Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/914c03f5-6d1e-3868-a9d0-50e78788ef42.roa
File:                     914c03f5-6d1e-3868-a9d0-50e78788ef42.roa (raw, json)
Hash identifier:          +qyqav4Izpq151Tt7ieeeCWxbctFr2bi/oOyFm1Ifn4=
Subject key identifier:   CC:DF:EB:BF:A1:64:D1:DF:BE:2D:A7:F4:B9:6F:87:7D:54:7C:B1:B3
Certificate issuer:       /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial:       010D0C9F4328584A3A158AE10254771360F243A8
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/914c03f5-6d1e-3868-a9d0-50e78788ef42.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     7784
IP address blocks:        76.76.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8a:e1:02:54:77:13:60:f2:43:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=a5800ef9-a235-403d-b1fd-9903656cbd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:21:20:d5:55:0c:73:8d:f7:5c:90:f1:12:
                    45:56:af:e2:b4:54:8a:0c:d0:9d:91:00:9d:d3:43:
                    a8:5a:f8:9b:5d:69:f3:27:65:1a:c0:9b:0c:3f:83:
                    e3:f4:da:08:56:0c:c4:0f:db:0e:b7:12:5e:c8:3e:
                    b7:ad:66:be:71:ba:e9:f7:f3:06:3a:d2:b4:87:f3:
                    3a:fc:50:e5:63:bd:ff:5f:97:00:36:4b:35:e1:66:
                    e0:f5:78:0e:4e:83:1a:de:8b:9e:d9:5c:40:98:db:
                    11:13:42:e9:0d:59:b8:7f:d8:c5:af:b2:e7:f1:60:
                    7b:7e:79:7e:ce:92:9f:c9:6b:c4:30:32:51:bd:cc:
                    79:24:d5:f8:28:ca:1c:64:ce:8f:a6:3f:db:45:af:
                    32:3a:f8:ed:bd:59:1c:a3:fe:75:d2:38:32:d4:12:
                    7c:a0:c0:42:aa:d8:0e:8a:d3:e8:ce:5f:87:30:73:
                    6a:54:41:94:ff:a1:5e:9b:36:5c:07:97:88:7a:85:
                    49:db:92:01:a5:40:ad:be:90:b7:0c:52:3e:82:58:
                    fc:a9:11:b5:51:3d:d9:07:fb:01:b3:74:ce:0e:37:
                    52:d4:d2:1f:29:9f:de:96:5f:37:b0:fc:c4:26:11:
                    03:41:c2:f8:f4:86:77:ca:ed:27:b2:8b:c0:e0:80:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:EB:BF:A1:64:D1:DF:BE:2D:A7:F4:B9:6F:87:7D:54:7C:B1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/914c03f5-6d1e-3868-a9d0-50e78788ef42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:09:b9:f1:d0:0e:55:86:3e:4d:f8:fa:a0:ca:67:76:85:
         6b:06:be:11:7e:53:9d:d0:18:df:58:aa:4b:30:35:4e:87:49:
         0e:cc:c6:86:c3:22:18:0b:cc:3a:02:4d:74:05:d7:fc:b2:09:
         17:b0:ca:1e:ac:76:05:f2:bc:c7:89:e9:3e:50:ca:f5:6d:ce:
         d9:61:32:b5:16:69:f4:9c:e2:a0:8c:04:78:91:89:b3:ec:2c:
         26:e5:8d:79:8b:fa:07:42:f9:9f:95:c5:25:19:48:72:79:f3:
         04:c3:8b:52:83:a7:68:20:ec:bd:da:49:c9:18:4f:d8:19:ad:
         9c:91:b8:62:fe:48:39:d2:4e:35:68:d2:36:98:36:f2:66:58:
         b7:fa:ee:e7:7c:64:b2:1a:53:94:2b:81:92:f0:92:a0:b9:46:
         88:3b:b9:f7:8e:bd:bc:8f:33:c2:a6:22:ea:ec:46:6a:71:28:
         c5:08:15:26:e3:a5:23:04:b1:ee:8f:73:03:70:1f:e9:dc:ad:
         cb:db:d6:50:ee:f4:3e:a7:ed:ca:17:44:64:6f:da:13:1c:2b:
         58:8d:1b:c3:a7:ec:06:f9:06:f2:66:c9:e1:e5:d7:26:e3:49:
         8a:6b:1a:b0:cc:02:85:fd:28:77:7f:97:66:41:4d:27:55:3f:
         12:ad:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:55:42 2025 by rpki-client