Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa
File:                     86ce4399-1b72-390d-8570-47106748f50a.roa (raw, json)
Hash identifier:          F+j0NKPzXJog346ed35oW2EniCp7Da4tkqmb6x4DVFw=
Subject key identifier:   70:2C:26:0E:82:37:7B:14:9B:59:5F:07:2F:37:50:56:86:5A:D1:B6
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A14655CFBF6B039D07D20FA80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     9009
IP address blocks:        198.145.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5c:fb:f6:b0:39:d0:7d:20:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=c4286386-c25d-4a75-8180-f8e359d53884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:7e:77:63:4d:15:bc:dc:07:03:b6:af:eb:
                    67:25:6b:7c:84:9c:e1:a8:94:73:88:09:bd:56:da:
                    de:17:c4:31:14:9d:fd:e8:32:5a:7d:3d:ae:04:65:
                    9a:b3:af:e2:77:c7:ea:42:4d:e8:d9:16:9b:1f:2c:
                    c7:0e:3f:6f:94:89:2d:69:e0:a2:3a:5f:83:22:b6:
                    5f:4a:d2:57:e9:35:91:90:0a:cc:19:77:23:cc:ee:
                    89:ed:2e:30:7a:10:20:3e:c0:f8:d6:cc:7e:d5:4f:
                    1a:dc:ea:78:35:c4:ba:fe:90:fe:e7:96:41:b3:c2:
                    c6:ab:e0:18:8c:b5:7e:95:29:95:a8:6b:24:b9:56:
                    75:7b:05:08:1a:08:d5:cb:06:8c:8b:cc:64:61:3e:
                    14:e5:11:8f:6c:ee:04:5f:b9:e7:85:27:20:58:19:
                    9e:6a:9b:a4:00:77:50:c6:42:c8:a0:5a:c8:02:d6:
                    fc:72:2d:a8:ed:09:99:39:80:0f:bd:09:50:65:ec:
                    92:36:57:7c:d5:a4:36:55:c5:3d:77:d7:7c:b6:90:
                    cd:35:49:28:9f:e0:01:6b:82:8c:5d:6a:df:e2:69:
                    b3:99:a1:7f:6f:a9:08:aa:db:17:23:73:0b:0e:b2:
                    09:25:fd:25:37:95:b6:b7:51:48:38:f7:ea:b0:c8:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:26:0E:82:37:7B:14:9B:59:5F:07:2F:37:50:56:86:5A:D1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:fa:d7:35:a5:9a:7b:24:af:c1:b5:50:d1:5b:ef:63:dd:85:
         10:25:fe:67:2e:57:02:de:33:a4:47:08:e4:9b:6a:d3:e3:50:
         27:63:c8:3c:4b:43:06:6c:c8:e6:66:0e:9f:98:4c:87:60:c9:
         ca:66:39:7e:2d:65:ca:c5:89:49:7a:9f:fa:fd:42:e3:57:93:
         e5:48:23:49:78:05:d5:3e:e8:31:66:6e:24:1e:69:a9:85:77:
         a3:73:2b:59:5e:6a:f5:8b:54:cd:80:bb:3a:1e:61:44:89:68:
         68:61:22:87:5b:dc:46:e6:b6:24:86:7a:31:7b:d8:af:e7:20:
         18:64:b1:b6:9d:82:94:40:67:46:17:6b:d9:e2:ca:29:1b:03:
         b3:97:e3:fd:3e:a8:a4:9c:0b:6c:dd:d4:ad:72:c6:14:32:82:
         9f:28:46:68:30:b7:b9:7d:7a:45:1d:7b:b6:a4:a5:a4:71:c2:
         3d:1c:5e:49:ef:f4:85:22:f6:6b:b5:09:27:ec:41:89:0a:47:
         69:d6:1d:3c:80:33:ae:c5:9e:99:3b:63:bb:72:7c:7b:2f:86:
         94:6a:e1:0d:cd:7b:7f:f8:26:eb:5e:7d:ba:11:ae:18:77:df:
         1d:9e:16:68:92:e9:96:23:fc:4b:c2:8b:bd:2e:ea:88:fe:29:
         bc:86:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:12:11 2025 by rpki-client