Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
File:                     678c2786-4349-3a13-8476-3b89495cae56.roa (raw, json)
Hash identifier:          gMVWBds6hhb3bc6hZUDC/8mdHJYZhXdpyuEI4/iHqt0=
Subject key identifier:   F9:00:0B:FB:BA:21:4C:CE:CA:46:FD:8C:98:23:43:D3:29:44:BC:C5
Certificate issuer:       /CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
Certificate serial:       010D0C9F4328584A5335AB7EECED9A59C2A27180
Authority key identifier: 05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        208.76.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:ab:7e:ec:ed:9a:59:c2:a2:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=c5d0c3c8-cab5-4422-80b8-86cc39be3caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:de:86:67:38:a0:41:fd:52:e0:47:36:e0:
                    28:f0:fe:9b:1f:19:80:c6:b0:0f:6e:dc:c2:48:01:
                    b9:5d:44:ff:99:66:98:b5:2a:97:ec:13:99:1a:cf:
                    71:bb:5f:a9:e5:4e:2c:46:f1:6e:4c:a0:f2:e6:70:
                    40:aa:c7:74:95:c4:12:71:2d:f6:f3:99:93:95:19:
                    94:2e:6c:60:13:99:9e:19:73:9d:1a:17:74:6c:64:
                    3a:ba:ae:ff:e5:11:a7:f4:54:1b:80:a2:c4:15:cc:
                    46:84:a6:bc:b3:a0:d3:f7:e7:6b:af:d7:94:8d:64:
                    fc:2b:43:c5:85:e8:33:a3:79:f9:dc:67:5a:b5:cc:
                    7f:7e:94:2a:5c:62:9f:73:32:3a:ed:66:0c:63:75:
                    c3:06:ae:75:ac:94:3d:98:a3:e9:67:42:5c:ac:df:
                    5c:7b:77:6e:f6:b8:e8:c8:b1:ff:69:87:00:d1:f2:
                    af:1a:a6:b3:5d:21:47:9c:4b:a2:06:4f:ae:98:4a:
                    59:0a:e2:58:70:1b:57:01:87:74:e0:8d:47:81:5f:
                    21:72:a6:5f:25:05:77:69:25:50:d0:08:fc:87:c3:
                    7d:7c:b5:43:b1:b6:a5:31:09:3a:7e:50:ae:68:36:
                    6f:81:b5:fa:82:4b:28:5d:a5:ed:a8:ba:67:65:ce:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:0B:FB:BA:21:4C:CE:CA:46:FD:8C:98:23:43:D3:29:44:BC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl

            X509v3 Authority Key Identifier:
                keyid:05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:11:07:04:05:14:0b:71:9f:0d:3d:e4:22:66:40:bb:37:
         db:1c:ab:1b:c8:e3:73:36:39:8c:c3:c7:b3:bb:30:70:9a:50:
         02:67:99:2b:e7:b4:51:1b:43:a5:6a:af:b6:6d:1c:8f:d7:d9:
         a4:6d:23:24:53:b7:9b:dc:7d:df:12:99:13:7a:11:fd:50:17:
         07:cd:a1:cb:fc:06:03:44:c2:f2:c6:5c:fd:b6:a7:b9:09:61:
         b7:18:0d:1c:2b:36:57:17:e0:b7:1a:c8:7b:2f:02:60:36:cd:
         5b:18:83:c7:ff:7e:1f:0f:fb:dd:64:69:4e:f1:1a:5f:e2:ed:
         c4:90:3e:c0:6e:9e:e7:ca:d0:d4:27:ae:8f:2b:98:07:ec:70:
         21:a4:4d:3e:0f:ad:69:41:29:e9:91:25:13:df:af:86:7f:7b:
         d0:b4:1e:ad:3e:de:c1:d9:de:6d:fc:6f:c7:43:de:ee:a4:9f:
         b2:a4:5d:65:f4:f3:7e:56:90:47:28:a6:e9:2c:a3:a3:d2:41:
         45:52:26:58:41:98:3d:15:7e:23:b5:bf:0f:a3:80:52:9b:55:
         0f:da:e5:e0:36:fc:c0:7b:89:f0:f8:01:ae:bf:8f:f7:7b:9c:
         d2:42:b0:e5:f1:a5:3b:79:08:69:4f:25:77:30:bf:b2:1d:e2:
         62:e3:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:02:44 2025 by rpki-client