Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/6422398f-10a6-3a44-bafa-ba098017c7c0.roa
File:                     6422398f-10a6-3a44-bafa-ba098017c7c0.roa (raw, json)
Hash identifier:          cWsm+ZlS5lGTVCH916wo8aaLgd0f5wLXpbcgtyDQgqk=
Subject key identifier:   82:B7:BA:21:69:E9:CB:A9:22:6D:C9:D6:64:3D:3C:A5:4C:2B:83:37
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858498CFF24B8D87460B30EA04800
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/6422398f-10a6-3a44-bafa-ba098017c7c0.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     27221
IP address blocks:        76.164.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:24:b8:d8:74:60:b3:0e:a0:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=2e25f3d4-d5b2-4413-aa04-846310853390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:7a:2a:1c:d1:6e:e1:45:13:a0:85:a3:4f:
                    cb:dc:7a:a5:d0:e4:11:dc:13:ee:3e:6e:bc:2f:ca:
                    76:4f:f9:77:a2:3c:90:7e:0c:0f:41:e7:92:f9:02:
                    1d:f1:a3:47:12:40:a9:8c:25:b6:a5:f6:4b:d3:a3:
                    14:03:ff:0b:cc:96:ca:f5:47:d4:fb:a6:8f:2e:c5:
                    14:8d:c0:0c:9f:38:6b:e5:e7:ca:d8:95:c8:b2:d9:
                    1e:64:09:41:58:a6:f6:e4:56:48:35:74:85:09:91:
                    a2:6d:ec:e1:f8:f8:eb:1c:25:14:d8:37:8d:93:0a:
                    80:a2:3b:d4:20:3b:38:38:08:5b:ea:90:0b:15:4f:
                    59:ff:d8:53:f0:c7:0b:bc:85:7b:fe:4f:60:9e:13:
                    f0:a2:81:f7:78:11:3a:b8:47:b4:44:2b:7d:e1:e8:
                    ba:ba:53:e5:d5:7f:be:a6:d0:7a:1f:3a:c9:07:04:
                    23:25:a7:52:97:28:26:5d:34:0c:d6:f5:92:47:0f:
                    96:c5:af:26:8a:39:61:e7:fc:51:4c:41:f1:e4:53:
                    d4:4f:88:4c:f8:00:61:e5:3f:51:0f:58:38:ee:b3:
                    a4:3e:16:cb:ca:8f:93:0d:0d:2c:24:83:ff:69:7f:
                    e3:de:cc:c7:be:f2:68:7c:86:89:09:8f:6c:f7:9e:
                    1d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B7:BA:21:69:E9:CB:A9:22:6D:C9:D6:64:3D:3C:A5:4C:2B:83:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/6422398f-10a6-3a44-bafa-ba098017c7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:85:b0:70:1c:63:f0:f7:fd:de:d6:a2:d6:f9:b7:e3:98:76:
         a5:7c:f7:08:5c:93:f1:07:8e:c6:7e:9f:10:cc:a5:d7:12:09:
         a1:ec:25:44:96:68:ca:ed:12:bc:f7:e7:03:4f:e8:ad:b1:f5:
         f4:e6:84:c3:29:59:a8:e5:90:65:dc:ce:a4:ba:8b:be:4e:63:
         dc:7f:e0:d7:eb:35:d2:57:00:68:d3:28:72:94:1c:f7:5c:b8:
         a1:5b:a2:e6:93:d8:4f:2f:f7:fd:74:89:6f:78:f7:c2:4d:95:
         b6:ed:87:b9:66:f6:46:b7:75:3e:6a:1b:81:84:9e:17:80:a9:
         23:13:3d:20:a1:50:35:d7:a1:4c:42:51:81:8c:f0:90:82:6d:
         e3:84:38:7d:44:57:4b:d1:cc:5d:0d:6e:18:ce:71:78:ba:67:
         be:10:63:9b:d5:0c:55:e0:3b:59:6a:3d:93:20:74:1b:da:47:
         25:58:88:d5:e1:24:c7:9e:d6:58:02:86:f6:a7:a3:bc:7d:7c:
         23:4f:7b:d3:5b:bf:f8:f9:e3:f0:2f:aa:3b:b5:04:8f:76:a5:
         d2:87:d5:3f:d5:87:e5:ef:63:8f:bd:86:6f:2f:97:62:ab:71:
         19:74:a1:87:af:58:7b:d2:6f:35:63:1d:44:6b:8a:09:45:0c:
         7b:3f:c8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:26:01 2025 by rpki-client