Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76ccaced-e9ce-3290-8eeb-be917b098cc3.roa
File:                     76ccaced-e9ce-3290-8eeb-be917b098cc3.roa (raw, json)
Hash identifier:          uCW1Jvh+QDRA6aYAPElPslotUm6IhYfML4WTUW5XC2A=
Subject key identifier:   1B:DE:C6:CE:85:73:23:5E:73:37:02:12:0C:EF:40:45:1C:59:0B:D7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849F87A78F655534C9ECF01E7C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76ccaced-e9ce-3290-8eeb-be917b098cc3.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     7029
IP address blocks:        75.153.84.0/22 maxlen: 22
                          75.153.92.0/22 maxlen: 22
                          75.153.100.0/22 maxlen: 22
                          75.153.108.0/22 maxlen: 22
                          75.153.116.0/22 maxlen: 22
                          75.153.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:78:f6:55:53:4c:9e:cf:01:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=ee37271f-45f7-480e-8009-e6e2a098863c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:57:5a:70:1f:00:3d:91:fc:d4:b0:53:01:
                    2f:f8:17:87:c6:26:08:91:e6:a6:b9:43:28:92:a7:
                    75:f5:06:cc:09:0b:94:b6:8f:be:bb:fd:1e:61:b2:
                    84:b0:16:a2:0a:af:d6:46:aa:a4:61:49:a9:d9:17:
                    d8:2a:2b:25:c1:26:f5:39:17:d0:98:fc:f7:24:e6:
                    20:a6:71:ea:c4:db:02:46:4a:4f:1f:8f:4c:33:e1:
                    d6:8b:f1:dd:5e:1e:54:cd:4f:5c:37:6a:48:c0:b0:
                    50:ce:b5:2d:f1:f7:5f:f1:77:5c:a1:c3:a8:df:fb:
                    8a:04:a0:14:e1:84:be:b8:91:b9:5f:dc:45:fa:01:
                    5e:af:99:0c:12:54:5d:dd:f4:09:8f:07:fd:f6:d3:
                    81:e8:a2:7c:91:aa:36:cc:6f:13:89:c6:46:2f:26:
                    51:da:d8:15:b8:05:94:5d:93:2e:c8:dc:5e:6a:a5:
                    b9:f2:b6:5f:62:95:3a:b8:22:7f:bd:fa:2d:9b:6a:
                    21:c7:a7:f9:33:5e:86:99:1e:74:e8:d7:65:66:de:
                    df:42:ce:e6:95:84:82:89:e0:a2:fb:41:56:26:4c:
                    5e:1e:1c:3b:1b:16:74:a9:da:12:08:73:80:12:cb:
                    98:10:93:c1:9b:f0:5f:aa:fe:f0:31:84:75:a1:a5:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:C6:CE:85:73:23:5E:73:37:02:12:0C:EF:40:45:1C:59:0B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/76ccaced-e9ce-3290-8eeb-be917b098cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.153.84.0/22
                  75.153.92.0/22
                  75.153.100.0/22
                  75.153.108.0/22
                  75.153.116.0/22
                  75.153.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:ce:eb:87:d4:87:63:ae:5d:5a:7f:80:dc:3b:61:55:30:
         17:8f:52:74:8e:11:f4:ed:ec:c9:25:57:96:b3:78:0e:15:44:
         50:e0:2a:41:68:a0:5b:a8:57:a9:81:11:38:13:dd:8a:64:6c:
         5b:2d:14:40:95:69:85:aa:6e:44:61:7f:51:de:0b:20:2a:39:
         4b:f1:41:f3:7c:56:c8:71:13:64:2a:ce:00:68:04:b5:ae:9d:
         85:c5:05:62:cb:4d:d7:3f:da:fe:e7:30:ac:63:ed:4b:c6:6c:
         48:f2:6d:b4:83:58:c0:5e:9f:c4:93:8a:54:6a:7e:0e:e1:8f:
         cf:92:cb:38:9d:2e:8f:fb:aa:03:c3:39:3d:a2:0b:46:62:24:
         5d:fb:71:37:87:45:02:f7:1d:89:22:5e:14:06:a3:f2:5e:81:
         d2:06:b2:a6:3c:b5:37:13:45:9d:37:4e:fc:c9:22:54:84:5c:
         96:de:f6:65:ce:01:fe:3f:c2:9d:3f:ec:62:e9:b8:d8:46:55:
         bb:02:a4:c6:07:f8:0d:2a:bf:12:81:1a:6c:43:93:26:28:41:
         a7:b4:d8:5a:ce:91:00:a3:f4:0b:18:0a:83:37:71:92:67:c8:
         6d:05:b7:37:bb:ce:2e:8e:c3:64:9e:77:8e:b1:00:7b:67:4d:
         56:42:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:57:18 2025 by rpki-client