Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa
File:                     2173f68c-b59a-3132-8a96-0bf15dff1b15.roa (raw, json)
Hash identifier:          wrHFXckNoRH7oedyLPp7H4F2rP/Sr6BMHx6URjGzn+8=
Subject key identifier:   88:30:95:0C:9A:5B:DB:D1:22:2C:4F:AD:AF:AC:30:B9:24:C9:FF:4B
Certificate issuer:       /CN=77dc753c-bede-4a42-99ae-484402f9795c
Certificate serial:       010D0C9F4328584A5FC5E2755E661BE53737CBC0
Authority key identifier: A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     399337
IP address blocks:        172.110.176.0/22 maxlen: 22
                          208.81.16.0/22 maxlen: 22
                          216.73.176.0/22 maxlen: 22
                          2606:9340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e2:75:5e:66:1b:e5:37:37:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc753c-bede-4a42-99ae-484402f9795c
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=a589a39c-7b75-4ef1-9f45-2e501b3f4a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:b1:71:ba:9b:da:4f:e8:b0:69:35:8c:29:
                    68:c9:be:97:33:a5:f6:58:f7:72:6c:f9:16:14:c5:
                    da:86:46:3a:cb:b4:83:85:ab:9d:31:ee:f7:c7:d9:
                    60:6f:94:25:4b:76:57:b8:f0:99:df:51:aa:6d:a6:
                    e3:69:f6:43:b6:cd:15:7f:f4:48:36:b0:22:cb:8e:
                    b3:81:77:c6:f3:fe:83:9b:ad:c7:2a:b8:5f:24:a6:
                    8b:18:e7:9d:0e:8e:41:59:b6:b9:df:ca:ec:5e:3a:
                    30:d3:fe:03:09:01:73:d2:a5:0b:af:67:7c:10:60:
                    da:73:bd:96:ec:75:e5:a1:38:61:4d:82:ce:e4:af:
                    42:df:b8:f9:8b:41:78:f3:69:13:6e:5e:9d:31:a1:
                    19:a1:c8:20:6d:4a:92:d1:db:f2:27:f0:e4:2c:99:
                    d3:7d:a7:84:31:46:1c:92:fc:41:99:be:d4:6d:9b:
                    a4:47:88:d3:94:51:2e:3f:13:6e:3c:14:be:e2:7c:
                    7b:86:d3:c5:79:b1:81:71:09:e9:f6:de:f3:e2:67:
                    5b:75:e3:54:3f:68:ab:d7:39:a3:69:87:39:0a:6d:
                    7c:0b:47:4e:50:5b:43:2e:c1:1f:8c:42:00:f8:9e:
                    6d:c6:36:60:eb:23:9d:f3:48:1a:a9:1f:ac:aa:46:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:30:95:0C:9A:5B:DB:D1:22:2C:4F:AD:AF:AC:30:B9:24:C9:FF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/2173f68c-b59a-3132-8a96-0bf15dff1b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c/77dc753c-bede-4a42-99ae-484402f9795c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:E7:A3:EA:9E:9C:B6:3D:C9:5D:7D:E3:16:97:55:46:51:9D:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77dc753c-bede-4a42-99ae-484402f9795c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.176.0/22
                  208.81.16.0/22
                  216.73.176.0/22
                IPv6:
                  2606:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:64:50:8c:c6:e2:cc:dd:f8:5f:86:4d:76:cd:96:be:b8:
         a8:72:16:22:e9:ff:96:96:82:bb:4b:a1:ba:cf:9d:e8:48:56:
         ba:7e:0d:2c:f1:e5:ee:4a:e2:2c:48:7e:d4:9f:b9:89:dd:f6:
         a6:c1:b4:13:97:d8:93:46:8b:f7:17:56:49:4f:fc:c0:c1:e0:
         d6:19:4b:05:d8:69:73:73:26:5a:cc:b3:84:b5:eb:1d:54:92:
         27:65:c2:0e:af:f9:a6:88:af:53:bf:37:67:c4:f8:14:11:d2:
         da:39:e0:5c:08:2b:47:50:01:b9:ed:70:ad:67:5a:b6:a5:58:
         33:70:94:1d:67:31:9b:32:fa:98:f1:b9:07:ff:31:a8:bd:4f:
         e7:f7:c8:1f:28:d5:6e:51:2d:ac:fd:34:94:5c:17:d6:f2:88:
         63:9a:4e:e6:12:67:ac:65:10:a4:b3:2a:c5:d6:c9:41:49:56:
         9b:33:e0:a2:06:45:25:40:b7:56:cc:7b:de:66:a2:42:81:4b:
         97:6d:50:1a:85:0e:e2:b3:64:24:bc:47:e4:f0:17:39:cf:10:
         a2:ad:5a:f4:3b:28:c0:fb:cc:03:d9:65:4a:8c:e9:3f:db:c0:
         9a:5d:b0:1a:fd:9a:5f:ae:60:fe:7c:8b:e5:dd:cd:cf:6a:dd:
         9e:3f:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:27:55 2025 by rpki-client