Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa
File:                     eb4fb844-1dce-32b3-94cb-1460c072d21d.roa (raw, json)
Hash identifier:          m5qlZimdh0ND9D/6lPzbp6Y5SUsa3LyBxSww2qwW6Dc=
Subject key identifier:   82:4E:5B:D3:A9:E2:4D:7B:D3:E7:FF:BE:DC:FF:C3:EC:09:D2:14:1D
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584AC2E0F1337E0EFC8FD4176050
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     10929
IP address blocks:        204.147.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f1:33:7e:0e:fc:8f:d4:17:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=d3bd495a-392e-42ad-9d24-0e668007a1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:d6:d6:64:39:78:0a:df:d1:24:ea:8b:1d:
                    d0:9f:d3:c4:40:7b:c7:c1:fd:fb:a8:5d:a5:8d:45:
                    c1:41:5f:57:87:00:f7:88:82:91:9e:54:dd:be:58:
                    98:9e:48:ad:a0:e3:80:be:30:2f:09:74:7f:13:23:
                    07:8b:a4:e9:9e:b6:f7:51:c3:bd:13:5f:86:09:7e:
                    7b:68:36:18:be:de:83:bd:c1:db:2a:2f:85:b6:a3:
                    cb:06:d8:6a:ad:6b:19:58:45:28:54:66:51:3a:f9:
                    2b:39:c4:12:4f:31:af:65:9f:3d:fb:e5:ec:66:33:
                    5d:84:38:a3:68:9d:db:bb:a4:9c:93:78:e2:40:8f:
                    d8:59:f6:10:c9:a1:5f:3a:a8:f7:be:10:57:36:c4:
                    20:e7:d4:f0:49:bc:22:2e:68:6d:46:74:c9:f1:63:
                    69:8e:8b:9c:16:f7:9d:79:de:0e:6f:06:b0:1b:bb:
                    ea:ea:16:49:12:00:a7:02:b4:74:ad:20:e0:a8:5a:
                    96:d3:3f:9a:24:d6:f7:4f:ba:4e:2b:69:f7:81:9d:
                    db:d5:48:43:a4:c1:12:ac:9f:2b:68:4c:68:1f:e6:
                    d4:5a:66:de:22:2a:d6:55:2e:a0:07:dc:c9:3e:a7:
                    e3:54:9b:ee:54:98:8a:9f:4f:7f:4e:e0:ff:0b:12:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4E:5B:D3:A9:E2:4D:7B:D3:E7:FF:BE:DC:FF:C3:EC:09:D2:14:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:19:54:e5:dc:cb:76:56:1b:a4:86:9e:2c:f6:14:5f:9a:
         7c:6f:0a:7d:28:cf:91:be:09:bd:3f:0c:bb:48:5f:7c:3f:8b:
         4e:01:c5:0b:2e:d9:17:b6:b1:67:e0:c3:d7:4b:f0:a7:59:36:
         1e:75:e5:75:3d:42:2c:aa:0b:fe:ae:89:2a:0c:34:51:c4:e7:
         15:07:d8:da:9b:41:f3:8a:85:cd:17:76:a3:93:25:0d:66:3e:
         30:ec:11:e1:03:10:8d:37:9a:71:69:4b:92:af:5a:d3:a7:86:
         9a:59:64:70:70:c4:b5:2c:f1:1f:e1:65:26:ac:52:0c:12:9f:
         b8:b6:ca:92:35:62:93:0a:47:0e:ba:64:14:9c:2e:a0:4b:5f:
         30:0d:37:63:a7:1f:e8:10:0b:51:39:52:4b:f5:a7:21:f7:39:
         88:c6:3e:83:4d:47:74:8b:69:e7:ea:ce:22:5d:d6:45:1c:6e:
         53:5f:f6:4d:31:0d:36:55:24:8f:92:83:a2:84:d9:8a:6e:61:
         8a:3f:b5:04:29:6c:fa:d3:ed:a3:3a:1c:64:54:5d:00:9f:63:
         1c:6b:b0:73:9d:bb:51:f4:79:87:c6:de:93:08:c6:60:b1:3a:
         c5:4a:bf:af:62:48:24:9f:78:ff:56:58:a2:9b:8d:b5:b6:88:
         cd:4b:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:15:39 2025 by rpki-client