Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
File:                     15d5ec7e-044b-30c5-90d8-02693f5c0795.roa (raw, json)
Hash identifier:          O2pZR8libHKJB9WXHZZNi8I1d7VnG8bNMWHMKVc0rZ4=
Subject key identifier:   EC:2E:56:FE:74:0A:EB:7D:E5:DE:91:73:21:B4:1E:A8:C1:A9:3D:08
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584AC2E0DCF028301C8C02F5F680
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        76.11.0.0/17 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:dc:f0:28:30:1c:8c:02:f5:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=36ed5903-94b5-43af-9af6-fea0393026cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:b3:62:51:fe:a5:d4:2c:49:fc:aa:fc:e4:
                    b4:91:75:5e:de:02:f8:e4:f3:c6:88:cd:5d:9f:66:
                    de:f2:a7:d4:14:17:48:f8:eb:67:1c:49:8f:97:f8:
                    60:4e:2b:b2:ad:65:b5:ce:d6:15:c5:1e:1b:19:34:
                    30:8e:e6:4d:c5:50:c5:89:2f:18:4c:21:f2:e9:d9:
                    8b:c6:1e:ac:a1:c4:6e:b2:ec:a1:cf:c5:47:3b:b3:
                    63:eb:de:58:2c:f7:ad:23:d7:da:bf:20:e3:95:ed:
                    09:8f:ce:cc:4c:0d:5a:f2:51:86:9f:2f:93:a3:fa:
                    cf:72:c9:49:2a:36:7e:88:50:e7:b6:cd:15:5c:21:
                    2c:83:63:30:91:75:4d:df:52:ae:87:6f:08:42:1a:
                    67:fc:22:bd:3f:78:d8:da:06:a6:f3:a5:14:5c:81:
                    87:dd:9f:ab:fa:d5:e8:be:e1:f9:75:33:be:43:c3:
                    95:aa:a8:d8:c4:eb:64:9b:11:bc:db:7a:7a:0a:4c:
                    60:35:ac:2c:40:d9:4c:b3:b1:14:6e:07:f1:cc:1f:
                    6c:65:e4:7e:1c:88:2e:91:5c:73:53:79:4e:e4:cf:
                    93:d3:71:bb:fa:13:a6:ff:62:ba:f7:9a:91:2d:f9:
                    fe:e3:0c:5b:1b:cb:07:95:b0:19:52:cf:73:4a:5a:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2E:56:FE:74:0A:EB:7D:E5:DE:91:73:21:B4:1E:A8:C1:A9:3D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:82:2c:e6:c3:fa:7f:b0:c3:81:7a:45:1c:8a:94:49:df:
         fa:63:31:ce:f4:6a:73:2e:8a:f9:11:9b:0d:8a:fe:48:fa:85:
         36:b6:37:e4:a7:8d:4f:c0:2e:15:91:68:31:05:96:8a:41:ae:
         69:61:2d:ba:56:b9:b0:bf:36:fb:93:ee:47:c0:6c:19:7d:15:
         c4:19:c7:2a:da:8d:74:ba:15:b5:b4:14:f4:48:45:0f:82:c2:
         d1:e4:ef:ae:cb:9e:17:4e:ec:38:ab:65:5a:6e:aa:79:b8:ff:
         d9:e3:81:b0:c3:bb:7f:3f:f1:48:83:88:78:96:3e:8c:cb:b1:
         d1:53:6a:d2:4e:6a:21:cc:d7:c1:7c:31:d3:7c:14:b1:f0:23:
         3e:d2:27:a9:3f:b9:41:25:38:74:47:d2:72:0f:96:9e:63:59:
         f6:9a:5e:86:04:e0:18:3d:cb:68:83:db:e3:ef:d7:c5:ae:6e:
         cc:04:b2:ce:86:d8:83:9d:8e:d2:26:71:9f:7a:5e:1e:57:bf:
         54:23:3b:9f:27:5d:b5:5b:71:34:a9:60:2b:e0:58:41:bb:86:
         8a:c1:14:f9:49:bc:78:c8:6f:a0:e0:74:3a:bc:74:c7:84:fa:
         82:01:ef:71:b5:c8:d5:68:a3:e3:8f:9f:bf:26:25:a4:2a:f7:
         1f:a3:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:13:47 2025 by rpki-client