Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa
File:                     76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa (raw, json)
Hash identifier:          dYWY6iutKNgqCK79ydKg5EMlxVNEYCztmFkGzkI1+/k=
Subject key identifier:   8D:13:CC:5C:29:C3:9C:60:C2:3E:42:7D:1D:52:47:A9:94:26:8D:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8146270A7AF0D85B6FDF8500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        173.19.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:27:0a:7a:f0:d8:5b:6f:df:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=34e55e49-3e3a-4c63-847f-a511f41a5e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:18:85:0b:5b:99:47:83:e2:04:aa:eb:e0:
                    68:59:3a:db:ee:a1:83:d3:52:c3:d2:1b:13:63:1d:
                    72:ec:5f:21:d2:84:25:c4:bd:64:87:03:e8:ca:de:
                    55:15:58:d5:5d:fc:65:a4:26:b7:88:22:5c:f8:77:
                    9d:bf:c7:1e:8c:dc:54:1b:d9:2d:66:2f:a3:ef:4f:
                    5d:47:14:15:09:b3:3d:03:1d:fd:f1:4d:bf:66:4c:
                    8e:f4:d0:00:53:26:3b:61:25:20:e8:a8:dc:43:81:
                    90:92:88:4d:a0:b1:90:55:3c:fe:d8:a9:78:d0:47:
                    f4:8a:a1:e7:7f:82:bc:ec:e7:bb:51:f2:8f:de:12:
                    c4:3c:f5:b0:4a:50:f8:33:ff:d1:6d:56:aa:e5:52:
                    38:87:39:20:9b:97:a6:45:10:7c:33:0d:cc:ee:96:
                    03:42:e3:af:b1:0e:29:43:ad:5f:cc:e9:c4:99:c6:
                    02:90:9b:7f:ab:80:8c:78:b7:36:b6:df:6a:46:c6:
                    e9:3f:f7:52:1b:89:34:9f:9a:de:d9:4c:33:f1:ea:
                    e2:ff:b4:00:40:a8:98:e5:43:37:58:84:a0:3f:bd:
                    9d:49:62:4f:62:70:ee:c4:1a:4d:2b:81:45:51:11:
                    45:dd:6b:b6:a6:85:e7:48:a9:dd:eb:f3:13:b7:b7:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:CC:5C:29:C3:9C:60:C2:3E:42:7D:1D:52:47:A9:94:26:8D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76e60ec9-bfa7-3489-9f0e-0e63b3849f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:88:e9:96:fa:5c:50:61:5d:0b:6f:4c:1d:1a:7e:0f:8c:af:
         b6:c7:76:72:ee:0d:4b:11:cf:37:54:c6:92:17:16:c4:36:13:
         41:af:75:e9:d0:db:fd:0f:99:5e:55:8f:91:32:49:bf:fe:94:
         8f:6c:19:93:71:f7:c4:af:f1:6d:98:02:bd:15:92:fb:0f:0f:
         5e:80:2b:93:68:f6:5b:fe:ff:78:40:c5:8e:93:a4:ed:c6:95:
         08:3c:e4:fe:15:d0:8b:b8:02:35:e8:b2:62:21:eb:ef:46:1f:
         16:74:3e:e6:28:0d:7f:34:8f:34:53:bb:74:cc:ae:14:30:75:
         9a:99:8b:29:0b:30:50:78:94:1c:fe:a6:1a:ec:bc:b3:22:b9:
         04:b1:91:66:0f:de:26:81:1d:e5:67:be:dc:57:4b:ce:f5:50:
         40:03:b2:2e:bb:84:3e:cd:81:1f:6b:61:0a:ce:8e:19:83:d3:
         eb:89:7d:3e:fb:df:6b:3f:6d:c0:b3:8f:d9:76:ef:28:a3:f5:
         de:a9:98:45:7c:89:68:9b:9e:40:29:30:5f:c7:d0:9a:ce:cb:
         15:d9:5b:8f:15:58:ce:40:af:24:fc:f9:c5:55:60:2a:a0:5b:
         54:64:51:2c:1b:63:3e:8c:36:0e:23:6c:34:82:61:1b:ef:35:
         b0:66:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:28 2025 by rpki-client