Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/39feee70-b402-30b7-9fb6-31a2ae132ae6.roa
File:                     39feee70-b402-30b7-9fb6-31a2ae132ae6.roa (raw, json)
Hash identifier:          iwG5lxxl8G9/KliVBqMB7+tlt4axnjwf18LHuvgXRWw=
Subject key identifier:   AF:78:C5:3D:64:05:B5:AF:6F:B5:67:B7:EF:DC:23:05:39:29:15:52
Certificate issuer:       /CN=e2c44d35-830c-4692-bbac-6503c8123d05
Certificate serial:       010D0C9F4328584A698B242E4DF3AFF135BFE340
Authority key identifier: DF:21:99:84:FC:74:D5:04:C4:B3:6B:02:F6:94:9C:E8:7F:52:FF:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/39feee70-b402-30b7-9fb6-31a2ae132ae6.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     19925
IP address blocks:        142.76.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/e2c44d35-830c-4692-bbac-6503c8123d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/e2c44d35-830c-4692-bbac-6503c8123d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:24:2e:4d:f3:af:f1:35:bf:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c44d35-830c-4692-bbac-6503c8123d05
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=269af7fb-5fe5-4a50-b3d2-077f42511d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:4c:f1:f3:05:2f:bb:1c:e8:d0:c7:a1:5c:
                    e7:8c:95:23:b9:9f:eb:36:e5:11:13:3b:18:02:1b:
                    da:6d:ce:1e:ce:cc:00:8f:48:55:bb:f9:b2:d1:b2:
                    ab:4a:f0:d7:7b:40:30:48:d6:16:8d:1b:a9:05:bc:
                    33:3c:8e:08:bc:f9:ee:50:91:43:67:83:ea:a6:12:
                    df:8f:85:79:27:db:25:13:be:26:09:8a:14:f3:f8:
                    1d:0b:1c:68:40:c0:35:0c:3a:cf:da:1d:8e:83:68:
                    c8:83:77:96:2c:4a:92:3b:e2:4b:c9:b3:23:6f:7a:
                    df:2c:94:f0:70:aa:50:79:7e:aa:f3:7c:3a:a9:5a:
                    e3:c8:5f:7e:c2:90:4e:1b:2f:50:23:e8:90:fc:1c:
                    3b:ff:c6:29:5a:69:2e:9b:17:2b:95:94:7b:39:65:
                    85:34:1b:68:2f:b3:a9:45:d8:7b:f7:32:cc:6c:4f:
                    3e:79:14:a8:76:d5:f9:b0:47:0c:46:3f:15:52:06:
                    03:0d:6c:08:65:ee:66:b6:10:52:fc:fe:17:c6:fe:
                    9f:7a:5f:d0:75:e0:03:3e:75:21:e9:1e:03:fc:73:
                    86:ae:62:f6:10:a0:bd:4d:5c:03:c3:de:f3:85:c2:
                    44:7a:32:84:cf:ad:0a:1e:40:ee:52:14:43:1e:a9:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:78:C5:3D:64:05:B5:AF:6F:B5:67:B7:EF:DC:23:05:39:29:15:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/39feee70-b402-30b7-9fb6-31a2ae132ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05/e2c44d35-830c-4692-bbac-6503c8123d05.crl

            X509v3 Authority Key Identifier:
                keyid:DF:21:99:84:FC:74:D5:04:C4:B3:6B:02:F6:94:9C:E8:7F:52:FF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e2c44d35-830c-4692-bbac-6503c8123d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.76.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:15:b4:bb:eb:0b:ee:84:4d:78:eb:e5:10:fa:8a:69:bd:
         89:25:58:5f:70:ae:4e:95:a1:00:f3:be:a5:bc:cf:4c:55:42:
         40:2a:ff:f0:76:4d:c2:b4:ca:e1:23:3a:d1:56:d9:d5:40:2c:
         c0:e6:48:85:38:5a:8c:b1:eb:bd:b9:0a:f4:70:8b:6e:a8:e6:
         87:5e:1b:b8:63:57:c7:05:fd:d3:f0:e8:13:a1:48:00:b1:c3:
         de:2d:b5:e8:ee:c7:ba:fe:cf:e6:7a:e0:d9:8f:7c:bf:70:cc:
         c9:d9:bc:2c:4b:c3:b5:50:1f:f2:3b:ed:01:0f:8f:bc:b7:8f:
         06:93:48:1d:fa:cd:cd:37:73:34:7f:3d:a0:9d:41:e3:a5:d6:
         fb:13:4a:e8:7f:5f:fc:9c:87:a0:98:50:ae:1e:0a:06:7a:ba:
         ae:87:c8:82:c2:6d:c3:56:45:14:bf:a3:eb:c0:5b:7e:f0:55:
         90:bd:57:66:b9:b5:23:ac:d9:cf:58:c8:99:c5:66:a2:4c:54:
         1c:fb:85:da:8b:3d:77:59:a6:9d:45:1e:ff:ad:87:c4:48:a1:
         fb:3d:64:bf:ef:e6:5b:17:a5:c9:ad:cd:b6:42:ec:4a:01:24:
         07:3f:b3:21:e4:63:53:d1:85:b2:60:54:14:da:9e:e4:d7:2c:
         c8:c1:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:19:18 2025 by rpki-client