Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44c24070-623e-352d-84cc-5ddbeeae6ee2.roa
File:                     44c24070-623e-352d-84cc-5ddbeeae6ee2.roa (raw, json)
Hash identifier:          2GsXQbN89GPJ3zgteSn+nhNssanR5iiGxfuaLmPT0+Q=
Subject key identifier:   01:74:9B:09:EB:87:20:F9:56:B3:8D:CD:A9:91:EE:09:18:A3:F8:61
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9270835BD381F5922980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44c24070-623e-352d-84cc-5ddbeeae6ee2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        76.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:92:70:83:5b:d3:81:f5:92:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f1cd6946-aa03-482f-9c73-cfd08a2e0d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:71:1e:ae:75:9c:ac:92:41:d6:0f:c9:bc:
                    db:22:27:ab:45:ec:c6:ac:91:18:4b:55:03:a0:5e:
                    08:6c:6e:2e:98:bb:4c:32:f6:5a:43:97:4f:3e:7b:
                    53:e1:49:7c:79:25:f5:01:da:15:1d:88:4d:34:b9:
                    01:62:7d:b3:5b:67:da:8e:86:86:9f:59:ff:c1:4a:
                    77:ff:a7:d6:8f:d6:8c:f0:4a:a6:68:b4:9e:91:3a:
                    47:24:45:42:d1:3c:96:2b:0f:f1:87:0b:a4:a1:a2:
                    42:07:c0:6e:96:66:5d:ab:4f:b3:61:ac:b8:7d:3b:
                    e6:e7:0f:b6:e5:e0:f2:42:8a:ac:0a:48:0a:93:7c:
                    e2:5f:77:79:3c:16:a4:d5:7d:a7:bb:e7:2c:65:94:
                    62:11:76:26:b0:50:7a:1a:83:1f:7c:cf:39:bf:84:
                    54:a8:3e:51:86:96:8f:ac:0f:20:0a:c4:b7:0e:18:
                    54:94:31:f4:4a:c4:6f:b1:a2:e3:71:e1:a1:46:86:
                    7e:ff:27:17:23:1f:83:7c:dc:67:55:d3:5a:aa:71:
                    e9:c4:49:34:5e:c2:54:21:53:a5:bd:39:a0:10:cd:
                    af:36:80:21:f6:8a:d1:f5:e3:48:9f:d8:76:1f:47:
                    79:9e:1a:8c:41:7f:51:0b:d1:4a:b0:a0:dc:57:df:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:74:9B:09:EB:87:20:F9:56:B3:8D:CD:A9:91:EE:09:18:A3:F8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44c24070-623e-352d-84cc-5ddbeeae6ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:da:04:81:4e:b0:f1:b8:7d:a5:22:c3:eb:c3:37:fa:95:64:
         96:20:c0:6c:bf:8a:b6:cd:9d:08:eb:f8:01:2c:52:97:20:d3:
         13:87:d6:b0:25:55:e8:cb:81:da:06:c1:f4:4f:d7:36:7e:85:
         59:12:1f:70:f6:d8:f0:34:dd:be:f4:0f:6a:13:f8:a9:52:95:
         9b:79:bc:55:34:ff:b3:2b:cc:38:24:d1:40:61:8c:3e:67:52:
         1e:61:54:e6:72:df:91:d2:3a:58:72:99:17:98:cb:83:01:18:
         67:3c:e3:ab:d1:95:30:c2:d5:03:2d:d5:be:95:90:08:18:90:
         02:68:40:de:bf:b4:8d:e9:1c:f2:aa:38:b7:5b:a8:0a:f4:d3:
         e5:69:f8:96:08:d2:35:2c:4b:3a:e6:06:b0:fc:0d:2b:06:fd:
         cb:72:29:b3:f6:9e:0f:25:21:b1:63:a7:e4:95:49:c7:0f:94:
         df:1f:4b:d7:98:0d:e3:fc:39:13:ce:ac:6b:4f:b5:12:90:71:
         3e:13:e3:8a:55:50:e3:ed:ea:f0:1e:10:09:16:8d:63:c0:65:
         e2:ec:16:9c:a6:bd:78:df:b7:70:7e:cd:27:71:80:88:78:d0:
         30:8e:2a:59:e7:a8:e2:57:ef:44:ac:2e:73:aa:a0:f5:68:5f:
         9b:f7:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:49:56 2025 by rpki-client