Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa
File:                     043f76f6-e87a-3227-a9de-4322d167104f.roa (raw, json)
Hash identifier:          SAjClI/I7dIrucFxC5Phga50oc64yHpPv4I4FOVy1cs=
Subject key identifier:   4A:BB:A4:C3:5E:C1:79:AF:01:E8:18:B1:0F:89:CB:1D:A3:A0:CA:9E
Certificate issuer:       /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial:       010D0C9F4328584A506AE3281468876CE4B84FB0
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa
Signing time:             Thu 26 Jun 2025 01:00:48 +0000
ROA not before:           Thu 26 Jun 2025 01:00:48 +0000
ROA not after:            Wed 24 Sep 2025 01:00:48 +0000
asID:                     6341
IP address blocks:        156.76.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:e3:28:14:68:87:6c:e4:b8:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
        Validity
            Not Before: Jun 26 01:00:48 2025 GMT
            Not After : Sep 24 01:00:48 2025 GMT
        Subject: CN=1eb792ec-6bd8-4c63-be99-eadd151a6770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:5c:97:36:a2:b1:fe:4c:93:b6:d1:1a:99:
                    63:5f:88:ae:e6:eb:13:94:83:17:12:e3:14:74:6e:
                    ac:0d:2c:24:a4:79:d5:44:c0:41:14:89:49:81:75:
                    0d:03:da:26:b7:e8:37:e8:19:0e:72:22:06:88:67:
                    1c:4d:b8:b7:01:79:27:58:37:10:64:f9:10:3b:8e:
                    ad:de:dd:81:38:3c:f7:f3:d6:a1:fe:07:03:3e:67:
                    76:94:db:f1:36:3c:d2:91:4b:6c:30:91:d0:68:c7:
                    2c:13:24:4f:36:6c:c6:73:6e:3b:e8:fd:f2:92:7e:
                    62:66:e7:6d:26:46:40:fe:52:86:f8:21:63:64:9f:
                    8b:ea:28:f2:1a:6c:ea:cd:59:01:0d:a2:20:2e:3c:
                    0d:df:f0:eb:83:7a:37:85:29:dc:40:f5:61:83:fc:
                    bc:ce:ed:e7:aa:98:73:0a:f3:73:65:32:ee:7e:3d:
                    c5:53:91:2b:88:4e:00:06:07:cc:d3:86:c5:82:c0:
                    5a:11:d1:01:66:64:81:3f:75:04:de:4f:f0:df:f7:
                    71:d6:b0:0a:0b:17:a6:ad:84:71:24:9b:e0:32:49:
                    8a:5e:fa:64:a1:9d:68:c4:27:17:cc:0d:6e:9c:99:
                    1b:5d:a0:c0:df:78:60:40:bb:bf:0a:69:f6:01:61:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BB:A4:C3:5E:C1:79:AF:01:E8:18:B1:0F:89:CB:1D:A3:A0:CA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.76.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:0f:4d:3e:ea:12:12:18:16:35:0f:5b:b6:a9:01:8a:87:
         a4:bd:b5:7d:93:dc:7e:18:30:50:9a:0c:59:c7:f6:be:d7:4f:
         60:1c:99:92:ea:00:75:78:78:a2:87:2c:14:ce:57:87:f9:c8:
         c3:83:66:12:7a:24:fb:9b:f5:6f:e2:29:9e:98:6e:29:91:53:
         04:1a:11:09:53:d9:5c:f7:c1:b6:0b:9e:c5:22:97:36:29:5d:
         8a:3b:44:54:2c:8e:20:91:35:f1:3d:50:b1:46:1d:75:32:2e:
         4b:fd:bf:c9:60:42:64:e3:9e:9f:b8:5d:d8:30:f2:97:d5:a8:
         d0:71:53:cd:45:5d:31:27:6d:4d:4d:d8:d5:87:eb:e2:59:5e:
         25:f1:86:f1:2a:b1:9a:6b:47:5e:6c:36:18:6f:05:b5:51:b3:
         4b:ad:ba:74:a6:08:0f:e6:ea:91:68:dd:1e:e4:d5:c0:81:85:
         0e:fa:1d:10:4e:38:e9:2c:ac:3c:17:cb:c2:27:91:1a:10:f4:
         06:4b:74:f3:37:d9:4e:ce:da:3d:fa:1f:13:c2:b0:f5:fc:1b:
         cc:6b:a2:14:73:8d:b2:c2:81:d4:c5:2c:31:9e:f8:63:c2:6d:
         69:96:9b:4b:86:e7:68:58:6f:c8:55:82:fd:5f:8c:d2:4b:3f:
         f1:67:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 19:46:24 2025 by rpki-client