef:6e:b5:fb:db:b0:91:e9:18:90:
         6e:ec:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:16:16 2025 by rpki-client